Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File:                     0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier:          W8Gu0IXwNJ6FaXzn3hIxezOXE3ImE9XgBlUZvCt0qiU=
Subject key identifier:   01:24:26:F7:42:85:AD:3B:D9:90:DA:89:A0:E3:A9:61:C3:DD:F4:01
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer:       /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial:       06DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number:          06D6
Signing time:             Sat 14 Jun 2025 21:47:10 +0000
Manifest this update:     Sat 14 Jun 2025 21:47:10 +0000
Manifest next update:     Sat 21 Jun 2025 21:47:10 +0000
Files and hashes:         1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: pn10pdsRjEjbNuwoJM0Cougt37vg9X0Ut4Bqec+xAz8=)
                          2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: PFrV9NPTBknSjdmlAsxffe/x4T1O4oXZWiMBMdvbqVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
                          rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Validity
            Not Before: Jun 14 21:47:10 2025 GMT
            Not After : Jun 21 21:47:10 2025 GMT
        Subject: CN=684dedde-874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:7b:cd:bd:7c:1d:3d:43:e0:cf:cb:e7:a7:
                    26:df:a5:55:ed:71:e0:60:b5:2a:23:b6:4f:fe:fc:
                    a5:0c:d6:86:79:b8:6a:5d:e9:16:dd:31:d3:0e:00:
                    55:fc:d3:be:20:5e:0b:ef:1a:4f:bf:45:d6:c6:2a:
                    89:5b:3b:4d:c7:d7:ad:43:65:3a:d9:73:4a:99:8e:
                    db:e9:b4:39:9c:f6:73:e6:88:54:a0:ef:38:54:06:
                    6d:ff:cf:25:c0:02:cd:bc:ac:d0:77:49:41:d2:d9:
                    2f:7c:28:ea:38:8a:4a:bc:46:1d:01:16:5f:3c:b4:
                    64:78:08:42:8a:60:ee:b6:7f:5e:46:9e:60:ee:63:
                    67:c7:33:4e:b0:3a:12:84:ea:f6:51:11:1c:7b:63:
                    31:62:3e:13:2c:ab:db:3a:1c:eb:c9:14:8e:ea:9f:
                    e7:25:4f:2c:f9:d9:e4:6c:ba:b8:15:52:bf:21:cc:
                    5c:7e:d8:43:0e:3b:71:12:70:b1:48:70:b6:f4:71:
                    da:2b:20:34:fd:34:03:4f:dc:d6:4c:73:6c:e6:82:
                    83:76:58:46:98:2a:38:95:93:a0:89:7c:23:29:bd:
                    22:cc:1c:5e:3d:0a:c4:cd:80:fe:8b:87:8b:6c:72:
                    76:e7:18:8b:88:be:df:59:c2:19:45:63:5d:e2:21:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:26:F7:42:85:AD:3B:D9:90:DA:89:A0:E3:A9:61:C3:DD:F4:01
            X509v3 Authority Key Identifier:
                keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:07:e0:61:cc:76:c4:b4:1a:08:32:82:71:42:ff:55:df:7b:
         9b:93:5f:59:63:6f:a8:30:d4:50:cc:7a:45:16:01:74:c8:d8:
         5f:6d:ef:82:d2:a1:f8:10:55:e2:52:e2:ac:b0:e8:15:1f:71:
         e0:06:60:f4:03:b3:33:b8:8f:bd:1e:09:7f:0b:d8:67:0c:2a:
         fd:67:64:1b:cb:91:ad:fd:be:4d:36:bc:41:13:ca:bc:ff:5b:
         5d:45:88:bf:dd:1d:57:96:86:99:13:f1:99:88:be:e9:0c:7f:
         70:3f:b1:11:13:bf:d1:ae:95:9b:df:26:61:51:ad:04:6d:ba:
         40:19:e3:21:7b:56:56:f8:25:a8:4d:4b:a9:47:95:1a:bc:53:
         55:4a:99:b5:06:c2:db:ef:21:49:9f:1c:57:22:29:44:1a:ce:
         32:8f:1d:6e:e3:10:e2:30:67:b0:64:d1:b4:5e:74:b4:0c:cd:
         4b:61:58:ca:a6:64:2d:29:e2:b3:aa:51:fe:d1:bf:f7:ef:3c:
         30:67:bb:b0:c2:b0:62:12:91:e4:8d:4d:7a:64:bb:6a:c6:25:
         ae:b9:96:99:7c:94:a1:b4:4e:b7:07:ed:a7:6c:73:36:a8:9b:
         83:c3:42:08:55:32:1c:91:c9:3f:8b:6f:d0:95:e5:ea:f8:21:
         48:3f:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:20:05 2025 by rpki-client