Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          9gSjuJIledcASuGURvpDC2EX8RYp1eKvAtxZ0ZJiiG0=
Subject key identifier:   C7:B0:DE:73:73:CD:59:23:C9:68:27:26:5D:88:4D:01:03:3F:A5:D4
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0133
Signing time:             Tue 17 Jun 2025 03:36:53 +0000
Manifest this update:     Tue 17 Jun 2025 03:36:52 +0000
Manifest next update:     Tue 24 Jun 2025 03:36:52 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 3dCUVbEDhwc+DmD4EmebRRVpEVSfWAUQ9kNyzgBuPsk=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 03:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Jun 17 03:36:52 2025 GMT
            Not After : Jun 24 03:36:52 2025 GMT
        Subject: CN=6850e2d5-e77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:95:ba:f4:81:3b:b7:ed:32:e0:87:9f:a2:38:
                    65:b1:f5:99:92:f9:74:49:e8:3c:41:b8:99:76:d4:
                    57:c0:ff:72:30:48:0b:a4:92:65:33:4c:ec:c2:9a:
                    fa:92:a9:da:8e:87:e1:60:28:21:08:95:dc:71:e0:
                    bd:18:a5:48:73:de:be:a0:bf:2c:92:4d:eb:31:5a:
                    ef:16:e2:a4:02:29:2b:6c:49:da:d4:be:c3:aa:04:
                    7d:ce:3e:fa:dd:c1:36:f9:9f:16:20:48:e4:be:6e:
                    e7:eb:f9:33:e1:47:60:82:ec:b2:26:1c:55:88:e0:
                    3f:ff:c2:3e:c7:bb:53:5c:ac:94:b1:bc:68:57:3b:
                    fb:73:ba:ce:ef:af:ba:7e:43:b2:95:30:62:6c:34:
                    dd:e3:07:f6:72:0c:fa:82:1c:d5:51:71:78:01:a0:
                    64:bd:2e:ab:cb:fd:11:3f:c2:bc:ac:52:81:a9:f1:
                    cc:7d:59:27:6e:d8:be:44:b7:53:25:bd:2a:a8:e6:
                    2f:2e:61:76:6e:7d:10:0b:3f:ea:fa:9f:dd:8f:73:
                    87:c7:fb:1f:d8:47:8f:86:44:0c:17:92:b0:c5:6f:
                    44:6f:93:0c:b8:0b:0b:4e:ac:a4:f5:15:11:05:77:
                    ce:53:3a:dc:07:0e:c5:09:18:3c:64:a3:e0:1b:83:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:DE:73:73:CD:59:23:C9:68:27:26:5D:88:4D:01:03:3F:A5:D4
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:7e:d4:14:41:09:9b:fd:5e:fa:10:71:e7:1c:d1:5a:33:
         a5:66:50:6c:68:fb:37:4d:c7:8e:ce:69:f9:ff:39:4d:f7:44:
         e2:6e:15:f9:3d:0e:0e:26:b9:f3:91:b6:c0:8f:7a:b1:02:7d:
         2d:d6:ae:ae:00:cb:32:44:d4:e9:db:aa:63:c0:81:1b:fa:19:
         53:02:0b:cd:a8:15:21:f2:dc:34:6e:b3:9f:43:c2:a6:bc:9d:
         2a:4e:ec:cf:53:ff:f8:eb:cf:7c:0e:6c:49:c4:b1:32:42:48:
         b3:b5:40:5b:18:c2:d3:a5:ee:d0:4b:7f:1c:3e:a7:f6:3b:1d:
         0c:79:58:cf:b2:43:e1:e2:d7:84:0d:7e:21:9d:8e:ad:8f:d6:
         60:24:ad:41:3a:80:44:88:38:a7:41:af:7c:93:7e:36:ba:e6:
         ba:52:d5:11:ca:7d:79:19:2c:ec:c2:06:67:97:12:2b:de:2c:
         62:8d:96:ce:bc:3f:67:81:81:da:91:d8:f9:0c:6c:d6:6d:b7:
         63:1d:b6:33:9b:74:76:9b:9f:a9:e2:f1:41:ef:eb:e9:48:be:
         86:1a:a5:b4:8b:ed:34:62:89:94:ab:2a:b4:b1:3a:fe:b1:6a:
         ee:3c:3b:11:9e:83:9c:57:3c:17:b8:d0:70:32:82:29:9f:ef:
         f1:73:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:33:25 2025 by rpki-client