Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
File:                     08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json)
Hash identifier:          em3aDerA1Q6kK11kq66T+jyGqHw/4LTQcFc6tfWAKzk=
Subject key identifier:   98:44:32:B9:30:F8:FA:3F:3D:CF:85:23:7A:64:25:9E:3D:4A:8E:C3
Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8
Certificate issuer:       /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
Manifest number:          031C
Signing time:             Sun 15 Jun 2025 00:52:25 +0000
Manifest this update:     Sun 15 Jun 2025 00:52:25 +0000
Manifest next update:     Sun 22 Jun 2025 00:52:25 +0000
Files and hashes:         1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: tle5v11AgsC42yj7Jpcdjb4z+UsLRnp+cUmTP1vw4lI=)
                          2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8
        Validity
            Not Before: Jun 15 00:52:25 2025 GMT
            Not After : Jun 22 00:52:25 2025 GMT
        Subject: CN=684e1949-2409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f5:4b:1f:12:f6:fa:08:5b:ff:4c:f0:95:16:
                    02:1e:59:3b:43:42:6b:b8:68:9d:24:bf:7f:f7:b1:
                    f7:0c:0d:94:d9:06:2a:1b:47:02:dd:52:39:06:01:
                    ef:94:3d:6b:b1:90:fa:db:ab:21:0f:cd:19:c0:64:
                    8b:f3:d1:7b:82:71:9c:af:3c:db:36:09:d3:4a:a9:
                    d4:80:8e:6b:f9:58:1d:94:85:9c:9e:5d:17:37:28:
                    c8:a2:4f:b3:8b:5c:15:20:bc:1a:6b:ca:79:2c:67:
                    da:37:eb:c2:8a:11:eb:5f:5b:9d:4d:9c:f1:ec:60:
                    c2:e6:93:c7:e3:88:1a:90:52:01:76:59:26:f2:8c:
                    75:39:97:2d:3e:da:ac:c7:4b:40:1e:4b:5c:c3:05:
                    1a:1c:52:ee:e8:a8:d2:cb:4f:f2:2c:05:0b:84:49:
                    48:12:61:02:b8:de:23:75:66:f4:83:7c:68:85:30:
                    19:8e:a3:26:21:58:0e:40:9b:ef:c3:71:d4:62:42:
                    5b:9a:4b:92:c2:6a:9f:2c:25:f9:50:da:e7:9a:5b:
                    60:85:9f:8a:08:7d:20:ba:f0:8d:89:7a:ec:52:57:
                    f4:20:bd:4b:6e:a2:d1:42:43:1e:c3:44:b2:72:16:
                    9d:43:7f:24:13:c3:ed:8e:b6:38:ed:cc:eb:01:63:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:32:B9:30:F8:FA:3F:3D:CF:85:23:7A:64:25:9E:3D:4A:8E:C3
            X509v3 Authority Key Identifier:
                keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:bc:0a:65:26:0c:cd:ff:2d:4b:b8:5a:3a:6d:18:6e:15:
         e5:dc:25:e0:1c:94:e9:ae:32:10:f4:a7:7c:81:b1:b6:e9:37:
         b2:82:e9:c9:05:bd:fe:26:25:0d:2e:ac:3f:e3:21:e2:f4:06:
         90:ac:3d:52:6c:2f:a5:e3:b2:9a:ef:f3:a0:ff:5f:42:95:72:
         94:ef:3c:fa:44:65:8e:9b:62:3e:0c:c2:85:31:02:e8:39:01:
         6d:02:16:03:c2:46:ac:3c:f5:06:f4:d8:eb:92:fb:ee:c9:a8:
         d2:b6:7e:fd:45:81:ea:47:e0:3c:19:6f:73:8c:0d:09:1f:b9:
         a1:d1:8c:84:3b:0e:59:64:2e:53:8e:a9:e2:32:41:e6:8e:61:
         74:73:2f:09:41:04:f0:ff:a8:ae:74:93:7a:8a:6e:b0:7d:99:
         00:21:a7:c7:9f:01:59:dd:22:00:cf:45:86:cf:18:96:80:be:
         23:6a:dc:d4:17:8d:88:58:c1:f6:da:b1:ab:d5:d6:ca:ab:c0:
         a9:91:f2:5e:36:17:8b:b4:5e:3c:7c:46:0d:48:d7:ea:67:39:
         42:3c:ec:e1:ab:8e:c6:9f:2a:5e:e0:66:b5:35:bd:df:25:ec:
         13:1e:ee:ca:5c:d7:d8:bd:5e:55:65:fc:41:21:75:e5:c7:0d:
         6c:f1:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:09:23 2025 by rpki-client