Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File:                     toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier:          uXaSBVBlcj5GKYuEmbQL/yxki/byyFPJUpF6MQHQaDE=
Subject key identifier:   B0:68:D6:B5:44:E6:BF:CA:92:AD:82:C5:F6:E3:7B:10:70:B3:96:87
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       0930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number:          0918
Signing time:             Wed 18 Jun 2025 20:10:26 +0000
Manifest this update:     Wed 18 Jun 2025 20:10:26 +0000
Manifest next update:     Wed 25 Jun 2025 20:10:26 +0000
Files and hashes:         1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: WMEZgknIeivgNTiNgaDKuV0WUIHhCcoWMZbwux5mw3g=)
                          2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=)
                          3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=)
                          4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=)
                          5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=)
                          6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 20:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: Jun 18 20:10:26 2025 GMT
            Not After : Jun 25 20:10:26 2025 GMT
        Subject: CN=68531d32-f274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:5d:f7:c1:1f:79:6b:ce:ed:c4:4f:57:d1:
                    f5:04:82:67:bc:80:29:20:79:04:aa:f8:7e:96:f5:
                    ec:f8:2c:bd:50:36:55:54:6d:1d:16:6a:5e:22:b7:
                    e7:49:98:c6:a7:85:15:9c:8a:df:09:64:45:5c:30:
                    51:d7:76:97:7c:65:61:e6:33:ce:39:58:a7:4d:55:
                    63:f6:b5:18:bd:40:d6:f5:f5:7e:0f:38:15:4d:1c:
                    cb:74:ca:e8:21:4b:fa:05:5a:7f:74:08:2e:88:d5:
                    8e:d1:80:5e:b1:05:62:f2:00:b7:30:58:16:07:f6:
                    5c:66:ce:32:3e:01:34:74:86:26:62:df:54:68:c1:
                    a7:92:95:40:92:56:8d:21:de:b2:46:12:c8:97:6f:
                    2e:32:c7:73:1d:69:8d:05:d5:cb:c4:5b:f6:42:43:
                    fa:f8:7b:41:f0:73:0b:18:60:8d:e1:66:2c:cf:c4:
                    ac:b0:b3:eb:3a:36:de:31:93:c6:95:5a:9b:fb:33:
                    c5:01:12:7a:16:60:1f:d1:94:dd:b0:0a:09:12:ee:
                    df:ad:06:f6:aa:f9:a2:f5:fd:68:1b:46:4b:e7:5a:
                    51:85:56:60:7b:14:ec:84:cb:99:89:74:6d:84:6b:
                    10:93:8d:da:6b:73:58:1b:8e:63:f1:c0:b2:5b:24:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:D6:B5:44:E6:BF:CA:92:AD:82:C5:F6:E3:7B:10:70:B3:96:87
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:55:4d:f3:6e:1a:68:9d:23:2b:a0:87:ef:9e:ec:fe:e9:91:
         93:33:38:6c:7f:74:0c:1e:05:19:83:e0:6d:b7:51:1a:22:a0:
         3a:f3:fe:86:eb:44:50:80:0e:e2:b0:7c:2b:fd:c4:aa:48:a2:
         c4:20:9a:c2:8f:ea:26:da:af:83:41:a0:fb:46:ba:74:00:fd:
         b3:69:0b:90:6b:39:5a:14:3c:fd:f8:6e:33:cf:f2:f5:20:c7:
         f5:8c:7d:38:9f:a2:86:9d:46:d8:43:51:e8:f1:6b:59:a4:24:
         72:f5:17:b1:36:2e:38:3e:06:31:5c:de:ce:17:05:dc:5c:f0:
         ea:4c:5b:1d:71:d3:3f:ba:d5:0c:bc:aa:47:39:4f:c8:b1:ff:
         05:c3:19:a9:94:89:56:6c:72:1e:7a:aa:d8:be:f6:55:8d:11:
         83:c9:2f:cd:2c:d5:fd:00:96:89:8e:0f:a4:fc:b8:7a:98:67:
         d0:b5:39:d3:13:6f:ba:bc:73:02:5a:f0:6f:20:b1:15:0d:58:
         eb:ea:bb:f1:03:f2:78:50:b8:a8:a2:09:76:ed:b6:9a:f6:b0:
         69:eb:0b:0f:8b:ea:34:7f:29:51:f8:4b:da:3b:38:97:39:8e:
         c2:18:9d:c5:54:eb:65:f8:5d:5a:10:a5:fa:60:bc:c0:69:e9:
         45:28:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:06:13 2025 by rpki-client