Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File:                     exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier:          +ZsRxXWmzJ6lsoAatze2o+ZM0UPOTgSIw3518hBmzs0=
Subject key identifier:   39:B8:B8:C1:9D:A8:6A:E3:29:06:15:E8:36:C2:57:98:48:66:77:15
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer:       /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number:          06BB
Signing time:             Thu 24 Apr 2025 21:55:51 +0000
Manifest this update:     Thu 24 Apr 2025 21:55:50 +0000
Manifest next update:     Thu 01 May 2025 21:55:50 +0000
Files and hashes:         1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: 12YkiVE4c3OGwKO23ibGZio7pyjPiOKKtaOW+k+2+TQ=)
                          2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: 44B6YCXFFFx+bCdGIykmPbtlTvIuZVPUkL4VeJYbwxg=)
                          3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: ji78Z3bYDne8h3ntfFAr2jh173VOiqckcY3Gt5rpLOI=)
                          4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: gFcpYNnFwW2L/eMps8n5pMtg1/xMFxUVZSJLx7s2gUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
                          rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
        Validity
            Not Before: Apr 24 21:55:50 2025 GMT
            Not After : May  1 21:55:50 2025 GMT
        Subject: CN=680ab366-3ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:2a:69:87:7e:c9:72:49:d3:a5:f7:5d:19:
                    44:42:e7:65:de:ff:3b:f1:a9:24:2f:c9:83:1e:23:
                    18:e6:f7:30:c1:60:44:e3:f2:9f:a9:3f:47:d3:37:
                    64:fb:9b:42:57:0d:53:d3:c9:bf:a0:13:a5:7c:2f:
                    7c:15:f2:7a:91:97:86:65:57:c6:4c:00:ee:a1:79:
                    9e:7b:7e:74:e2:c0:04:ab:ef:75:9d:43:4b:89:fe:
                    f7:b2:45:ff:f9:9d:84:db:5e:dd:b7:b0:2b:f9:10:
                    99:3d:7d:40:ce:97:f3:35:8b:7c:94:cc:cc:c0:db:
                    8c:65:0a:d9:4b:54:3e:0d:86:14:e3:d3:15:c6:27:
                    33:07:27:52:f5:98:3a:31:68:39:4c:05:49:16:ed:
                    e9:e7:27:ef:45:bb:3f:56:2a:5a:0e:a6:3c:ad:09:
                    3e:13:f7:09:54:52:43:8f:2c:3f:87:07:1b:cb:c1:
                    f9:76:bc:30:6f:1d:b0:77:63:74:ae:4b:36:ab:99:
                    38:b3:44:6f:23:8d:e8:e1:eb:10:36:fb:c6:dc:96:
                    cd:d2:41:80:1c:7f:2b:37:f8:f3:07:f0:2a:ae:56:
                    49:88:93:9a:7c:75:b2:c2:9e:9c:80:a2:10:6e:8f:
                    60:a2:07:05:0f:f1:4d:45:42:38:af:c7:53:57:ea:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:B8:C1:9D:A8:6A:E3:29:06:15:E8:36:C2:57:98:48:66:77:15
            X509v3 Authority Key Identifier:
                keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:88:d4:1e:40:dd:61:c4:5c:43:42:6a:5c:12:bf:10:a3:ed:
         54:c8:d8:7f:38:b1:35:7f:d3:cc:4b:c4:eb:d7:47:21:17:1b:
         d4:d2:96:c8:e1:f7:c4:d6:3d:9a:b4:3b:16:d5:ba:bc:ec:b4:
         a7:85:3f:05:87:9f:96:af:e0:92:13:cb:41:aa:21:99:3e:2a:
         df:a5:0b:19:cd:46:e4:d3:7a:a8:95:ba:86:bb:f1:3e:58:98:
         6a:e4:f7:7f:62:c8:42:5a:30:cb:e2:ee:02:26:da:3c:61:63:
         60:a7:d8:38:1d:dd:f0:5e:24:cb:b0:e8:03:33:ac:4b:d0:4b:
         f1:8a:fa:27:1f:ce:67:62:96:46:1f:df:21:67:f3:b0:1f:01:
         13:96:d2:fd:97:6e:71:91:50:9c:35:f0:cf:69:c3:22:d3:3f:
         34:79:12:30:35:21:e1:80:54:08:0a:2e:bd:a6:54:c8:70:6d:
         60:7c:9a:b8:3c:21:47:fc:65:11:01:2a:76:8b:c5:8b:57:d4:
         77:82:3d:d6:e7:a0:c3:61:12:08:75:a8:72:36:fa:a8:c1:c5:
         62:37:1b:34:a1:94:7d:8d:d3:05:45:89:44:c9:9e:22:0c:da:
         82:a9:52:cb:99:2e:2a:e9:a6:08:b6:28:21:db:b5:60:ae:0e:
         5f:2f:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:25:42 2025 by rpki-client