Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          R3N+F4oodm23KMNjRt30T+rztJkE52LRoV17g6j0CnY=
Subject key identifier:   F5:D9:56:ED:C7:30:C2:26:6B:FF:97:39:F3:34:6E:15:69:1D:EB:15
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          0512
Signing time:             Sat 14 Jun 2025 16:20:10 +0000
Manifest this update:     Sat 14 Jun 2025 16:20:10 +0000
Manifest next update:     Sat 21 Jun 2025 16:20:10 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: 3lMLrJdoTJ4HmCaSqO8HVdk5OgfQA15I1+OU3KT0LD0=)
                          2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=)
                          3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=)
                          4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=)
                          5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=)
                          6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Jun 14 16:20:10 2025 GMT
            Not After : Jun 21 16:20:10 2025 GMT
        Subject: CN=684da13a-22fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:4d:b2:06:55:65:8e:d9:41:a2:96:0b:9b:
                    f8:ef:be:74:ad:6f:84:8f:31:3b:88:04:79:4c:21:
                    01:c7:34:85:87:6b:d9:f4:bb:53:23:fd:b8:95:33:
                    c3:62:7f:66:ac:68:95:42:4d:8f:54:7c:86:e3:50:
                    f8:e9:c2:54:7b:0c:cf:81:c8:d8:f7:ff:01:ba:9e:
                    ae:93:be:33:a1:19:a9:eb:60:81:c8:ea:56:cf:f8:
                    a6:15:5d:d3:44:9b:89:9e:d2:d6:5d:6f:fa:09:4d:
                    9f:5b:c9:0f:fc:cd:25:83:ae:b0:69:5a:2e:14:1d:
                    67:07:d6:cb:3a:e8:a3:17:b4:a0:7d:c4:5d:8f:35:
                    4e:8d:3b:ef:6f:25:a9:dd:2f:f1:9a:2f:30:cf:7c:
                    02:62:e5:e4:04:fa:d6:c6:45:8e:a8:73:a9:05:f8:
                    12:f6:db:a4:31:30:2b:a5:79:51:aa:d5:4e:ff:b2:
                    18:04:84:af:5d:7a:0e:52:e7:a1:81:38:d5:e8:70:
                    64:4e:3f:71:f9:0a:ec:ec:e7:79:53:a5:af:82:7e:
                    ef:27:22:b6:a0:da:95:74:7c:f3:45:85:4d:29:01:
                    f0:27:8e:9a:1f:d5:56:ab:72:a8:8e:2f:d7:49:87:
                    30:2f:8f:32:ed:04:91:09:ff:db:54:09:b9:b9:e2:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D9:56:ED:C7:30:C2:26:6B:FF:97:39:F3:34:6E:15:69:1D:EB:15
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:06:96:04:2d:23:93:4d:70:37:96:e1:ec:f1:62:ff:d7:2d:
         9a:d2:8b:7c:ed:c5:6b:ca:bb:cf:dd:e1:f1:60:9c:31:cf:72:
         59:37:89:7e:19:35:91:88:a0:21:0c:80:7a:75:83:d6:eb:9f:
         bb:47:09:36:5a:49:2d:b6:00:e0:34:27:76:95:bc:5c:9e:0f:
         53:0f:90:b8:cf:9a:49:47:00:a9:25:85:7d:bb:ec:ff:b0:81:
         cf:04:53:78:19:fc:c9:93:ab:8c:fb:85:38:82:9d:4e:80:b6:
         8b:c4:4c:67:5a:96:95:5b:ca:4a:c1:e2:b3:36:d6:b2:4e:32:
         56:35:67:57:b3:ee:f2:81:40:1e:39:2c:bb:0c:64:3d:62:ec:
         7b:d4:25:2f:36:d3:18:39:bf:f8:97:7d:9e:5a:68:6c:f5:98:
         44:fb:5c:e4:28:66:c7:c7:53:f0:66:0d:9f:03:28:9b:22:98:
         b6:a0:7d:14:8b:7f:81:e1:25:9e:89:17:14:d6:56:ae:47:71:
         62:2c:77:21:80:e6:d4:83:6d:9d:7e:a9:e4:54:a8:5b:58:3e:
         0f:dc:b9:a9:d4:b1:2b:c5:b8:c5:8f:b2:5a:e3:ad:4b:30:7f:
         62:3b:2a:89:65:d3:7b:6c:8d:6d:f0:e6:0e:9e:f1:a8:07:c1:
         72:12:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:47 2025 by rpki-client