Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          J8lHXyQ7kC5euOSR3i8Ha9C87gHP5fLxpZtqXmWjWm4=
Subject key identifier:   24:BC:51:F3:26:13:78:16:6A:F6:61:D4:19:05:75:EE:98:B3:DE:3F
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          0272
Signing time:             Tue 01 Jul 2025 02:26:19 +0000
Manifest this update:     Tue 01 Jul 2025 02:26:19 +0000
Manifest next update:     Tue 08 Jul 2025 02:26:19 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: CkLpuluCMhV1frCplvwgJWfbqkiuyonG8+MDqm0G/ro=)
                          2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=)
                          3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=)
                          4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 02:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Jul  1 02:26:19 2025 GMT
            Not After : Jul  8 02:26:19 2025 GMT
        Subject: CN=6863474b-9523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:8f:29:4e:17:95:b2:be:15:89:07:74:d8:
                    e5:d1:46:f0:d8:83:74:41:66:d2:73:9f:f1:12:35:
                    b1:8a:a6:65:69:dd:8a:8a:0e:e5:59:69:18:c3:78:
                    f7:b3:6f:aa:67:3a:7d:01:7b:94:1d:b1:48:e5:e4:
                    e1:4f:39:a8:a4:5d:6e:22:02:d2:f5:01:80:bc:3d:
                    52:44:5a:c7:7e:5e:35:60:96:2f:31:c5:b7:28:23:
                    b3:3e:9a:32:7c:f0:53:61:04:0e:53:cd:61:af:d4:
                    21:62:d5:c5:4b:39:12:99:34:a7:7c:4f:fb:4a:b2:
                    a1:26:0f:f2:e2:11:4a:80:00:be:a4:c4:b8:a7:2e:
                    b0:bc:c8:8f:23:7e:57:76:e4:f4:48:83:bb:16:d8:
                    c3:cc:6c:8f:a9:e5:ad:94:bc:c1:53:9e:45:3c:81:
                    a4:aa:f4:d2:6a:7e:01:b6:d1:9b:d4:83:2a:a4:65:
                    91:64:74:a4:d7:2b:c1:d3:fc:9e:e7:ca:7e:8a:3d:
                    2d:c2:c6:fa:8c:ae:96:ed:9a:b0:39:f9:2d:2c:3a:
                    c4:13:42:44:ce:06:9f:09:d4:52:96:a2:32:f3:14:
                    de:52:d9:49:df:00:03:89:8a:72:2a:87:91:bd:1c:
                    6e:91:34:cc:74:f8:77:cc:b1:40:2c:62:25:4a:97:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:51:F3:26:13:78:16:6A:F6:61:D4:19:05:75:EE:98:B3:DE:3F
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:4b:10:17:33:d7:59:76:c1:34:90:42:0c:7a:ce:a8:17:
         a0:29:79:49:f1:ee:d2:ce:95:cc:96:7d:06:cc:28:da:db:11:
         52:51:99:61:12:27:e1:e4:05:af:46:43:e4:fc:04:99:68:5f:
         5e:0c:9c:fc:9f:02:84:b8:47:12:1b:a6:89:96:c4:39:ae:25:
         1f:90:a1:8c:c4:38:f6:13:44:ee:10:06:a1:28:24:bb:26:c5:
         9f:0d:16:5c:a6:00:52:4e:07:fa:9a:27:f0:34:a3:14:d5:c1:
         0b:79:2b:98:ec:ac:8c:2d:6a:a8:08:b8:40:9c:a4:fe:92:31:
         0b:ff:df:a8:9c:62:e8:52:75:db:e2:20:61:29:36:af:7e:81:
         a1:6e:bf:b8:87:ac:55:65:70:13:eb:d3:e6:8a:37:b2:9b:f4:
         33:ab:ee:41:af:7f:bc:1b:28:9b:50:ba:d6:45:ea:fd:96:0c:
         52:5f:d2:27:b9:ef:17:16:f9:54:81:52:4b:38:3b:bd:0b:4e:
         45:15:43:fc:d4:25:61:60:3d:48:ba:7c:ef:01:5b:8f:d0:3d:
         ec:52:8e:fc:66:62:cf:26:ef:81:29:84:b6:81:73:6e:a8:4a:
         a2:89:34:54:0a:63:b1:56:56:f8:63:4e:9b:bd:78:ed:c7:25:
         6c:8c:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:31:34 2025 by rpki-client