Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          7DMyH6ZZa1IS+nUeY9qdJEFBxizMY/rnKrN835UROSk=
Subject key identifier:   0D:F9:43:B5:62:A5:C9:BF:75:B0:94:56:41:2B:1A:17:C8:60:B1:9D
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          63
Signing time:             Thu 03 Jul 2025 07:17:45 +0000
Manifest this update:     Thu 03 Jul 2025 07:17:45 +0000
Manifest next update:     Thu 10 Jul 2025 07:17:45 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: rxhVUA+qqwxmJnslQgOHOgniOEt6jh/KhMe07yAUN9U=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: Jul  3 07:17:45 2025 GMT
            Not After : Jul 10 07:17:45 2025 GMT
        Subject: CN=68662e99-26b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:fb:7e:5e:a3:f1:e5:7e:a5:93:7b:4f:ca:
                    0b:b1:6e:f4:e0:c7:e7:22:6d:ca:8e:1a:96:60:a6:
                    f6:72:ab:10:67:e3:46:02:62:fe:85:09:6b:d6:14:
                    09:da:ad:82:50:3e:a1:1a:b8:f9:a7:38:44:a8:b9:
                    7c:57:b6:1e:97:13:80:47:d4:34:86:3b:c9:d7:82:
                    f3:9e:25:a6:68:0c:2e:c2:20:a3:d2:c2:88:7c:41:
                    1f:5c:f8:03:0b:c4:69:a9:8e:d9:d8:f4:09:36:30:
                    9a:dc:a4:7f:0b:7b:c6:de:23:98:a6:0e:2b:32:cb:
                    19:52:bd:d9:1f:ee:30:e8:b2:8c:a8:0b:55:f3:ed:
                    a6:83:d4:06:28:2f:1a:5c:ec:2d:c8:b2:a9:f9:09:
                    cd:a3:96:61:63:53:c2:5f:64:4c:db:95:01:c3:25:
                    e7:b6:ed:08:8e:40:3c:99:ff:a3:b3:94:d1:35:d3:
                    8c:f8:8d:32:d7:3e:d1:ac:db:66:6d:c8:92:be:25:
                    c4:59:76:ce:18:9b:20:6f:dc:d5:b8:e3:a0:82:ff:
                    76:62:01:83:3a:d6:a5:a7:b2:d0:4b:22:24:25:3d:
                    49:7a:7f:61:58:65:7f:52:30:66:af:d5:32:60:ca:
                    1e:85:d4:c9:6b:0d:59:cf:b8:30:1c:be:1e:95:8b:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:43:B5:62:A5:C9:BF:75:B0:94:56:41:2B:1A:17:C8:60:B1:9D
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:79:30:98:f0:a1:d8:e5:4d:f0:1d:73:b1:b3:fd:07:01:
         63:76:76:58:bd:cf:14:db:78:ac:68:74:6e:11:da:1b:08:97:
         b4:b3:c0:56:6b:29:7c:e9:95:1a:94:a4:9c:48:b7:c4:dd:c7:
         3a:76:d6:e6:be:4b:c5:74:2c:8c:a0:b2:6f:e3:0d:47:c7:2c:
         3d:d1:b3:30:8b:5d:65:d8:5c:16:97:2b:a9:50:af:7b:4c:7c:
         72:78:8d:1c:8e:05:7c:45:04:bb:d3:ad:f3:11:d1:99:60:57:
         0e:f0:6d:54:9c:c6:5c:a8:11:77:8b:3b:58:f3:ed:fd:b2:0d:
         e4:b7:af:71:a3:d6:8b:d8:58:2d:1b:24:2f:fa:f6:76:e4:93:
         60:f4:a4:75:51:60:25:91:f3:e6:e4:8b:12:d9:30:14:86:9f:
         9a:07:c7:0b:83:31:84:eb:37:76:c0:1c:63:33:f1:e5:92:df:
         31:f0:85:bf:d7:f1:19:16:88:6f:61:9d:c9:3f:18:b7:f7:01:
         a4:11:91:25:32:f2:91:d0:09:0f:50:f9:44:06:3c:f9:c1:2d:
         eb:af:61:3f:b0:68:b6:01:90:e3:11:c1:bd:a1:0a:87:e0:ff:
         ba:8b:d8:dd:96:9e:37:f8:c3:ce:9d:f1:20:ed:5e:18:21:5c:
         94:52:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:30:03 2025 by rpki-client