Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File:                     -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier:          yWSQNpMSbFfdEAsdIGohYBqc4r1PLxAqBTDoXg1xVLs=
Subject key identifier:   23:E2:F1:82:06:D9:63:61:73:16:35:63:07:BD:F0:87:3B:CC:BB:69
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer:       /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number:          0628
Signing time:             Thu 12 Jun 2025 22:22:22 +0000
Manifest this update:     Thu 12 Jun 2025 22:22:21 +0000
Manifest next update:     Thu 19 Jun 2025 22:22:21 +0000
Files and hashes:         1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: D8mW5L9+YQYvsG1ByC4P9UFK6tqL6nTxPXKV6b5Z2ng=)
                          2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: OXMHoo8Egs65FUqbV0ME5rvmbJEFphKa1wlI6laYOWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
                          rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
        Validity
            Not Before: Jun 12 22:22:21 2025 GMT
            Not After : Jun 19 22:22:21 2025 GMT
        Subject: CN=684b531d-09b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:5a:8b:06:47:bf:b8:40:89:e8:ba:f5:16:
                    b0:e2:6b:5d:fd:17:4d:3e:26:8e:5c:a4:f5:9b:1d:
                    97:52:34:f2:7b:32:e9:05:dd:09:a1:ae:1a:a5:e4:
                    21:ee:7a:96:03:ec:6b:6c:65:d2:22:0a:21:86:6f:
                    39:49:6f:43:82:6a:5c:77:2e:db:3d:3f:49:94:66:
                    1d:a7:78:e2:f1:18:cf:a5:17:fd:91:52:6c:aa:93:
                    fc:22:4e:c6:5f:3f:ed:00:bb:a3:8b:0b:0c:7b:ea:
                    d8:be:71:7b:94:c7:2a:85:87:29:98:16:de:72:88:
                    30:d8:8d:98:b7:83:e0:5e:90:eb:2c:7a:fb:69:9f:
                    5d:80:7f:a1:29:10:7c:40:f0:71:7e:e0:5a:1b:09:
                    5b:68:fb:14:18:cf:3c:98:36:a8:cd:da:ec:ee:09:
                    19:c2:69:78:26:6a:8f:2e:1b:89:33:84:bb:ed:46:
                    87:48:fa:a9:a9:e0:f4:19:4f:ec:f1:c1:1f:3e:ed:
                    04:e3:48:30:38:a9:49:c9:04:ea:81:81:11:ff:9f:
                    58:6d:97:43:ec:8b:29:0a:c5:77:4f:72:2d:40:47:
                    6e:f0:4c:68:cc:d9:f2:f9:f8:a8:ad:b8:f4:24:60:
                    ab:26:2a:ee:1d:87:92:da:22:de:0c:28:70:c7:2e:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E2:F1:82:06:D9:63:61:73:16:35:63:07:BD:F0:87:3B:CC:BB:69
            X509v3 Authority Key Identifier:
                keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:57:34:09:36:a3:e5:a6:c0:8b:a8:26:74:c2:44:b2:b7:ab:
         7b:bc:1d:cb:7d:e5:2a:a0:a9:dd:f2:a8:07:c5:4c:85:7b:71:
         2b:18:0e:2f:bc:e8:68:26:9d:57:4f:d4:95:4f:00:ba:ac:98:
         14:51:2d:40:8b:30:7a:40:3c:73:4d:4a:1c:41:8a:24:c1:35:
         81:91:54:7d:59:a5:8b:c9:c5:7a:fe:1e:14:08:1d:90:6f:75:
         a8:30:e1:9f:eb:b1:cc:da:c2:b3:f5:b4:f4:9c:0a:53:b2:f6:
         95:3c:f4:6d:c8:a7:f5:f4:4b:eb:51:5b:37:86:f6:bc:f7:3f:
         cd:17:0b:7b:49:57:ab:45:36:94:5b:78:d4:89:42:17:16:4a:
         e5:d6:42:33:6e:cb:79:4e:96:8f:cd:95:f6:d0:1c:fd:63:ad:
         eb:96:d2:58:0f:ea:ff:ab:25:af:8a:be:1e:06:b3:b6:4c:f0:
         1c:16:16:74:58:32:40:48:1a:85:df:9d:bb:db:f3:95:33:bc:
         62:f5:c2:e6:10:ac:ec:ee:db:9c:11:ae:bc:e1:7a:32:7c:8d:
         d3:c4:67:33:5f:68:63:da:6c:7b:c9:f0:14:53:62:5b:6a:ef:
         ca:a4:ce:87:08:59:87:32:42:7b:07:94:f2:7e:5a:2b:b8:31:
         86:31:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:26:54 2025 by rpki-client