Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          D07N1M16JGtO1zVLZhq0MaPQLtbX5CJ/xYGQubkf/QQ=
Subject key identifier:   A3:68:3D:DA:2C:85:94:4C:DE:A6:75:E3:4C:E3:32:3A:88:51:37:C5
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          067F
Signing time:             Sat 14 Jun 2025 22:02:28 +0000
Manifest this update:     Sat 14 Jun 2025 22:02:28 +0000
Manifest next update:     Sat 21 Jun 2025 22:02:28 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: oiBOk7Gmh8W5DResen/I1NVN5If49+xglcIGD0caa/o=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: Rk/+lADA6gcgkQ0X84YplZfwCDuN0k5YWfT7OkmFseI=)
                          3: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: qQOIJ0lcwqmCJOnDFoB5aMDri/0+odCLlhKVJ/uxcsQ=)
                          4: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: /OB040tMw9qyOdBlNACkUKZ8Xy3MrWKpNRv3p9KED/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Jun 14 22:02:28 2025 GMT
            Not After : Jun 21 22:02:28 2025 GMT
        Subject: CN=684df174-272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:f4:3d:84:30:86:92:56:ca:51:42:73:ef:
                    53:45:75:8c:d6:ad:4a:60:36:a5:ff:9f:5d:37:89:
                    02:b0:2f:69:5a:8b:1b:ee:2f:2e:b1:c1:d0:e4:9c:
                    bf:81:05:88:a3:90:f2:6e:9d:25:87:e5:87:a3:67:
                    09:3e:95:df:20:f9:20:9d:c0:ab:77:1c:2d:5a:65:
                    60:fe:8c:71:ff:2b:c6:1c:95:ee:0d:d5:c6:08:4b:
                    7b:99:9f:61:c1:cf:cf:10:08:dd:61:29:b8:64:99:
                    27:ef:07:1f:d7:e2:1a:65:7b:39:12:b4:e3:02:a4:
                    a3:15:14:a4:a7:70:a5:a4:0c:62:46:18:5b:9e:aa:
                    26:cf:42:c3:94:95:9b:95:4a:9c:7c:af:d1:dc:06:
                    d5:02:83:90:3a:15:06:34:5e:26:93:c0:77:3d:35:
                    a5:4b:2b:7e:b3:5f:ca:5a:c7:3c:d7:c4:fb:c1:ed:
                    8f:eb:36:be:df:d4:96:dd:97:8d:3b:ed:06:53:ba:
                    d5:4e:d5:2b:e5:53:17:68:07:9c:ab:8e:87:e8:98:
                    0c:ec:ea:09:ff:db:b6:b3:0f:91:70:90:c1:19:ee:
                    a3:a9:fa:c8:98:de:b2:6c:cd:4d:21:1e:c1:42:79:
                    90:47:64:4a:01:02:b3:20:30:d5:6b:a0:0f:c8:97:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:3D:DA:2C:85:94:4C:DE:A6:75:E3:4C:E3:32:3A:88:51:37:C5
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:10:56:46:f5:7d:39:05:3b:e2:7c:41:2f:a3:56:b8:06:3d:
         d4:6e:0a:69:d9:5e:46:ea:85:49:1e:74:18:41:34:b4:6a:f5:
         b1:33:44:ab:29:04:c8:e2:ed:93:eb:e4:e7:99:05:6f:bb:97:
         2f:a7:60:8f:bb:80:a6:9c:42:fc:46:3f:13:9f:d7:e7:86:b4:
         8e:c9:c2:20:da:5c:4b:4e:a6:e9:ba:91:7e:b3:3e:98:7a:39:
         af:79:aa:55:ae:b8:dd:1c:f4:4e:21:fc:9e:80:02:ca:8d:5a:
         17:bd:8b:22:b0:b9:d2:61:44:f5:a2:3b:55:96:5c:fb:23:3d:
         89:1e:a9:44:df:a5:de:0a:39:95:2c:e6:30:80:12:b6:03:9f:
         22:34:47:07:27:6e:52:51:ae:64:b4:97:bb:bf:9c:56:9b:13:
         5c:6a:45:22:ca:1e:ca:1e:70:7d:52:21:ad:97:93:1c:be:63:
         6a:af:a9:67:19:7f:44:ce:a6:0f:0b:5b:b8:68:ef:20:62:50:
         af:e8:be:da:61:7b:cb:12:44:ab:cc:05:40:80:cd:ac:5e:33:
         8b:24:05:de:ff:cf:56:db:98:1c:ed:c0:f0:cd:f5:3f:21:71:
         e3:56:0b:0f:26:44:5e:43:af:0c:ea:62:e0:3f:ec:4a:45:d6:
         66:fc:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:37:14 2025 by rpki-client