Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File:                     ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier:          A84P6H/D8y8Qo/3ApMKrBOnYS3V+t4kmNIPjVSyYUak=
Subject key identifier:   78:DE:B3:3E:77:AF:26:BE:99:B3:78:3C:88:98:05:F1:9D:69:B6:43
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer:       /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number:          F3
Signing time:             Tue 01 Jul 2025 05:48:53 +0000
Manifest this update:     Tue 01 Jul 2025 05:48:52 +0000
Manifest next update:     Tue 08 Jul 2025 05:48:52 +0000
Files and hashes:         1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: bsfaYFJ39gAefjnZpSicHYORMdMYyBSUjmD6n1823s4=)
                          2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
                          rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
        Validity
            Not Before: Jul  1 05:48:52 2025 GMT
            Not After : Jul  8 05:48:52 2025 GMT
        Subject: CN=686376c5-6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:68:a1:3b:43:13:30:0a:49:c6:20:4a:21:
                    58:51:04:ef:9f:86:0d:1e:88:9a:56:76:88:73:96:
                    a8:34:82:0e:30:2b:54:a6:a8:68:a3:30:86:d9:0f:
                    66:f5:a5:9a:5d:e7:19:ef:22:3b:a4:bd:04:55:4e:
                    a1:8f:35:8d:d2:83:7a:aa:80:d1:15:07:c2:76:05:
                    14:f6:f0:d4:4d:c9:e6:af:eb:97:35:0b:33:e0:37:
                    65:bb:7b:66:dd:3f:15:63:a6:3e:ac:c8:e0:8d:2a:
                    2c:e4:a7:55:92:2f:1c:1f:f3:a4:03:ee:f3:61:df:
                    e9:5c:5b:a0:3f:00:7a:e1:99:92:bb:e6:f0:9c:f2:
                    96:f0:76:c3:61:a6:f9:fb:5c:0e:2f:36:e9:56:bc:
                    cd:71:26:c7:4c:86:04:a5:a9:2d:62:b8:22:2a:6e:
                    46:8d:6d:81:93:55:c8:c6:9a:20:dd:85:aa:19:1a:
                    c8:60:e8:9d:d5:48:81:72:5f:26:bb:35:05:f5:8b:
                    58:09:14:6e:ea:ba:04:11:31:b7:64:d4:16:32:f8:
                    76:95:83:d7:fb:76:c4:92:3f:8f:63:08:60:88:4f:
                    99:15:0c:08:28:88:09:dc:a9:97:8c:5d:95:62:37:
                    d6:7e:19:84:cd:f6:b5:f7:17:9a:f1:a6:f6:ba:9a:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:B3:3E:77:AF:26:BE:99:B3:78:3C:88:98:05:F1:9D:69:B6:43
            X509v3 Authority Key Identifier:
                keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:b2:12:4e:d6:19:44:c7:df:37:e2:49:5f:d8:31:d3:b3:
         b5:ba:7a:63:96:c4:38:96:e9:d4:1c:4d:7e:fb:6d:8b:03:53:
         45:95:84:19:36:e4:f4:2d:aa:ec:dd:1b:3b:68:7b:dd:a3:12:
         a4:db:4c:e2:e8:51:c0:ed:d4:f9:d2:b3:a8:19:b5:52:30:b3:
         57:22:ec:bb:b7:c3:b3:b7:3d:53:4e:ef:ab:87:72:30:9d:1e:
         f9:17:df:54:33:d1:d9:fc:fe:83:e5:87:c5:d1:72:0a:6d:96:
         c9:d6:55:df:31:76:dd:3f:04:8f:02:a8:b2:92:0c:79:c3:33:
         18:f8:f4:1f:d6:aa:3f:39:60:f8:92:21:68:a6:e0:50:0f:5f:
         22:1c:0e:18:2e:71:9e:72:b9:0f:2c:8a:29:2e:4b:35:3d:86:
         4b:2f:5d:9f:c4:19:f9:e4:a1:e9:b0:c3:af:d0:4b:3e:6e:c4:
         fd:94:6d:7d:87:69:44:4a:20:67:99:cc:c8:d0:a0:05:4b:d6:
         3d:51:3c:fd:5b:d3:65:43:22:2f:7c:d0:9b:82:04:9d:13:ee:
         f9:1a:3b:f7:f0:1e:91:dd:88:6d:3e:2c:9f:1d:4c:ad:a2:09:
         b8:10:84:66:76:71:5e:42:04:fa:b0:a0:1f:f6:38:12:8c:ee:
         d4:18:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:51:47 2025 by rpki-client