Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          0pPtqI5XE41G41qH5oE20pUDTzLvkx5oX1gPPtJPiFk=
Subject key identifier:   B0:64:81:62:AE:53:8B:61:41:7B:78:4C:D5:01:E6:3C:6E:79:19:32
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          088F
Signing time:             Sat 14 Jun 2025 20:23:08 +0000
Manifest this update:     Sat 14 Jun 2025 20:23:08 +0000
Manifest next update:     Sat 21 Jun 2025 20:23:08 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: 1N0vNaH312Qq9cYmKeLhtPHh9MtPgF1q2Gl9IlZ7Itg=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Jun 14 20:23:08 2025 GMT
            Not After : Jun 21 20:23:08 2025 GMT
        Subject: CN=684dda2c-3ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:db:e7:43:85:c7:1a:6f:b2:44:ee:91:1c:
                    d7:a8:6f:c8:3f:3e:8d:e5:3f:84:cb:d2:62:01:f5:
                    9d:d7:67:7f:60:98:4a:88:06:51:be:00:b4:10:da:
                    34:92:31:50:74:c2:08:97:c3:dc:92:46:8f:74:b6:
                    a4:cc:32:0c:e1:a3:08:92:81:c8:0c:f3:2d:fe:c2:
                    11:4b:87:0a:50:03:04:11:0b:60:29:b9:1d:35:17:
                    8e:0e:30:c8:f7:00:c0:3d:17:4b:c5:24:9d:02:ff:
                    ae:44:d8:e2:7f:4e:b3:0a:1b:d6:56:60:1d:29:5e:
                    04:75:da:de:a8:e1:ad:a9:40:83:67:70:0e:1d:74:
                    ad:01:cd:6d:69:aa:7b:4c:0e:16:5f:ae:77:06:e7:
                    94:15:4c:51:5e:9b:84:17:c2:03:ad:21:29:40:28:
                    1b:e1:50:70:40:74:71:bf:c6:70:5a:53:34:84:03:
                    e3:64:e1:b1:8a:11:7a:20:9e:c1:23:92:18:c6:6b:
                    b8:d5:23:aa:47:2e:b1:76:aa:02:28:cc:00:58:21:
                    e4:5d:67:bb:e4:c0:c9:22:2e:7b:82:26:98:da:a8:
                    62:11:c1:72:0f:a9:f0:7d:08:32:45:eb:6e:a6:c9:
                    1b:bf:77:35:9a:8b:bb:f8:42:27:28:b9:b3:6c:94:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:81:62:AE:53:8B:61:41:7B:78:4C:D5:01:E6:3C:6E:79:19:32
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:9c:31:81:1b:06:df:02:03:6b:ae:36:03:77:81:36:69:
         97:81:62:bb:8f:a1:78:c7:ae:fc:8c:81:14:79:b6:2b:4d:f9:
         ee:68:04:88:d8:98:2d:5e:9b:e0:f9:1b:0f:fb:d1:91:50:8e:
         4c:78:04:3c:7c:cc:dc:ea:c9:a2:61:20:6f:77:b0:be:41:f5:
         62:cf:f9:97:66:5e:f6:d6:44:b4:32:e5:69:31:24:d9:2e:3d:
         2e:54:ed:7d:8e:2f:c8:d5:ac:72:31:ba:27:3c:06:fb:13:1e:
         a7:1d:7c:11:fe:e5:53:a7:81:71:9c:1d:3b:8e:fe:61:09:a9:
         46:47:42:d3:d1:aa:e6:00:8e:d4:d5:18:a3:3e:18:52:12:2c:
         9e:d7:cb:60:c1:e1:ac:51:f5:ae:12:e1:28:fe:82:fe:b1:cb:
         55:57:0a:2f:ec:a8:30:39:ce:51:af:14:39:bb:4d:66:3e:55:
         24:38:ee:4e:24:01:93:3c:40:8c:89:d5:42:99:64:d0:05:c6:
         88:35:b2:1e:e1:78:54:ac:9e:48:e4:f8:c0:14:df:c9:39:c4:
         45:61:c1:97:45:06:1f:01:8e:d3:9f:10:d7:fd:7e:13:a8:81:
         e7:08:04:4d:a8:27:18:cd:0e:fd:57:4d:56:e2:d9:90:9b:a3:
         80:90:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:24 2025 by rpki-client