Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          RLnieqfC/B+vQJyvNSKCFoQCo00kZEdVVhwOWDgdTP4=
Subject key identifier:   6A:BE:E3:F4:C1:43:6A:F6:E2:1F:81:DB:2C:2A:82:A6:87:E2:5C:FF
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          23
Signing time:             Fri 13 Jun 2025 06:45:38 +0000
Manifest this update:     Fri 13 Jun 2025 06:45:38 +0000
Manifest next update:     Fri 20 Jun 2025 06:45:38 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: qzpiuAEPOwBJQ/q8MyiRKQVpGcpN1NtX4KTlI5K5sVg=)
                          2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Jun 13 06:45:38 2025 GMT
            Not After : Jun 20 06:45:38 2025 GMT
        Subject: CN=684bc912-925f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:41:e0:16:ab:d7:4f:42:62:85:ac:21:95:
                    0a:c9:b5:b1:9d:2b:65:27:2a:93:1f:28:9d:af:e4:
                    54:6a:5e:6e:cf:5d:d8:24:15:32:9b:e9:43:17:1d:
                    21:26:d5:30:fe:4d:f0:77:c9:f0:82:05:4a:a5:b1:
                    51:a9:0b:86:90:59:94:a5:5b:42:6b:73:74:e0:a4:
                    46:c0:d3:0e:f6:73:06:ca:07:89:10:b6:19:10:37:
                    8d:e5:6c:64:06:99:8a:58:3e:de:35:e1:a1:cb:0b:
                    ae:0a:3e:d9:79:6f:b8:2c:61:75:13:90:cb:51:c4:
                    76:0e:4f:55:ef:e1:db:c3:0e:ab:8f:12:4b:3b:f0:
                    9a:2d:aa:cb:57:72:56:90:f4:7e:38:72:28:46:72:
                    ba:ba:1b:78:fd:cb:ee:a1:08:d9:8e:df:9d:d2:2f:
                    f6:95:c9:82:b9:38:c0:eb:58:dc:28:84:c7:99:2f:
                    d9:cc:a8:79:f6:5a:2e:dc:11:e7:3b:68:8a:89:ae:
                    bb:dc:f5:21:46:bc:f7:d9:71:9d:75:82:c9:14:df:
                    94:47:4d:90:f3:e0:a4:08:03:14:70:bf:bb:46:e0:
                    56:f6:81:00:b8:7c:e4:02:95:89:3d:44:bf:72:4d:
                    00:62:26:d5:3b:f4:f2:a8:22:52:ef:c6:6d:fc:74:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:E3:F4:C1:43:6A:F6:E2:1F:81:DB:2C:2A:82:A6:87:E2:5C:FF
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:ff:c8:59:f2:7b:74:ba:ac:bc:d6:34:ca:a3:49:c8:07:
         a1:f9:90:f4:08:4b:21:4e:32:2d:4a:b7:0e:62:2c:01:29:8f:
         df:26:4f:3e:33:d5:b8:3a:df:7c:1b:df:3a:b2:ed:ea:29:7e:
         9c:23:e3:db:6f:36:86:64:34:ae:b5:43:db:d6:5e:b8:e0:81:
         89:1c:ff:f2:b7:1b:21:bc:af:e7:58:cd:7e:93:8d:dd:4a:44:
         5d:2b:61:61:c6:0d:e8:f3:90:d3:50:d7:47:8d:e8:76:a3:ca:
         e4:37:9a:ae:a3:c2:1b:c5:d9:a7:78:58:40:e3:ee:de:f2:7f:
         06:50:ff:16:3e:82:65:77:b7:30:87:ac:54:b0:68:1b:cd:36:
         ff:c9:37:11:a2:59:ef:82:6e:f1:46:01:54:22:2c:35:0f:cf:
         92:8d:fc:4a:c5:a9:02:2e:ba:36:c1:74:30:8a:62:7e:29:83:
         cc:bc:74:0a:ca:f0:91:97:cf:0c:c1:46:cb:9a:22:01:44:7f:
         ba:23:07:5a:48:35:1f:8b:5a:b0:ee:c5:17:86:29:7c:5a:59:
         04:80:f6:83:bb:3e:d4:12:d0:08:ef:35:ac:65:6d:5b:89:58:
         4b:77:83:41:27:f1:42:1d:1e:40:3b:57:9b:51:c8:97:0d:4b:
         a2:60:94:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:03 2025 by rpki-client