Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          QMIoGCHUdNeW6dLbLmIhOt6e7qzsyNPd1gpNZm9dIvg=
Subject key identifier:   EF:7A:9A:42:91:B3:03:D8:D8:73:2E:6C:28:F5:04:06:AE:94:F7:AA
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       0689
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          0677
Signing time:             Sat 14 Jun 2025 22:06:12 +0000
Manifest this update:     Sat 14 Jun 2025 22:06:12 +0000
Manifest next update:     Sat 21 Jun 2025 22:06:12 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: LUycx3rEbBbhc+N1j4ITLFtj8el9bOsayQb8/BuUzq4=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Jun 14 22:06:12 2025 GMT
            Not After : Jun 21 22:06:12 2025 GMT
        Subject: CN=684df254-89fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:c1:d6:00:f3:1c:43:1e:f2:bb:20:6e:6a:
                    37:15:c6:88:b0:fb:cf:38:37:5a:7a:6b:9e:7d:62:
                    ae:21:0e:97:f8:44:23:25:d6:35:c3:7d:87:d6:c8:
                    bc:81:29:eb:d5:00:c3:0a:5e:f0:5d:f8:fb:61:54:
                    42:08:c9:3a:fa:24:d6:4c:d7:bd:73:1b:4c:69:7c:
                    1a:55:c2:5f:46:b8:43:a7:79:fa:85:65:41:77:50:
                    e6:12:fe:d0:57:66:af:0a:34:54:13:d9:1f:fc:f6:
                    21:e9:36:cf:22:5d:55:64:f7:c0:79:bf:3f:4c:27:
                    2a:32:e6:24:71:73:13:23:f3:35:ab:08:5f:1e:db:
                    a3:d3:91:50:26:7c:9a:29:33:6e:ec:92:2b:d4:2c:
                    9c:b3:76:0d:5f:1d:ac:ad:bf:93:0f:38:33:a5:86:
                    35:95:3c:cc:ac:8d:7e:a8:dd:e6:3e:3c:7f:20:34:
                    49:06:ea:9d:83:48:3b:12:3c:26:72:e8:46:71:9d:
                    3c:98:bd:b0:52:fb:d7:77:1c:ee:40:c6:ce:1e:64:
                    bf:7d:8d:82:0b:f6:1a:51:cf:23:9b:26:4a:02:42:
                    83:a5:ad:df:2f:12:df:a2:29:24:00:7c:66:a4:c4:
                    86:92:19:70:7f:c4:f4:b9:3f:e5:2c:a4:e8:82:60:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:9A:42:91:B3:03:D8:D8:73:2E:6C:28:F5:04:06:AE:94:F7:AA
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:f1:41:54:92:99:9f:47:b7:40:5f:1e:d7:ca:49:39:dc:
         eb:99:e2:73:af:1a:fe:54:72:78:b9:43:fd:de:53:c9:36:b4:
         df:01:da:37:d7:b6:4b:a4:02:d8:bd:92:40:b8:89:ee:2b:fd:
         55:30:bb:10:f4:40:af:f0:27:86:38:d9:3d:b3:83:0e:4a:f9:
         8b:66:99:ec:82:05:f4:b9:15:fa:da:3f:a2:14:87:96:bd:d5:
         90:94:b8:b1:b7:80:f0:9c:a1:bf:98:4e:5a:bb:d8:48:f9:44:
         aa:39:72:96:f9:22:80:01:6b:26:b0:6f:da:7b:8b:1a:5c:f0:
         42:b2:f1:77:f1:70:05:56:be:d2:89:b4:ae:37:2b:c3:3e:21:
         ee:f4:ee:c2:60:ef:47:f8:eb:db:fc:d0:90:ce:81:cb:d6:a6:
         19:7d:ad:5e:db:88:7c:57:81:b8:d6:30:f9:63:44:0f:c3:da:
         84:5d:3c:7c:af:09:52:d3:5e:21:15:cf:c0:ea:c5:80:df:6c:
         e1:d0:1f:ce:c9:88:ac:b7:5d:ab:17:2a:c0:b6:a5:17:9f:4e:
         dd:35:ab:5a:c8:0d:77:b7:9d:ee:8f:3e:df:13:49:d8:cb:6b:
         31:3e:58:93:a5:28:06:58:c6:60:6e:b1:46:02:54:7c:a0:28:
         00:7d:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:36 2025 by rpki-client