Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          BJ1dqAwxIWXLdb15NfvXaPru3jCW4AyA1R4gwwE1C5U=
Subject key identifier:   05:17:22:55:5F:F9:9C:EE:DC:19:85:4B:C2:66:C5:04:75:B8:E3:A3
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       03DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          03D7
Signing time:             Tue 01 Jul 2025 01:10:23 +0000
Manifest this update:     Tue 01 Jul 2025 01:10:23 +0000
Manifest next update:     Tue 08 Jul 2025 01:10:22 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: hnI8L62vEq+24CYknOLr0NfEsOKo4VX2KWrbVF4vu7M=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Jul  1 01:10:23 2025 GMT
            Not After : Jul  8 01:10:22 2025 GMT
        Subject: CN=6863357f-afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:d6:7c:39:94:28:ef:9b:f5:8d:66:62:0e:
                    a3:e1:66:f9:21:87:83:e8:58:e9:90:73:f0:3b:5a:
                    f2:81:95:55:15:6c:c6:1c:49:52:0c:ae:c8:c3:12:
                    a8:00:b6:48:eb:7f:89:60:c4:3b:a5:c9:9f:03:56:
                    a3:27:57:6d:bb:d8:92:70:16:27:00:ce:c4:54:26:
                    44:32:98:26:06:14:c0:ed:41:1b:0f:a7:56:96:df:
                    44:71:74:20:db:a5:4e:85:66:7d:06:c3:2b:89:1d:
                    b1:0e:7d:59:f9:3e:44:92:05:8e:3d:25:b6:c1:1c:
                    cb:6b:5c:2a:40:c6:d4:1a:1e:ad:1a:ee:60:61:56:
                    9b:67:b6:17:08:ba:aa:0b:cd:1e:f1:84:ae:0f:a7:
                    24:1e:f3:8d:d9:dc:9c:e6:42:1f:fb:96:03:cb:3c:
                    5e:d0:b1:c1:ee:56:aa:fd:38:bb:e0:f9:3b:f2:67:
                    30:af:fa:3c:cf:3c:02:bd:c7:e0:43:22:49:77:e1:
                    a1:46:79:40:ba:d5:58:c2:63:29:2d:6f:9d:d2:53:
                    e5:08:f2:12:8e:e1:9d:43:cb:79:94:99:ac:3f:0b:
                    ee:43:c9:cd:07:b9:59:e4:65:0d:37:83:ee:6f:a4:
                    4d:9c:95:3a:f2:0b:cb:ea:8b:5c:37:0e:e3:30:7e:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:22:55:5F:F9:9C:EE:DC:19:85:4B:C2:66:C5:04:75:B8:E3:A3
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:89:5c:68:21:4a:31:c1:af:84:23:ea:a4:af:3b:7a:94:1d:
         2d:b6:a9:fc:ba:e5:4a:76:f9:f0:71:86:e8:0b:d0:72:39:b2:
         c8:b5:43:46:8d:56:eb:04:e1:81:59:ba:6d:ae:dd:59:e4:d3:
         18:b1:d4:bf:1b:1e:42:fb:cc:94:08:2d:e5:c1:52:85:75:c1:
         1f:04:be:7d:74:bb:2b:26:df:87:57:4c:25:20:1a:fb:ec:3f:
         3b:f4:f4:29:f9:f4:b6:76:00:dd:88:70:3c:e5:03:a7:1e:40:
         8e:c0:14:bb:89:99:e2:00:38:fa:d8:46:38:63:1d:16:e7:b3:
         9a:f2:f5:d3:a8:91:9a:c7:ef:6b:2f:5a:02:a4:03:6e:ca:8e:
         3e:a5:9c:eb:42:6f:b5:31:12:c3:62:09:76:2c:a5:d6:26:a6:
         be:d8:5f:f6:2e:5f:aa:7b:ad:64:c3:f5:29:c2:fb:fc:26:20:
         60:9e:34:5f:1c:71:59:f3:84:53:e1:2a:3c:be:8b:63:32:a5:
         ad:f7:3d:af:d7:4e:11:e6:cc:e2:ee:9b:cd:f8:75:1b:9c:fc:
         70:05:d7:62:0d:06:44:ba:05:8f:f1:84:41:25:5e:aa:c4:91:
         31:e4:77:4e:89:c1:5a:50:eb:f6:ad:68:e2:3c:d5:c6:ca:ea:
         c0:ba:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:38:18 2025 by rpki-client