Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
File:                     m0G07JA0ytKB1baCVnQwWQMlK94.mft (raw, json)
Hash identifier:          6okv7OVivTpILi4cQdYMgHk9BILovlF7Ktat1U3/0rQ=
Subject key identifier:   C0:C7:CB:B8:91:3B:A1:BA:9E:2C:F5:39:6C:42:37:18:44:8E:61:9F
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Certificate issuer:       /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
Manifest number:          060F
Signing time:             Sat 10 May 2025 22:26:25 +0000
Manifest this update:     Sat 10 May 2025 22:26:25 +0000
Manifest next update:     Sat 17 May 2025 22:26:25 +0000
Files and hashes:         1: m0G07JA0ytKB1baCVnQwWQMlK94.crl (hash: OaTR6By64vUvIl4iDWhqxFj8U5OVZ8F+r2uYEvmZL5A=)
                          2: 7EA34D309EC511EBA85F8276C4F9AE02.roa (hash: yK6C1pWwJA6WJCQDjIzeh8mb+889ajrC1dn+LyzHgJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
                          rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
        Validity
            Not Before: May 10 22:26:25 2025 GMT
            Not After : May 17 22:26:25 2025 GMT
        Subject: CN=681fd291-923b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:9e:47:b6:78:73:fe:6d:f7:03:d1:80:86:
                    f3:7a:15:d3:3f:48:2b:42:83:ca:e9:ba:ef:ad:08:
                    f6:0e:02:a1:38:1b:4e:af:bf:41:5a:ff:f0:21:13:
                    56:a8:1c:86:40:91:7a:bd:66:34:34:72:cd:a5:9b:
                    8a:43:19:95:32:e3:77:0b:d7:ef:9d:e3:41:46:60:
                    25:f7:42:8b:03:fb:a6:ec:62:18:22:97:c1:de:f1:
                    bb:4a:66:e1:2e:bf:2b:c7:5e:b7:f8:40:49:33:ba:
                    c3:ce:bc:cd:5c:a0:3f:9a:7d:1e:0d:8b:26:26:ed:
                    fc:a8:ac:7b:a5:df:c2:f3:cc:11:f3:ed:9e:e6:d9:
                    00:e0:ce:a8:5e:d2:04:62:19:58:81:93:bd:6a:5b:
                    0c:e5:38:43:97:29:9c:30:a0:56:12:09:05:58:37:
                    73:13:68:b9:e3:d9:a9:ce:d5:30:bb:23:99:ad:73:
                    3d:7b:48:36:23:81:1e:6c:22:4d:7f:fb:b9:24:34:
                    ed:5b:8d:dc:67:ce:2d:cc:f1:71:b7:16:37:a9:3c:
                    59:80:31:70:13:7f:57:42:a9:49:1e:8f:3f:56:8f:
                    79:06:9c:a6:3f:fd:08:32:15:a0:6f:a1:43:a2:46:
                    81:38:48:6e:a5:35:eb:65:f0:80:35:90:b9:10:2f:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C7:CB:B8:91:3B:A1:BA:9E:2C:F5:39:6C:42:37:18:44:8E:61:9F
            X509v3 Authority Key Identifier:
                keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:97:99:96:4d:b2:03:c4:77:84:b4:3a:0a:e5:1e:e0:d6:
         7f:c4:cd:ef:10:1b:67:d5:7f:1e:e4:3e:a8:83:81:bc:0a:63:
         bf:f8:86:04:85:87:90:c0:37:2a:55:07:eb:65:39:dd:9e:b9:
         6c:76:84:89:68:37:32:8c:bf:0f:1d:90:25:c5:5b:fc:82:fa:
         9b:bd:c8:ee:9f:4b:b7:ad:7e:0f:74:1a:5b:84:18:bf:d4:03:
         ef:50:c4:26:09:d7:b4:76:52:97:b1:b3:59:ac:53:35:ad:77:
         17:6f:f9:b9:d7:32:fa:06:10:61:6a:e8:95:a9:17:e9:3e:40:
         ab:f2:b6:c3:f7:40:a9:5d:08:ee:08:dd:90:42:d0:9b:3c:8f:
         bf:f8:44:b8:be:7c:b5:ce:fe:52:c5:da:31:95:e1:60:dd:2c:
         08:fe:aa:4b:c3:64:0c:34:32:38:64:7a:8b:c8:44:ec:70:f9:
         07:f4:5b:60:e3:e5:64:12:0d:57:bd:83:62:3f:b7:09:cd:83:
         d4:c9:14:91:c4:59:4a:17:ee:ff:90:7c:dd:ff:d5:1d:19:1b:
         a7:8f:93:f0:ca:a4:f1:51:9e:60:1a:b4:f5:1d:a5:1b:97:9d:
         99:62:9a:8f:22:52:0e:e4:d0:71:49:d2:1d:a9:99:7a:9f:78:
         9e:54:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:05 2025 by rpki-client