Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          qtJfUey19995cTCIUuJaiSwA4pJXZc5cQIwWcb3i3xM=
Subject key identifier:   F8:A1:A8:F9:EC:8B:46:71:32:4E:49:79:AF:11:B3:F5:92:B6:95:B3
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          073F
Signing time:             Sat 14 Jun 2025 21:29:49 +0000
Manifest this update:     Sat 14 Jun 2025 21:29:48 +0000
Manifest next update:     Sat 21 Jun 2025 21:29:48 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 3w18VFIzMVa57q70PgDAPycSPVUJZ0NH+1rokSHK5Mo=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=)
                          4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Jun 14 21:29:48 2025 GMT
            Not After : Jun 21 21:29:48 2025 GMT
        Subject: CN=684de9cd-62c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:de:5b:12:31:00:8a:10:92:ac:da:c5:ef:
                    ef:26:5e:1b:11:b9:f3:d5:8c:d7:c8:8d:08:7c:25:
                    e8:55:7b:78:07:4e:60:b8:97:87:5c:93:f7:2d:6a:
                    7a:fd:81:93:09:8e:1c:2a:2d:6f:48:20:c7:a1:de:
                    ea:24:9e:75:8b:bb:e8:47:3f:3b:1a:fb:57:af:4b:
                    6d:86:14:4b:f4:d0:77:b1:1c:90:84:d6:10:8c:2e:
                    b2:43:0b:90:9b:8a:d1:e9:0d:d0:d8:91:6f:85:e9:
                    e8:2a:15:67:cb:68:db:55:f6:24:1a:50:7f:5f:37:
                    80:e1:20:c5:88:9d:4c:a7:42:f0:e8:2a:35:9f:4b:
                    f8:57:2c:2a:fc:d2:3f:0b:5b:38:0e:91:3d:42:91:
                    81:19:c2:af:16:d7:1f:18:77:2a:26:d8:e4:07:d5:
                    97:0d:04:8d:f9:2a:70:21:ea:d3:c5:b7:6a:b3:00:
                    da:e6:76:42:bb:1a:30:2b:25:d0:ad:2d:3e:c4:16:
                    9a:77:da:8f:ae:8e:ef:dc:9e:f9:e3:1e:40:57:fb:
                    3f:ea:ef:0e:98:5a:30:ed:12:87:71:46:72:7a:0d:
                    81:5c:a4:02:46:43:54:8a:df:79:6e:13:31:85:ac:
                    00:b1:80:31:0d:48:ed:a6:bd:14:2b:8e:67:58:ea:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:A8:F9:EC:8B:46:71:32:4E:49:79:AF:11:B3:F5:92:B6:95:B3
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:54:68:ee:7e:f5:4e:5d:96:c4:17:36:66:a8:aa:c8:15:
         bf:8a:a8:9d:43:1c:2f:64:20:5c:69:53:2c:45:17:7d:57:92:
         70:75:ec:04:55:ab:b9:f0:54:af:db:55:f3:ff:2a:c5:87:d2:
         bd:9e:a0:47:bd:a6:b3:b2:02:a1:9d:f2:34:01:92:60:12:60:
         e9:7f:e3:ee:de:58:b2:a5:bb:76:d2:aa:68:af:38:a9:4a:d1:
         a1:93:06:ac:08:5b:d7:ca:59:75:b2:d6:c6:84:be:b9:0a:b7:
         4d:ed:3b:57:67:74:04:03:30:52:11:08:6b:6d:79:0e:c6:3b:
         48:fb:62:74:f5:10:25:49:53:44:f3:1c:21:5b:20:49:f7:cc:
         b5:ab:a6:88:28:7e:7a:6e:7c:10:f9:30:af:09:e6:ea:43:c8:
         58:e5:33:ed:c6:c0:b7:8a:60:22:1b:60:a2:b0:a5:41:c1:ec:
         7c:11:12:a4:42:05:f4:f0:30:a0:e5:de:56:98:67:51:ba:f0:
         53:23:66:b2:52:c9:28:9e:14:4a:cb:85:b0:0b:67:2f:c3:ea:
         7a:1b:14:fa:90:b0:18:42:84:ab:2e:24:f0:85:9c:c2:9e:0e:
         cd:94:8b:a1:71:b1:16:6e:a4:4d:86:56:f2:d1:83:59:dd:2a:
         3c:41:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:25 2025 by rpki-client