Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
File:                     ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json)
Hash identifier:          UbDhasPfCDpjLW/LnyKudFMwIaLc/kex/fKxBCTmOx8=
Subject key identifier:   99:4F:39:1C:EA:FF:D4:85:70:E9:5F:D3:79:4F:53:8D:D0:65:48:10
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
Manifest number:          05
Signing time:             Thu 03 Jul 2025 08:27:20 +0000
Manifest this update:     Thu 03 Jul 2025 08:27:20 +0000
Manifest next update:     Thu 10 Jul 2025 08:27:19 +0000
Files and hashes:         1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: AugZQakDA7WqcrarjYRZbhA0YpzKcMUK8VSrCHbEsQg=)
                          2: 499C2F0A534111F089393B42C4F9AE02.roa (hash: fSSf7ryiBLDRlZlFztp2IYlUMMSWWQRmpXOgQAMLAFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Jul  3 08:27:20 2025 GMT
            Not After : Jul 10 08:27:19 2025 GMT
        Subject: CN=68663ee8-3113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:c3:d6:19:5d:22:97:05:6c:71:3e:db:56:
                    ae:ac:d2:37:5c:2b:41:71:7b:68:0f:36:a4:01:0d:
                    0f:0a:ff:34:25:b9:6b:3a:8c:6e:00:cf:1f:f9:55:
                    1e:4c:fa:9a:77:8d:53:6c:fe:6f:48:11:da:db:37:
                    fe:4c:a6:2c:42:22:5a:7e:7b:3c:b7:68:84:fb:ba:
                    82:ec:42:42:85:00:1f:77:fa:bb:4f:a6:65:35:81:
                    03:16:b7:bc:91:82:4b:0d:fb:36:0a:16:5d:59:40:
                    ce:87:bb:46:b8:f7:1d:88:db:df:c8:73:cb:4d:c8:
                    2b:37:2e:d1:cd:74:ab:6e:9b:6a:5d:98:26:1e:3d:
                    2e:17:68:84:f1:2c:62:9a:7f:d7:12:d7:55:ca:6e:
                    51:06:a5:aa:b0:a1:4e:25:4e:ac:ee:cf:9a:1a:8d:
                    05:67:b3:66:11:51:6d:76:42:68:42:12:1f:c6:2d:
                    1f:60:a1:38:99:d4:d8:92:46:10:53:50:6e:e4:67:
                    3c:36:4c:c7:28:00:d2:f2:85:3c:b8:3f:f9:3e:d1:
                    a8:52:93:2f:c5:e7:ab:c1:49:89:f9:62:64:87:d6:
                    76:43:1c:e8:97:4f:2d:15:69:38:1e:60:7f:38:fd:
                    07:27:b4:14:b4:a0:6e:96:7a:34:7f:5c:57:ff:b1:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:39:1C:EA:FF:D4:85:70:E9:5F:D3:79:4F:53:8D:D0:65:48:10
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:9e:83:06:e2:d3:02:f8:56:83:1a:b1:02:9f:15:1c:0e:
         49:82:cc:c4:74:4d:51:b7:f5:c8:35:d7:91:ba:2b:40:df:94:
         9a:90:da:cb:c7:71:5c:71:58:47:e3:13:22:f3:bf:6b:34:a4:
         a3:db:70:27:d5:55:e8:9e:60:61:6d:0b:1f:2f:88:b9:03:da:
         b0:ce:5e:f8:d9:93:35:44:8b:5a:14:f4:75:82:8d:3f:16:ab:
         73:b3:e7:38:df:6b:82:b0:86:f1:5d:90:77:c2:bb:cb:9c:91:
         b2:f5:56:16:57:9f:9c:fb:c6:34:61:4f:ce:2c:2c:31:8b:cb:
         60:2a:84:21:07:e2:6e:6f:05:1d:3e:71:42:e7:e8:9c:5f:50:
         29:25:9b:b3:e8:8c:08:b3:c3:73:93:9a:cf:95:ac:ed:d6:c1:
         4d:43:5d:c1:19:34:af:b6:47:99:8f:35:ea:ea:f4:62:4a:23:
         6c:0b:94:20:8b:4b:d9:11:9a:0f:d7:e8:40:d4:b7:34:db:87:
         5e:69:cf:a3:43:b6:6b:6a:aa:23:87:26:8a:fc:0e:34:ad:97:
         0c:4c:2e:ee:26:c6:10:41:ac:45:4b:83:e1:54:65:4e:5b:62:
         e2:88:56:b6:73:8f:5a:1d:37:06:2b:95:71:b0:94:be:55:27:
         85:fc:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:46:02 2025 by rpki-client