Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File:                     79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier:          dmmHF1oBj4o6ro/dgBhWx2s6QJNyyoJSOSenD0s1+OQ=
Subject key identifier:   6F:20:FD:A0:83:4A:7C:EF:A9:A1:C9:FD:B5:8D:AA:9C:63:7F:63:B9
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer:       /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number:          0686
Signing time:             Thu 12 Jun 2025 21:54:47 +0000
Manifest this update:     Thu 12 Jun 2025 21:54:47 +0000
Manifest next update:     Thu 19 Jun 2025 21:54:47 +0000
Files and hashes:         1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: BaGusgHxdC3ZSqSuc9+SkR8ozVFideq4YdtCandAMWQ=)
                          2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
                          rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
        Validity
            Not Before: Jun 12 21:54:47 2025 GMT
            Not After : Jun 19 21:54:47 2025 GMT
        Subject: CN=684b4ca7-a1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:df:74:7b:47:83:92:3a:bf:66:41:52:d4:
                    84:b4:cb:21:c6:26:6c:d6:c3:ed:65:25:7b:6c:25:
                    97:d1:1b:ff:58:0f:ba:93:ec:cb:22:35:f9:4f:a1:
                    50:2a:5d:6f:5f:57:b3:cc:33:97:3c:3d:4d:65:d6:
                    54:ad:9c:71:b1:4b:f3:c3:e7:e9:ce:66:31:06:d6:
                    9b:d6:f8:40:e0:56:e1:bf:70:86:90:f5:0e:28:3a:
                    d9:89:01:ce:92:e3:1f:0a:00:ed:0c:7e:c1:64:e9:
                    26:a4:a8:b0:b8:ee:72:03:f9:46:19:16:69:6f:e2:
                    70:a7:54:39:ff:5f:23:27:1d:83:1c:94:a6:91:a3:
                    31:54:5f:c5:99:37:33:87:0f:ed:ea:f9:94:a0:08:
                    0a:fd:88:9a:4d:12:8e:59:28:52:92:f5:08:65:2e:
                    cc:14:cb:b8:53:8d:51:b0:dd:2f:9e:3b:a8:55:8e:
                    62:18:59:4c:63:04:e2:2b:88:60:88:03:97:a8:ad:
                    2e:ee:b1:18:a1:3e:9f:ad:5d:40:37:29:30:0b:08:
                    c8:1d:69:69:e0:b2:16:0a:1b:38:26:26:83:d8:3e:
                    12:01:3f:52:66:bd:df:ed:96:85:ef:0d:61:e6:6b:
                    02:3a:a5:ab:f0:aa:39:ac:7b:51:d8:45:6f:fc:6c:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:FD:A0:83:4A:7C:EF:A9:A1:C9:FD:B5:8D:AA:9C:63:7F:63:B9
            X509v3 Authority Key Identifier:
                keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:8c:10:f8:fb:6f:ca:3d:96:b4:ce:fb:fa:7f:88:99:21:
         1d:3e:0b:5c:3d:e4:a0:11:91:fc:3f:e0:e8:2b:e6:eb:9d:e5:
         51:8b:43:9b:93:39:88:ef:a1:a7:be:1c:26:35:4b:85:2a:c2:
         a4:03:1d:76:cf:7e:f3:45:36:a5:99:1f:cf:92:aa:55:46:87:
         87:dc:dd:20:8c:19:e2:df:ed:48:33:db:ec:af:25:68:d3:03:
         b6:96:c6:e7:44:40:37:87:41:13:aa:0a:2d:ab:76:62:e6:9f:
         21:54:1c:bb:9e:d4:7d:0d:4d:35:4a:11:49:5b:d6:26:7a:4c:
         0c:62:0f:5b:4b:37:2c:1e:f1:41:ac:9a:9d:8c:11:f9:93:ea:
         20:58:bd:69:26:a7:04:c6:a5:90:bc:a9:84:82:34:68:74:44:
         49:f4:6e:16:68:df:bc:33:25:15:2e:5d:83:51:d1:19:0b:eb:
         e4:08:ae:46:01:cb:f8:cf:29:90:71:1b:e6:b8:da:81:5f:3b:
         0c:88:fb:6f:4c:fb:95:77:5a:61:df:9e:f2:78:66:5c:36:49:
         d3:de:20:89:ce:1f:86:8f:88:c0:8e:1d:bc:e0:4e:3b:5a:f0:
         05:36:b5:3c:1e:7e:98:fd:40:28:2f:85:58:01:41:7b:c3:0c:
         cb:c8:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:26:57 2025 by rpki-client