Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File:                     AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier:          6mUlmsRZzLQniS1r9QFb2tY5bLKtVNqnn08OiM/KLME=
Subject key identifier:   C9:66:33:35:AC:05:36:A7:50:4A:D3:82:FA:1B:D1:37:7B:56:FD:FF
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer:       /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial:       0F52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number:          0F49
Signing time:             Thu 12 Jun 2025 17:29:28 +0000
Manifest this update:     Thu 12 Jun 2025 17:29:28 +0000
Manifest next update:     Thu 19 Jun 2025 17:29:28 +0000
Files and hashes:         1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: 8TafN9fM2Xze0J4BisD0AWF7yiU8UX705gZJEYEotKw=)
                          2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
                          rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 17:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3922 (0xf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
        Validity
            Not Before: Jun 12 17:29:28 2025 GMT
            Not After : Jun 19 17:29:28 2025 GMT
        Subject: CN=684b0e78-c7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:95:2b:2f:74:0b:bb:7b:39:8b:f5:88:66:
                    f2:c6:40:61:fc:be:7f:6b:54:c5:fa:eb:e9:f6:e2:
                    d0:a2:68:90:98:80:98:a7:be:8b:da:53:92:0a:ea:
                    0a:49:19:81:fd:30:2f:34:51:9d:0d:aa:a3:10:dd:
                    b0:ed:93:3b:5a:93:2c:76:96:0a:96:59:c9:90:a0:
                    50:4e:bc:62:c8:07:0c:c5:1a:26:a8:b8:11:10:07:
                    15:1e:37:aa:60:c1:56:ac:bf:45:d8:da:09:e0:64:
                    0c:8c:b8:46:c8:6a:a2:67:dd:58:5d:ec:da:ad:2f:
                    45:2f:99:c8:18:ee:33:03:83:1b:33:2b:f9:9d:3e:
                    1f:aa:03:9c:11:4e:0a:2c:c5:1f:7f:80:d3:e4:62:
                    1f:8a:6e:ea:6a:e8:8d:12:a7:97:dd:66:ee:db:da:
                    0a:91:e9:8f:40:9b:94:79:6a:e6:31:b6:5f:fa:71:
                    60:35:9d:41:c3:cd:4a:6e:ca:87:92:71:63:d4:1b:
                    2f:a3:b4:bb:4f:4e:97:36:69:51:cc:57:bc:9b:75:
                    4c:82:d0:51:49:24:5f:a9:13:56:63:56:50:a4:84:
                    6b:74:d7:53:0e:7b:f6:95:03:b0:f4:05:d1:37:46:
                    13:19:76:86:42:51:75:2c:5d:90:e1:e6:3c:39:6f:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:33:35:AC:05:36:A7:50:4A:D3:82:FA:1B:D1:37:7B:56:FD:FF
            X509v3 Authority Key Identifier:
                keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:ea:77:24:4f:3a:d5:50:fb:95:55:61:9a:d3:a9:2f:62:
         a9:86:30:10:d9:57:ba:2d:7e:62:24:8d:d5:7a:ff:ad:9f:22:
         eb:77:35:b8:d4:d9:1c:02:50:11:bf:9c:d4:90:ee:03:53:6c:
         89:f2:5f:80:ac:db:a4:78:b7:4f:2b:41:ad:f2:e0:be:f3:8b:
         c3:4b:59:be:4f:5b:4c:5e:d7:a1:50:22:19:8c:5b:85:be:a3:
         bf:d7:c7:68:14:2b:6e:68:cd:e2:f2:cd:83:0f:53:3a:07:0b:
         be:78:2e:c4:2c:aa:81:a3:3c:3e:63:5d:61:1e:5a:cf:f5:f9:
         01:a8:a2:5a:b7:bc:b0:74:9b:fe:e4:ef:6f:f5:9f:74:79:0a:
         42:bd:b3:34:7a:be:37:73:ec:63:78:d9:e4:f4:45:f0:52:4c:
         5a:a9:7e:94:2b:45:ab:58:9b:79:87:d0:5f:69:df:d2:7c:b9:
         ad:f5:05:de:e5:f8:8f:f6:e3:ad:52:b2:eb:bd:75:72:62:f6:
         ca:21:33:8c:9f:d7:b7:74:80:92:73:9f:5f:a1:f3:e8:5c:3e:
         15:8d:8a:73:a1:4b:82:d0:e2:77:68:ae:a0:76:0c:02:94:38:
         29:24:ed:35:48:ca:ff:81:e7:b9:ea:c7:f3:3a:cb:7e:f2:64:
         0c:4a:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:10:11 2025 by rpki-client