Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          gQIRJLFm6mrsLPwRcVD7fCpnZYOnDewr22EJ5Cbtaxo=
Subject key identifier:   C6:A3:44:C5:9E:64:DC:4E:46:5D:30:0B:2B:4D:49:4A:D2:99:E8:97
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          03B7
Signing time:             Thu 19 Jun 2025 00:32:10 +0000
Manifest this update:     Thu 19 Jun 2025 00:32:09 +0000
Manifest next update:     Thu 26 Jun 2025 00:32:09 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: u3Y2EYuU84oR2i0Lk2diXr8qOAHGyMxfv2QdHnHaIck=)
                          2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: pTLG0WiZ5krYcSGHfWJAPWz+llPAx5qbifmNwzqhPMM=)
                          3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: /9wYxqntRiGnvgXxlBbc4/94IQMO4HOR9thkiSTkR6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 00:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Jun 19 00:32:09 2025 GMT
            Not After : Jun 26 00:32:09 2025 GMT
        Subject: CN=68535a8a-05bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:5f:c7:e7:ac:c4:a4:79:ed:5a:f8:f0:60:
                    b0:3a:73:6c:d0:90:2b:d9:ad:9e:dd:c4:66:ba:d1:
                    cf:0c:4d:4a:bf:f6:a9:72:fa:6c:92:0c:4f:fb:29:
                    df:08:66:4f:a5:18:c4:79:fd:2d:1b:71:e5:f7:95:
                    85:d6:ba:74:ed:24:db:50:1b:c6:58:76:22:9c:a5:
                    dc:97:9c:8b:95:ca:da:d6:fe:4a:94:e6:7d:8b:a8:
                    8d:ab:ee:3c:c6:37:79:bd:e3:10:44:6e:b8:f8:37:
                    07:76:13:d5:18:77:00:e3:8d:47:1b:af:16:e2:db:
                    9d:35:18:b6:85:cf:e8:11:12:d7:7f:c5:cf:34:46:
                    8c:7b:19:99:b5:52:ae:16:69:c7:2f:ec:94:61:55:
                    a2:e3:aa:b7:71:35:b8:c4:0e:17:dd:3f:58:11:77:
                    8b:74:e2:1f:90:45:06:9f:03:c3:51:63:2d:70:ba:
                    f9:52:93:91:8f:c6:b8:02:51:62:e7:5d:c2:50:a4:
                    d7:1b:42:d6:c5:48:58:94:0b:f8:6c:55:0f:e6:65:
                    75:ff:3a:da:3a:38:7f:56:ef:72:2e:cd:50:a5:51:
                    0e:17:53:22:eb:a6:27:0e:bc:48:b7:dd:87:5d:2e:
                    32:80:58:28:0d:57:75:02:b0:ba:aa:67:4c:bc:64:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:44:C5:9E:64:DC:4E:46:5D:30:0B:2B:4D:49:4A:D2:99:E8:97
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:65:ab:8f:12:35:26:eb:ac:a6:6a:ae:8e:92:6f:76:d5:33:
         96:00:69:89:a9:e6:ec:45:dc:3d:de:1b:09:70:ba:31:20:50:
         fd:84:a9:01:0a:75:24:b6:fd:ed:24:c5:95:c0:e4:d8:f1:62:
         b4:c9:04:03:23:39:a6:08:f2:2e:1c:f9:26:6a:de:ca:2b:bc:
         23:da:f3:41:7b:cc:8a:88:25:56:3c:df:49:5c:26:47:6b:88:
         d3:f4:16:82:52:7c:41:47:1e:4a:c9:47:ac:73:ee:88:79:4b:
         1c:19:2d:6d:8c:0d:02:1e:e4:21:7f:20:70:fd:29:8a:af:d4:
         c2:79:32:5a:f6:f4:8e:b0:93:e4:67:4a:c2:95:fb:b2:61:6f:
         2a:df:90:91:57:28:0a:66:bd:1e:18:16:54:52:5d:01:fb:aa:
         9c:a8:85:e7:93:79:92:f4:47:ca:0a:cd:f5:86:68:9a:26:97:
         fd:13:e2:d6:e2:a9:9c:0e:66:8c:36:28:9f:f8:25:e4:f6:62:
         46:d4:47:57:7f:9f:ad:fc:1a:52:ee:a8:fe:ae:c4:64:49:09:
         70:3e:b3:7c:91:d3:3f:79:d6:a0:56:d0:64:b8:20:3b:4f:97:
         1f:bc:4e:38:fa:49:a1:41:f4:28:c4:28:00:18:84:85:6f:10:
         37:be:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:56:11 2025 by rpki-client