Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File:                     vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier:          PsW9gXx088zl2cJcfZhg/Sg6hZKhiYN+XbcouCwiMOM=
Subject key identifier:   56:4B:2A:2C:77:F9:B3:92:86:5F:AE:E8:5C:58:5F:4A:CD:34:EF:DF
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer:       /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number:          4F
Signing time:             Thu 03 Jul 2025 07:31:32 +0000
Manifest this update:     Thu 03 Jul 2025 07:31:32 +0000
Manifest next update:     Thu 10 Jul 2025 07:31:32 +0000
Files and hashes:         1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: DUpz4/zyUNPAUoQ8NL4bMdYYjsnzofUY/5u151Y4RKI=)
                          2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=)
                          3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
        Validity
            Not Before: Jul  3 07:31:32 2025 GMT
            Not After : Jul 10 07:31:32 2025 GMT
        Subject: CN=686631d4-7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:d6:e6:64:cd:0b:32:18:b4:15:92:aa:50:
                    47:99:b1:b5:d1:21:e3:21:13:0a:39:1e:ce:41:71:
                    47:91:85:ef:77:77:da:9b:24:77:fa:b5:71:fb:98:
                    c1:c2:6d:e0:82:c0:d5:13:e7:3c:a4:50:a1:e7:e3:
                    65:84:a3:02:77:5f:32:e1:a7:41:23:da:6d:7e:13:
                    a5:d2:09:b1:57:07:4a:9a:55:45:a0:7c:db:d3:2b:
                    ed:9e:35:2b:7e:fe:df:40:54:e9:cd:47:5a:6f:0a:
                    f6:0d:4f:c4:48:fb:c1:f8:ff:42:70:13:2c:8d:18:
                    3a:d9:c0:cc:c3:9e:5c:c6:92:f9:1b:58:1d:12:d2:
                    13:e3:02:f8:69:86:ed:4b:ce:00:7c:03:ce:95:9b:
                    c5:73:d9:24:19:ab:88:72:f6:a5:f9:48:e8:d7:5e:
                    02:7d:8a:38:39:b3:ab:aa:67:ab:c7:df:15:4d:bf:
                    27:c8:5f:3d:6e:0e:ee:e2:a1:04:89:b7:6a:d5:f5:
                    dd:af:29:c0:59:92:08:e0:74:73:17:23:1a:d0:e1:
                    53:30:3c:f6:82:b4:15:bb:83:86:df:41:f5:b1:55:
                    6b:2f:2c:3b:0a:fa:d6:9a:41:c9:2f:de:f1:2d:65:
                    cc:40:aa:e2:b5:38:5c:cb:58:89:bb:77:09:5d:24:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:2A:2C:77:F9:B3:92:86:5F:AE:E8:5C:58:5F:4A:CD:34:EF:DF
            X509v3 Authority Key Identifier:
                keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:51:dc:6b:35:08:f5:42:6b:7f:03:db:b2:06:fd:34:c2:
         f7:2e:6c:6b:a5:62:15:53:04:87:6c:d3:68:bf:cb:67:47:89:
         39:40:a4:79:c6:a8:c2:dd:a1:d5:ba:87:e8:d8:27:0a:11:3e:
         2c:b4:42:1b:bb:7b:a8:d4:21:b0:93:6b:77:f3:dc:aa:1b:c4:
         ff:2c:fd:b1:84:47:5f:a8:73:09:97:45:4d:6e:fa:76:36:22:
         33:b8:28:cc:a0:08:96:00:53:02:41:73:97:11:69:bb:47:58:
         8c:4a:29:0f:49:da:6e:fb:6e:82:a5:fc:8c:71:4d:ef:ad:a5:
         03:fc:95:84:b8:25:eb:ae:7e:4c:1e:e4:de:f5:b8:e7:ac:0a:
         80:77:44:bb:c9:d7:5f:80:61:13:24:5d:52:ce:c0:61:2b:22:
         2d:23:22:1c:f3:5f:f7:39:9b:50:6f:22:a9:48:4d:5f:6f:91:
         9a:77:94:4e:46:67:0c:6e:17:eb:5c:6f:1d:81:f3:db:35:d3:
         5a:fe:57:8d:ca:21:eb:eb:7f:61:76:ce:66:c7:3b:03:f5:ce:
         9f:9b:c6:22:12:47:bb:55:f8:ab:da:f6:86:41:e6:e3:d5:08:
         b9:19:33:3d:c2:a3:fd:e9:bb:d0:13:05:e1:5f:4d:d0:4c:e3:
         7b:0b:28:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:25:31 2025 by rpki-client