Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File:                     Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier:          mk7zcnyZO7HQlkVx7pOX9EUvoGc1+DnQrGtQ/wUJHAg=
Subject key identifier:   81:4D:1C:51:C5:C8:D9:3A:8E:3F:BE:BF:EA:4C:FA:E7:9D:75:47:1F
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       0515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number:          050F
Signing time:             Sat 14 Jun 2025 23:22:18 +0000
Manifest this update:     Sat 14 Jun 2025 23:22:17 +0000
Manifest next update:     Sat 21 Jun 2025 23:22:17 +0000
Files and hashes:         1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: F/YjouQedm9FgpEjcSxERp1nBZE1CSno4+jAK37eA8k=)
                          2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Jun 14 23:22:17 2025 GMT
            Not After : Jun 21 23:22:17 2025 GMT
        Subject: CN=684e0429-a2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:07:db:68:03:42:d9:ad:6b:2d:41:88:66:
                    f4:78:45:df:a8:9a:f9:e3:d6:e3:8e:6f:cc:a9:8d:
                    f4:86:54:8a:6c:2a:61:9a:e1:2f:17:b5:a7:ee:cb:
                    28:75:3f:d1:16:2c:88:c7:c3:77:19:46:30:a1:c1:
                    08:bc:80:52:20:c3:a9:7c:1f:db:fc:4e:78:43:ad:
                    49:8b:64:b0:88:60:2c:47:0d:61:7b:b5:b7:ca:29:
                    d4:c1:a4:18:5d:50:ea:57:cc:c5:7e:f7:76:69:8a:
                    7e:79:5c:cb:df:d2:97:a0:3f:fa:0f:2e:b6:47:7c:
                    f5:0b:d5:c0:d4:2b:1b:bc:09:4a:c6:bb:3f:ed:da:
                    ee:62:e6:b8:00:60:2c:bb:18:84:f1:de:86:c4:f4:
                    1a:d1:6c:ad:dd:78:40:44:dd:37:29:8c:5a:ba:1e:
                    7c:e1:67:07:89:40:0a:02:0f:bf:97:77:f5:ca:46:
                    63:e4:d3:3b:1f:c5:5d:37:ac:ad:1b:5b:ec:2a:e1:
                    9d:32:04:5c:ab:61:3a:38:7a:60:68:ae:84:5e:bd:
                    40:78:47:ee:81:f5:42:4f:2a:67:33:a1:30:c3:ff:
                    bc:35:56:af:5d:b7:d3:a2:bd:2e:1c:6c:00:b2:fc:
                    73:57:a2:46:dc:42:51:9d:1c:db:35:40:25:2e:58:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:1C:51:C5:C8:D9:3A:8E:3F:BE:BF:EA:4C:FA:E7:9D:75:47:1F
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7e:57:5b:7e:6d:3b:b5:d6:e0:e2:03:00:44:58:3e:f3:8b:
         c4:0f:e4:a9:99:df:8c:b4:60:46:ad:b1:1d:dc:3f:61:e8:39:
         53:33:f1:77:5d:dc:5f:54:7b:4d:76:c1:be:27:83:f5:6c:2d:
         e9:98:77:30:83:fd:12:db:07:74:29:eb:4f:99:74:bb:78:62:
         69:b8:69:7f:d0:17:0e:11:24:fc:9b:b4:39:dd:3e:cf:0d:ad:
         a8:aa:56:c4:ca:ae:2f:36:d6:f2:1a:b4:ca:46:22:0d:be:5b:
         d8:26:38:ff:fb:a0:22:fd:37:c2:66:4b:52:96:ef:1d:62:d7:
         f7:4b:45:a1:97:1c:32:3b:26:9e:0b:2c:e0:a9:04:05:04:25:
         c6:26:06:7e:53:11:3f:d8:18:e8:59:23:49:05:6e:e1:bb:fb:
         af:07:22:5a:6e:35:11:c8:cb:29:b8:cd:1a:11:6c:7e:a5:06:
         71:7f:59:1d:19:c9:08:89:70:9d:7f:bd:30:aa:ba:e0:0e:e3:
         ef:62:17:a9:a6:0f:b0:43:c6:ec:af:90:0a:5d:a4:98:25:c3:
         3b:df:5e:de:04:b0:d8:ac:fa:82:b4:32:d8:06:fc:16:2c:bf:
         79:0d:6d:b3:ea:c0:08:12:03:b6:c9:fc:c9:1a:d0:5a:a0:1b:
         1e:f9:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:27:59 2025 by rpki-client