Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File:                     vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier:          a6IYRrnAPW8owJJujepGrY3ac84kPT3aFLmTjrzosmg=
Subject key identifier:   5F:64:B0:52:1C:79:5D:BB:41:46:F6:EA:07:DF:5C:B7:0E:F0:F2:25
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1B0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number:          1B03
Signing time:             Mon 30 Jun 2025 16:28:25 +0000
Manifest this update:     Mon 30 Jun 2025 16:28:25 +0000
Manifest next update:     Mon 07 Jul 2025 16:28:25 +0000
Files and hashes:         1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: UcfjAX3xFRW0qSfdbxIXrpBC3+Q3/xPn4002u50JyPk=)
                          2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
                          rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6926 (0x1b0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: Jun 30 16:28:25 2025 GMT
            Not After : Jul  7 16:28:25 2025 GMT
        Subject: CN=6862bb29-2cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:5b:c0:ea:9b:24:39:f7:1e:80:b9:5f:53:
                    e8:75:ac:39:fd:a1:27:db:86:9f:aa:dd:cd:4a:7b:
                    5c:df:f3:fb:73:36:5b:71:d8:f5:92:44:4c:ee:f1:
                    3c:ed:ba:9d:f8:f3:63:45:72:e3:a4:62:89:da:33:
                    87:19:b3:67:35:cc:3a:07:3d:ad:74:ae:ed:4b:46:
                    18:05:b6:e7:ff:d4:ad:6a:0b:73:fd:3d:20:2b:70:
                    21:e9:bc:83:8c:99:8a:c1:ab:91:59:06:4f:29:15:
                    3c:c2:7b:9d:05:fe:c7:09:de:9d:7f:8b:58:83:b1:
                    20:27:49:73:c2:c2:51:dd:5b:90:b6:86:ab:81:bc:
                    9b:02:86:63:b7:49:2e:32:27:88:2e:81:32:58:06:
                    57:74:a7:27:d0:54:ab:b3:a2:b9:56:23:e5:49:5f:
                    f6:49:96:59:cf:14:7d:2d:2d:10:ce:90:43:b7:03:
                    4a:1a:4a:ba:e1:31:ae:34:e6:95:4f:82:04:0f:ae:
                    a7:4a:16:1a:0d:47:30:14:2a:59:92:ce:5b:21:e4:
                    17:22:ea:28:bd:10:b5:a6:dd:79:17:57:17:4b:ec:
                    48:28:30:5a:75:07:3e:12:1b:52:a8:5d:af:67:ab:
                    27:b8:58:9d:50:8f:89:db:7b:b6:ee:52:a4:d7:69:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:64:B0:52:1C:79:5D:BB:41:46:F6:EA:07:DF:5C:B7:0E:F0:F2:25
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:27:d6:f3:cf:03:4c:fa:a2:44:d7:07:77:29:81:c7:61:67:
         70:c3:ed:55:b7:d1:b8:48:0d:e7:33:c7:66:ce:09:d6:9f:be:
         54:2a:99:e3:86:b4:fd:cf:d9:9a:0b:a0:19:3c:29:42:5a:e5:
         47:0e:03:fc:19:ea:b6:d4:a6:b4:f7:98:7f:66:62:41:00:09:
         8b:41:d3:f9:f4:e0:11:b9:3b:51:21:ca:32:ad:56:3c:27:bd:
         40:96:3b:d0:90:33:52:0f:41:9b:82:63:19:bb:80:8e:9d:ae:
         eb:4d:7a:36:af:fb:61:75:0c:17:77:fa:42:63:14:c7:a1:cf:
         d1:6e:dd:57:eb:24:32:9b:9a:61:80:eb:19:c1:c1:dd:4c:3a:
         c6:28:77:72:26:2d:50:2b:9d:de:ed:5c:c1:99:49:97:e5:63:
         08:ef:4d:4e:1a:39:6a:d5:b4:18:93:4b:6d:ee:11:9f:40:54:
         3f:d0:4e:17:a3:ca:c9:c0:8f:29:aa:b2:80:20:7f:e5:c4:5f:
         27:6d:57:75:cf:27:d9:2d:00:f5:6a:b2:8e:f0:e6:92:47:78:
         93:79:c0:78:de:d1:11:1c:4d:be:49:34:7b:8b:aa:02:b3:51:
         40:97:4e:d6:1a:5f:b3:7d:05:6f:b8:a6:ad:78:02:d9:27:bf:
         da:29:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:37:35 2025 by rpki-client