Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
File:                     RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json)
Hash identifier:          TzJnUzdSZoen3Vuo3xJSfp3Mz1jv5JHca5V9pDxNXX0=
Subject key identifier:   BD:86:72:A4:CF:A6:0E:C8:40:08:F4:B5:C8:BB:3D:7C:03:89:DD:C1
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Certificate issuer:       /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
Manifest number:          062B
Signing time:             Wed 02 Jul 2025 23:05:07 +0000
Manifest this update:     Wed 02 Jul 2025 23:05:07 +0000
Manifest next update:     Wed 09 Jul 2025 23:05:07 +0000
Files and hashes:         1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: 58Rgfr3XOYxPIVfbHUAtwgqAejQoMVRi/eQEvlrhobE=)
                          2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
                          rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
        Validity
            Not Before: Jul  2 23:05:07 2025 GMT
            Not After : Jul  9 23:05:07 2025 GMT
        Subject: CN=6865bb23-8972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:bb:76:ec:88:d7:4d:32:33:9a:17:6e:84:
                    aa:24:f2:b8:55:95:c9:f2:8a:13:71:fd:68:2c:9d:
                    4e:40:97:e0:0b:2b:f6:a5:31:d6:01:dc:0e:33:a7:
                    03:d3:e8:b8:4d:18:d5:55:88:67:9d:62:2a:34:d1:
                    66:39:0f:61:24:e2:a5:2a:89:ff:15:95:94:7f:41:
                    5c:78:7d:9c:7c:a9:85:c8:60:b3:b9:8b:94:65:f1:
                    3f:49:bf:10:e4:d0:9b:19:39:2a:8b:62:fe:54:91:
                    b6:20:be:37:c5:b3:e5:ac:d1:d1:b1:12:50:64:3c:
                    63:86:be:01:ee:fb:92:4b:cf:9f:2f:08:7c:e6:41:
                    30:8b:32:ae:60:0a:b4:d7:1b:2e:dc:03:cb:46:ff:
                    05:33:9e:74:03:05:8f:a4:06:db:fe:79:1b:f0:4e:
                    b2:45:51:db:c1:a2:97:48:34:e2:9b:e4:3f:04:5d:
                    01:de:46:83:58:80:06:ac:fc:12:e8:be:b8:fc:a5:
                    a7:40:dc:f3:48:6b:2b:17:ad:fd:d7:a5:d4:ed:42:
                    f9:a8:90:0f:8b:71:15:30:16:d5:c9:e7:39:1f:34:
                    74:9d:30:53:be:2d:79:46:0d:e1:33:35:48:69:32:
                    c0:59:92:81:c9:23:88:25:68:1d:fc:1d:ae:6c:9c:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:86:72:A4:CF:A6:0E:C8:40:08:F4:B5:C8:BB:3D:7C:03:89:DD:C1
            X509v3 Authority Key Identifier:
                keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:d5:e4:eb:0e:76:0c:f6:b0:30:7a:16:da:26:2e:5a:f5:
         c2:91:5d:81:e2:6e:a4:3d:6b:96:79:ab:16:e8:ad:52:16:0d:
         43:08:66:3d:fe:ff:6f:2e:0e:93:c8:7e:6d:96:5a:e4:7c:3a:
         5b:5a:6b:d1:e4:86:03:31:40:fa:89:d3:25:36:86:d9:be:9f:
         4c:b8:6b:08:13:c4:da:bc:30:01:ae:11:0b:8f:88:cf:c6:97:
         58:4a:90:cd:34:30:5e:8c:9b:41:1e:28:37:be:72:59:af:42:
         27:fa:f7:83:f5:84:cf:7d:db:fd:ad:76:30:79:e4:82:d7:cd:
         3f:cc:e0:c9:1e:5f:d7:a0:07:bf:2b:79:0a:a2:5e:98:fc:79:
         de:ac:48:15:64:13:ae:81:21:8a:e7:ed:82:1b:e1:57:82:40:
         41:50:23:8b:0e:13:d7:80:a9:24:66:16:a1:76:69:94:05:42:
         94:2e:ae:71:f5:11:07:90:34:d1:58:5a:1b:56:4a:15:c4:f0:
         3f:53:0a:23:28:c8:aa:a7:65:d1:70:89:71:04:a5:67:9e:37:
         00:da:b9:55:fb:52:6a:40:89:f4:16:34:34:2f:28:a9:74:ab:
         d9:40:cf:94:1c:b7:79:a3:ef:a2:8f:52:88:b8:0c:d8:cc:b6:
         a7:c9:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:02:29 2025 by rpki-client