Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File:                     v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier:          B/1643JgaUcwx7H+9IR3f7CWrZLApdw+xxS2/iimT3w=
Subject key identifier:   7C:40:AE:6D:ED:EB:5D:DA:39:7B:80:52:9F:AD:22:93:48:C2:20:D6
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer:       /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial:       0647
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number:          062B
Signing time:             Wed 02 Jul 2025 23:07:43 +0000
Manifest this update:     Wed 02 Jul 2025 23:07:43 +0000
Manifest next update:     Wed 09 Jul 2025 23:07:43 +0000
Files and hashes:         1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: AtehPzPbVxg3rFpOKWhZ4h3SQ+nGPsW8oCAqFroHNzk=)
                          2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=)
                          3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=)
                          4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=)
                          5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
                          rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
        Validity
            Not Before: Jul  2 23:07:43 2025 GMT
            Not After : Jul  9 23:07:43 2025 GMT
        Subject: CN=6865bbbf-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:c9:cd:2e:ad:e8:33:59:04:b7:dc:d5:2d:
                    26:56:00:22:23:d8:a3:03:80:35:ae:2b:78:a7:e9:
                    d8:53:af:e6:bf:5d:ed:3b:4d:50:0b:48:61:b7:00:
                    18:8a:34:7f:eb:d7:a6:ba:92:99:ee:8d:2f:6d:a2:
                    07:4a:90:4e:f8:90:fd:11:2b:28:a3:b5:7a:67:91:
                    2d:3b:f8:32:47:42:d9:ac:ce:4d:ec:b6:4f:2a:19:
                    33:10:31:28:60:2b:53:b0:62:11:53:5f:de:9a:6a:
                    17:ec:45:ec:6b:56:fe:7c:69:f7:9b:2c:ad:b1:c8:
                    df:e0:4f:a8:7a:c0:91:62:e8:b7:19:dd:d8:9b:b7:
                    54:12:c1:5d:b6:da:a7:c0:9f:c8:73:c1:3d:13:53:
                    27:cb:e2:e9:40:e1:3c:32:91:9a:a5:3a:ac:d8:3f:
                    39:b7:66:4f:6e:74:5e:0c:5f:e8:a2:8d:32:45:fa:
                    a9:69:4b:4b:2b:56:e3:57:e0:79:49:78:55:70:72:
                    9e:a5:c8:26:6e:06:06:fd:b0:2e:b2:a7:32:f3:f9:
                    8b:7d:e2:f3:b1:e3:d4:9e:8b:a8:77:06:ac:40:00:
                    c7:65:ad:49:ea:76:ae:fd:ad:24:40:15:83:ca:a4:
                    be:01:b4:e7:06:c1:cf:38:5b:d3:07:68:78:9c:85:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:AE:6D:ED:EB:5D:DA:39:7B:80:52:9F:AD:22:93:48:C2:20:D6
            X509v3 Authority Key Identifier:
                keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:db:ee:6a:b9:c9:0b:c6:de:55:00:77:f9:f6:65:b3:88:
         94:04:ee:c5:d2:0e:59:7d:e9:a6:da:5d:ec:74:d4:de:59:a7:
         9d:78:78:1c:cf:0d:b3:e0:cd:cf:3f:46:be:72:3b:33:62:82:
         bb:1e:11:65:6f:e6:ca:51:93:a9:10:33:d3:ac:1b:d1:21:94:
         06:7d:a7:da:e1:91:05:a5:e3:c3:41:52:e2:54:5e:fb:0e:92:
         be:3d:55:bb:b3:28:07:ff:8d:31:95:89:91:c9:09:df:29:fc:
         bb:48:e6:f9:8d:51:22:80:98:85:04:6e:89:2f:39:35:bb:1d:
         fd:ab:52:a9:8c:bf:19:b5:28:c3:76:81:8b:42:ce:47:96:43:
         aa:2e:37:b9:33:5b:40:1d:b6:85:7c:28:2f:31:13:73:0c:e6:
         ed:58:30:11:96:33:11:dc:34:0c:85:64:c7:07:b3:a7:6a:e7:
         89:9f:41:7f:22:a5:9f:bb:8a:f8:82:c0:71:6f:03:8d:5d:c0:
         a4:08:50:8d:35:e2:2c:76:3a:6c:62:50:b2:2b:ea:56:01:08:
         8d:62:7b:58:1c:15:9a:c3:48:31:24:b5:33:22:cf:fa:6d:ff:
         e0:8e:7e:9e:36:30:a0:23:3c:2d:bd:af:e8:9b:83:49:bb:24:
         b3:6c:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:40:23 2025 by rpki-client