Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File:                     dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier:          Bbgh3r5lNrnW4V/niO3slQ7OO4kK/aEM5YRg4Fsgp/c=
Subject key identifier:   90:9A:72:88:6E:46:D2:60:B5:2D:17:08:64:FC:9E:AF:A5:EF:90:C5
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number:          016C
Signing time:             Fri 13 Jun 2025 02:49:45 +0000
Manifest this update:     Fri 13 Jun 2025 02:49:45 +0000
Manifest next update:     Fri 20 Jun 2025 02:49:45 +0000
Files and hashes:         1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: fc92Xk3VdH+697aIM+AdRlcA8EUWbtpzFwImnoO91bg=)
                          2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: CB6qYtIMERSezwGUEUv4T/r/K/tC4CWAUjSVJHYQH28=)
                          3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: wqZWqZ8fa4R6eMrcXZq1r/urB8kEflCs9S9caDMISYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Jun 13 02:49:45 2025 GMT
            Not After : Jun 20 02:49:45 2025 GMT
        Subject: CN=684b91c9-6014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:56:3f:94:e5:08:11:9b:b3:ef:22:0a:7c:
                    7b:a7:a7:cb:f9:44:36:72:7c:b4:4c:92:cd:a4:80:
                    fa:7e:10:10:fa:f9:2f:68:d3:54:24:d5:5a:69:94:
                    8b:01:b5:e8:8a:0a:d4:be:99:5e:a6:d7:12:9e:70:
                    f2:c1:a0:39:18:fe:21:8f:68:81:bb:b1:4b:2c:cd:
                    3c:da:fc:2b:ea:a7:40:03:04:18:e6:32:42:d7:e3:
                    6e:c6:33:4d:04:9d:13:52:04:d1:19:cf:37:e2:97:
                    4d:52:a8:78:d6:98:48:25:bf:47:de:67:c8:58:a5:
                    62:4c:34:6d:d9:e3:46:66:86:3e:50:8e:b6:05:ce:
                    b6:92:83:40:75:a9:2e:7f:35:bc:dd:2d:8a:7c:b4:
                    f0:66:ad:7d:f9:a9:f9:67:d5:ff:93:0c:48:f2:a0:
                    51:f6:eb:ed:00:d0:1b:29:87:cb:8c:7b:ec:dd:be:
                    b5:a0:88:a9:d9:69:20:67:2a:da:85:3d:7c:4a:73:
                    b3:75:0e:89:30:29:52:eb:5f:48:b9:36:2f:74:39:
                    05:a6:f8:50:94:95:67:83:6c:9b:e8:14:9c:db:23:
                    38:b0:b4:8a:12:11:48:20:24:b5:14:f8:31:dc:f0:
                    10:0e:66:a1:fc:05:d6:65:9f:8f:48:97:27:56:ab:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:72:88:6E:46:D2:60:B5:2D:17:08:64:FC:9E:AF:A5:EF:90:C5
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:02:80:7c:dc:3b:82:b5:fa:d4:dd:ca:ae:b2:08:9c:49:
         91:0e:ad:12:dd:aa:b3:99:c8:86:a6:00:7c:f9:b5:d0:b1:d9:
         e7:7f:91:32:e2:8d:62:66:b3:3e:d5:27:5d:d3:ae:f8:7b:c1:
         cb:c0:40:b3:31:59:60:66:28:cd:5a:36:56:f0:4d:ea:67:62:
         6f:b0:1a:60:b3:59:25:5f:b9:f3:9d:21:69:ca:4e:ca:50:6b:
         33:cc:01:c2:7a:3a:07:43:b2:3a:a5:9f:9f:94:0a:e4:5a:62:
         f0:87:3f:ac:3b:28:f5:ef:26:44:05:ca:06:26:6e:aa:12:39:
         b6:39:51:9c:fa:47:61:a4:97:8a:65:f2:5a:a7:2f:96:be:ef:
         0f:40:d0:18:d4:73:30:e7:bf:9c:10:8d:e2:b2:68:63:8a:24:
         cc:fa:6c:43:a9:95:e7:79:01:ee:6d:0b:f6:b7:9b:9e:3c:42:
         9d:5a:a9:77:d2:a2:8a:a2:e5:77:dc:31:f5:c5:e6:21:0c:1f:
         a6:29:e1:a3:00:2f:ae:6a:18:55:e4:12:9b:de:c1:b9:47:ea:
         2d:96:49:12:c2:c7:65:3f:28:a6:92:ac:26:ae:21:c2:20:92:
         67:79:c1:5a:d7:79:4a:7c:97:43:61:3f:64:8e:58:de:80:d6:
         e7:c4:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:36 2025 by rpki-client