Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File:                     Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier:          osqml3RtjGZ4U773Z6dKy6H1WMZFm1MXvpsgjLi0n24=
Subject key identifier:   52:C1:FD:FA:31:BF:5D:FB:98:07:2F:EC:32:21:4A:3B:31:09:8C:1C
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer:       /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial:       1F84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number:          1F77
Signing time:             Sat 14 Jun 2025 15:57:54 +0000
Manifest this update:     Sat 14 Jun 2025 15:57:53 +0000
Manifest next update:     Sat 21 Jun 2025 15:57:53 +0000
Files and hashes:         1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: ewyg0vb0KjN1DXxuIS0IuQheSxFWpzGIsSdciIZb1Hc=)
                          2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: C6sGcNivAhM8b7+hs2R4TWPNfdN5sOXAahaAosnvUZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
                          rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8068 (0x1f84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
        Validity
            Not Before: Jun 14 15:57:53 2025 GMT
            Not After : Jun 21 15:57:53 2025 GMT
        Subject: CN=684d9c01-a06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:b8:77:2a:58:48:4c:bb:e6:92:77:2d:ef:
                    0e:b9:bf:04:39:a0:44:02:d0:18:54:53:47:08:af:
                    e9:cf:50:8e:40:3d:ae:53:f5:a7:e5:00:94:4f:98:
                    60:96:98:8c:79:da:ee:8b:ad:c4:6f:f2:8a:c9:5a:
                    03:05:30:c3:60:95:5b:45:c7:8e:d8:5d:91:b0:00:
                    fb:d1:75:96:68:43:89:7b:4c:d5:5c:56:51:77:a3:
                    cf:83:b7:5c:96:db:38:14:0a:6f:e3:18:64:fd:03:
                    ee:e6:83:ea:0f:cf:2e:93:7d:cc:b6:0c:0d:8a:9d:
                    cf:2b:c8:c4:1a:d0:0f:20:31:00:ad:7a:08:46:43:
                    d7:57:4b:12:76:63:23:eb:b4:2c:ce:60:72:90:56:
                    27:74:93:78:94:ea:8f:5d:e4:f1:76:09:a1:da:b6:
                    9d:0a:0c:0e:25:e9:a7:cf:51:f1:63:fe:4e:d3:5c:
                    0c:78:74:20:5c:8c:5c:45:50:73:e5:b3:11:1a:2e:
                    ae:2f:9f:39:a7:70:43:09:78:31:72:4b:a7:49:c3:
                    5a:b4:6f:15:84:92:92:0c:f0:e5:c1:57:2d:97:1f:
                    c3:3a:fb:16:82:a0:c8:c1:4a:58:ff:88:12:79:9f:
                    ea:4e:73:ce:e1:df:84:79:4c:4a:62:83:c7:21:23:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C1:FD:FA:31:BF:5D:FB:98:07:2F:EC:32:21:4A:3B:31:09:8C:1C
            X509v3 Authority Key Identifier:
                keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:f8:07:50:0e:64:bc:3f:ea:53:2f:d6:a3:c8:32:9c:89:
         22:0c:d9:86:71:f0:84:13:e7:91:b2:b1:42:9d:c2:01:e1:1a:
         fd:5c:8b:0a:b0:0d:ee:d2:a5:4b:0c:5d:09:47:80:6e:ca:6f:
         13:17:c4:01:e7:2b:63:44:10:c8:9a:7b:41:41:c0:b2:d0:af:
         69:e5:ed:1c:47:91:be:13:5d:c8:bd:94:8a:e7:18:56:8c:80:
         f1:cf:ec:99:8f:2e:b5:b4:c2:b9:96:81:bb:e8:9a:21:0b:8f:
         5b:98:30:e8:c2:62:d1:02:9c:4a:8f:74:3d:e1:53:f9:42:4f:
         8f:87:69:e3:54:e8:06:31:00:6d:77:d0:ae:5f:a5:6b:83:d3:
         4f:d3:ad:d1:c0:9f:90:5f:e9:f5:f5:b0:79:08:89:82:95:4b:
         f0:8e:34:4d:09:1c:42:f5:a2:a3:61:2f:68:4b:18:ad:d9:7c:
         54:7e:4a:31:4b:d8:cf:a6:fb:be:c7:fe:dc:7c:1f:91:74:e9:
         b3:d2:ab:80:3c:94:55:dd:ff:7f:7d:00:14:9c:bc:68:c7:c6:
         ae:0f:84:b9:95:bf:93:2a:29:e4:89:70:3a:ea:e0:3e:8e:54:
         30:c8:a2:96:58:e7:36:f4:cd:ab:ac:9a:7c:05:5e:fd:c6:1d:
         d5:26:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:34 2025 by rpki-client