Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File:                     1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier:          D0g3G/a0mZ8C0Sk9gnhYd+leu8IhH3sqb+6kZN0PVQE=
Subject key identifier:   B1:0D:D5:94:7B:3D:3A:CA:56:34:88:DC:47:6F:AA:08:37:9C:78:76
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       0342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number:          0337
Signing time:             Sun 15 Jun 2025 00:48:36 +0000
Manifest this update:     Sun 15 Jun 2025 00:48:35 +0000
Manifest next update:     Sun 22 Jun 2025 00:48:35 +0000
Files and hashes:         1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: 6OAiwt1vwBi1LyjQ5e/t2xaqXD36s1jljcItxIgPeqc=)
                          2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: 4vLurmpeiFN7tjyB91fDIOCK/d511+2WLb9SGBrwU1k=)
                          3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: 28rk2f2SK8fYlNSOWgKUvbvWyh9sktvms5gVEW96hEM=)
                          4: F0E906D6046C11EFBDB55E14C4F9AE02.roa (hash: XvChKVsKHEK1ZO1syDy5U6icCS7rFP0XZCWXt+ycNCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Jun 15 00:48:35 2025 GMT
            Not After : Jun 22 00:48:35 2025 GMT
        Subject: CN=684e1863-108a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:5b:e7:6b:c7:8a:3d:fe:0d:e3:68:e7:a9:
                    e1:4d:ea:f1:12:2b:a2:a4:00:c9:bb:69:ed:27:13:
                    ac:5b:40:28:ec:19:aa:b4:2a:ee:1b:5f:e7:a9:d5:
                    7e:db:46:4c:72:87:c6:8a:e8:7f:d2:5b:24:1f:6d:
                    97:de:0c:e5:e0:52:f2:94:9d:05:9b:96:e7:4e:8b:
                    55:6e:e4:6c:70:de:02:f3:87:64:a5:7c:c8:37:96:
                    33:60:7b:53:f9:c6:f1:62:17:c2:9a:46:54:32:d1:
                    7f:69:08:1c:6e:57:6b:ac:96:48:15:40:83:ef:8f:
                    44:83:62:cd:14:50:69:84:07:c6:5e:4c:ba:78:9e:
                    c2:71:49:05:a3:e5:23:0a:80:9b:e1:f1:6b:b1:6f:
                    58:19:0a:9a:3c:2a:5c:a3:c0:e2:b6:ba:5a:24:5b:
                    51:6e:f6:a2:44:da:a6:6c:d6:91:17:4a:6f:ae:6f:
                    37:39:73:3a:63:15:97:7a:d4:f7:75:75:fe:43:1e:
                    14:85:a6:19:fc:c8:e2:54:3a:6c:aa:ae:ed:06:fc:
                    6f:0d:1f:19:54:13:79:1c:0f:5d:e4:29:61:89:2d:
                    25:ec:53:68:1f:a5:15:46:5a:f1:69:4f:c3:7f:03:
                    ba:65:3e:bc:de:af:68:be:cc:cd:7f:e4:fe:0e:69:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0D:D5:94:7B:3D:3A:CA:56:34:88:DC:47:6F:AA:08:37:9C:78:76
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:48:7b:23:47:68:23:20:82:5a:7e:1a:45:15:8b:2a:1b:d4:
         bd:19:71:7b:43:a4:1d:76:fc:93:19:ef:cd:1c:ef:2e:fc:29:
         75:d3:4c:1d:6d:1e:2c:5e:b0:41:f8:a3:ff:9d:95:65:a9:48:
         20:d3:6a:69:31:58:24:68:df:23:d8:06:23:2b:b6:83:2d:2b:
         e5:62:43:b7:b3:7a:50:7f:c8:5f:2b:ba:ae:e8:a7:8a:fb:8e:
         bb:9b:25:37:01:d4:70:f6:7a:cb:f1:d5:eb:45:ac:bd:80:bb:
         4a:11:c0:21:71:18:fd:ed:b4:8d:c2:91:65:68:d7:57:03:d2:
         78:c0:d2:3e:b1:d3:81:19:e8:08:7a:87:7f:34:9b:d6:b7:2c:
         fa:31:35:11:7f:69:dc:d4:f3:49:40:70:7c:6e:7b:65:a0:da:
         08:02:9a:d8:e8:ba:54:bf:3a:43:60:0c:c8:c7:d7:a1:e2:f9:
         e6:bd:62:3e:b3:c7:5d:dc:fc:76:36:ea:9e:27:4e:2d:4f:03:
         6b:8c:ec:81:17:69:4b:bf:be:1e:44:7e:13:ee:ea:c6:21:25:
         48:ce:59:33:ce:f3:6b:91:6d:88:30:6d:a5:e0:7b:6c:4d:30:
         d0:a7:7a:61:cb:2d:f5:9d:e9:93:92:0f:99:03:c5:b3:02:26:
         b1:eb:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:15 2025 by rpki-client