Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
File:                     DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json)
Hash identifier:          DeDYfyzj4LqHX/SbONf3NG2fSQU4BHH5jvyaA6xfC38=
Subject key identifier:   B6:5F:17:0A:03:AD:1B:C7:AD:DB:4A:9A:46:DA:9D:38:A0:81:A6:BC
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Certificate issuer:       /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
Manifest number:          054E
Signing time:             Mon 30 Jun 2025 23:47:51 +0000
Manifest this update:     Mon 30 Jun 2025 23:47:50 +0000
Manifest next update:     Mon 07 Jul 2025 23:47:50 +0000
Files and hashes:         1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: 9nmSRCzytTA2H88B8sgyTOsCGRIm5l5M3vQ06vJKUs0=)
                          2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
                          rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
        Validity
            Not Before: Jun 30 23:47:50 2025 GMT
            Not After : Jul  7 23:47:50 2025 GMT
        Subject: CN=68632226-6846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:51:8b:e5:c8:fb:09:77:6a:b2:9a:f3:fa:
                    25:e7:67:59:7f:93:e2:c5:23:0d:44:76:7c:0c:2f:
                    c3:fd:89:21:af:87:5d:e4:e1:bf:1e:41:b1:dd:f7:
                    18:91:79:79:04:3a:09:b2:2f:31:a9:5c:c2:f0:b5:
                    d5:ee:2f:a6:fd:5f:39:a0:9a:1e:c7:6a:6b:e1:47:
                    fc:91:34:83:6a:87:2c:51:d2:3c:9f:5e:3c:85:11:
                    71:40:7c:dd:55:4f:50:56:e3:02:5b:86:06:cc:67:
                    5a:96:d0:aa:03:20:98:3d:49:a7:e2:ae:d1:b8:b5:
                    b4:18:3b:06:bf:cd:ba:5e:35:c8:34:c2:3c:07:30:
                    7e:62:57:f0:5a:d8:8c:3f:2e:e3:25:35:3f:bf:0a:
                    34:89:47:f7:81:53:18:d6:b6:4a:23:8b:29:6b:e3:
                    5c:ce:37:3c:d8:93:e2:2b:61:66:19:29:c8:1b:b4:
                    c5:31:98:e7:df:a4:f8:a4:4b:72:ac:ae:15:7f:08:
                    95:92:6f:c9:95:1d:a3:cc:89:9b:6c:09:52:6d:7a:
                    28:b7:6c:b4:41:55:04:72:cd:23:cf:96:f1:2e:d9:
                    a4:2e:1f:5d:78:61:19:57:ac:52:ee:3f:d5:30:e1:
                    c3:37:1e:4e:43:d1:c7:c6:e5:01:7f:68:c0:59:12:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5F:17:0A:03:AD:1B:C7:AD:DB:4A:9A:46:DA:9D:38:A0:81:A6:BC
            X509v3 Authority Key Identifier:
                keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:a5:ec:54:c8:95:f4:1a:bb:10:70:6b:12:dd:21:2a:41:
         bd:11:0b:c9:b2:d5:86:a4:71:34:a3:29:1c:d2:2d:42:7e:33:
         3e:6c:cb:9c:44:cf:ce:ee:2a:88:09:22:b4:fb:03:3c:8e:a9:
         3c:5e:ca:11:7b:11:86:d8:bf:48:81:87:f4:b1:e4:9f:3f:e1:
         65:c5:77:2d:0f:ce:7d:7f:2d:bc:a0:9b:0b:c0:79:fe:bb:2a:
         e0:61:75:34:61:e8:d2:29:b2:30:34:95:cf:e2:98:a7:bc:1d:
         73:a2:2a:e6:03:5a:04:9a:0a:6b:b0:76:ab:c7:c1:74:dd:b2:
         1e:1c:c7:2b:5b:ad:8c:6a:40:e2:4d:3c:f3:e3:0f:0a:07:17:
         d5:d9:6f:d3:d9:00:bc:92:9c:b2:bf:2c:a7:bc:d1:63:35:bd:
         e0:47:98:09:22:3f:a1:9d:18:97:09:6a:63:e0:91:ca:b5:ca:
         8c:64:be:b3:30:00:4b:f0:e4:d8:e7:b9:29:e4:60:19:4f:2c:
         0b:b8:f4:a0:aa:e8:04:73:a6:7c:c6:85:a8:40:87:09:9c:cd:
         48:f8:e7:43:66:45:de:a6:d0:f0:7b:a5:4c:11:2c:20:39:16:
         03:2c:c6:c2:8b:30:75:14:12:ee:77:b1:22:5a:3b:b3:43:02:
         db:75:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:59:41 2025 by rpki-client