Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          f0qhJivnqFUv+a7D/YeQvZ4euq8rAh6SIp2lYuVYOcs=
Subject key identifier:   6E:DD:F7:1E:9C:62:A9:F0:81:44:E4:0B:94:E4:76:54:89:D6:90:B3
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          017B
Signing time:             Wed 02 Jul 2025 15:16:41 +0000
Manifest this update:     Wed 02 Jul 2025 15:16:40 +0000
Manifest next update:     Wed 09 Jul 2025 15:16:40 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: NsHLJOp7/3Ix5RqBOmcWQ/ETrQ0mZoDMvw9tZn0zyqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Jul  2 15:16:40 2025 GMT
            Not After : Jul  9 15:16:40 2025 GMT
        Subject: CN=68654d59-8ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:be:d2:bc:ce:1d:f8:86:85:da:17:4a:6b:
                    57:cd:d7:b5:5c:bf:18:2c:2e:5a:c5:70:91:ba:c6:
                    eb:1b:d4:93:c3:c1:c7:78:14:12:7d:fd:17:3b:82:
                    26:79:15:af:24:90:dd:7f:5a:cc:7e:83:63:a0:18:
                    1e:a1:77:a7:88:ce:a4:57:20:3b:87:99:ae:fe:cb:
                    94:13:73:03:35:1e:e5:e1:92:88:5f:ff:39:c9:65:
                    68:6f:f9:65:b3:b1:47:6a:e8:25:74:3e:62:01:66:
                    eb:4e:95:c9:66:3c:ef:7a:eb:57:02:b5:f4:cf:72:
                    62:44:00:69:80:1b:74:9b:b7:50:bd:56:ea:28:d3:
                    5c:8a:52:10:b8:92:12:1f:11:f4:95:d2:2e:6e:ce:
                    83:52:c3:51:10:27:3c:48:3f:f1:b7:30:8a:5d:f3:
                    a2:c8:93:ed:50:00:99:50:25:80:38:32:13:41:e1:
                    54:59:79:d4:22:9e:df:79:90:18:16:0b:5e:a5:53:
                    fc:5c:e4:de:cc:8e:d6:ec:2d:52:eb:08:a0:4b:fd:
                    ea:77:8e:84:e4:c5:02:7c:55:09:9e:45:fe:80:6c:
                    40:eb:84:ee:19:05:4c:26:35:f6:f7:12:60:c9:9f:
                    04:79:60:be:79:f3:55:9a:69:88:b6:4c:c0:b9:ab:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:F7:1E:9C:62:A9:F0:81:44:E4:0B:94:E4:76:54:89:D6:90:B3
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:61:0a:7a:af:c6:54:65:e9:d9:29:75:22:02:71:f2:a4:cb:
         e3:59:3c:f8:ba:2a:80:5c:ea:78:e8:b4:d4:bf:43:48:3b:0c:
         84:72:a3:03:66:b7:75:02:22:20:57:1b:e9:cd:17:02:85:7d:
         4e:11:d6:b4:20:4f:68:68:9d:5a:ac:24:4c:53:ea:e7:c0:6d:
         02:ab:13:ca:9d:5e:75:8d:07:f5:cd:2e:37:24:32:91:a1:57:
         72:c1:f4:c0:77:6f:98:5d:96:43:7e:10:09:6f:c1:2b:c7:50:
         05:de:9d:d5:2f:2b:d4:b5:2d:6f:08:7b:21:ed:00:9a:f8:24:
         d1:ec:91:0a:85:2d:85:ec:ac:4b:5c:7b:81:13:e8:41:14:78:
         18:e6:89:0f:26:48:6a:64:65:24:93:2b:18:79:a5:18:6a:27:
         05:ff:a4:74:49:70:59:1e:29:e7:db:a7:e6:05:fc:51:ee:61:
         ff:e3:84:b7:0f:69:c7:58:ca:cf:8c:03:a8:aa:06:24:e6:c7:
         e3:9f:45:45:64:0f:c8:cb:56:a1:3d:14:15:61:c9:b0:4f:9f:
         ff:f9:b4:06:98:a2:7f:59:f5:f8:7e:0a:6d:6b:c1:bf:65:02:
         db:aa:90:82:43:22:31:89:8e:34:be:95:27:1c:a7:a9:5c:03:
         35:7d:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:04:17 2025 by rpki-client