Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          j+i7IvdYCsAk5M7VeJPyiKOlCSlAkv3oViIiCDb/Ck8=
Subject key identifier:   BE:7C:A0:E8:04:A0:58:64:FA:42:A6:46:0B:34:90:8D:86:83:27:CC
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          34C9
Signing time:             Wed 02 Jul 2025 15:24:15 +0000
Manifest this update:     Wed 02 Jul 2025 15:24:15 +0000
Manifest next update:     Wed 09 Jul 2025 15:24:15 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: BZvnWPL58zADzixoRA7JWKy8CyGpg5m2PIFeMLDirCI=)
                          2: 137AB7E8556211F08830E141C4F9AE02.roa (hash: J5ujZc+vMwHlknZdwOT8szkE8i/s5cFV08Bj4/0BHsw=)
                          3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=)
                          5: C230A90634A511F0A6FC4F68C4F9AE02.roa (hash: BL9gI5tb4s6Q0u5LFENT8bwJPMSEC2CuXOXMt4SUrro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Jul  2 15:24:15 2025 GMT
            Not After : Jul  9 15:24:15 2025 GMT
        Subject: CN=68654f1f-6187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:78:6e:81:6f:f4:af:09:22:e0:dd:ee:6c:
                    8b:a4:29:3a:34:b1:4b:07:d5:a5:61:db:54:f0:cf:
                    77:4f:65:3c:a0:2b:75:a8:cd:e5:a0:2b:3a:48:5b:
                    7b:4f:87:75:61:57:02:bc:55:3d:05:18:21:74:84:
                    95:ce:79:3f:35:0f:44:5e:4f:72:48:71:f8:47:17:
                    64:d0:aa:e6:cf:eb:67:62:08:12:30:9e:7d:87:9f:
                    28:30:e8:d6:62:dc:cf:45:95:cd:13:4d:ed:04:10:
                    ca:d0:20:b8:ce:5b:98:c4:1d:02:96:28:b7:bc:fb:
                    79:54:20:b9:25:e3:ff:34:4e:76:ab:a6:23:52:f8:
                    ff:17:64:e4:5b:7c:b5:e1:bd:af:2e:e6:26:40:95:
                    6d:c3:4d:e8:d8:df:7f:d4:c7:bf:88:d3:31:63:43:
                    84:c2:74:db:73:5c:b0:76:81:a7:fd:ca:3d:60:fd:
                    fe:9a:4b:fb:ab:a4:61:e6:4b:c0:5c:6e:06:e4:dc:
                    e0:00:bc:06:f1:f0:0f:e7:1a:a3:3a:c3:2e:4e:f8:
                    ad:88:ba:e3:35:61:cb:cc:27:b7:4f:95:ad:4b:97:
                    9b:0d:57:04:54:2c:cf:68:6b:f2:c5:03:c3:c1:51:
                    e3:51:93:b7:59:d0:5f:b9:4f:84:79:16:3e:6f:c1:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7C:A0:E8:04:A0:58:64:FA:42:A6:46:0B:34:90:8D:86:83:27:CC
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:18:c2:9e:63:23:13:57:ec:54:06:00:89:e9:26:70:94:
         59:2f:90:6e:76:1f:22:51:cf:2a:fa:3c:ad:50:14:97:a5:f6:
         2c:5e:3c:51:30:c9:77:c8:e5:8a:44:6a:7c:77:c3:50:54:ef:
         9a:1e:4a:61:6c:c1:e1:06:2c:3a:3f:28:bf:95:30:ba:cb:cb:
         69:6b:b8:06:dd:94:01:33:d6:4f:b1:e3:13:e0:16:18:27:56:
         91:cd:b1:ab:89:dd:e3:8a:cc:26:12:54:19:45:b4:cd:c1:e1:
         88:c1:b5:cf:4c:41:d1:b4:3e:3c:4e:25:34:00:7f:63:4a:64:
         39:85:d1:38:84:53:b1:09:46:e7:6f:a9:af:e5:9f:f6:6f:71:
         4f:95:a5:f6:1a:0c:e1:4d:1e:93:ad:af:ce:0a:86:ee:22:8b:
         59:e7:aa:81:c6:3b:53:8e:28:52:ff:33:67:68:5f:ef:af:86:
         6c:b3:95:be:31:e8:9f:34:54:9e:b9:f5:29:90:9d:af:1d:bd:
         5c:90:7d:2c:5e:6e:84:de:34:54:07:cc:34:0d:03:0a:c3:c5:
         4a:d5:49:2b:46:eb:78:b1:47:61:83:58:6f:3d:4f:5d:9e:3a:
         7d:91:90:4a:52:e8:47:f6:59:2d:23:32:ab:c0:27:b9:f5:68:
         35:c0:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:35:33 2025 by rpki-client