Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
File:                     31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json)
Hash identifier:          4tJWePYQo1+qyphkPE3ZMtXd5UrB4Ejk6p4zkKX7rRI=
Subject key identifier:   8A:72:38:C3:DC:E9:14:F2:2A:FF:5F:A1:B9:C2:60:FC:9C:5E:66:6B
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Certificate issuer:       /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
Manifest number:          06AD
Signing time:             Mon 30 Jun 2025 22:28:32 +0000
Manifest this update:     Mon 30 Jun 2025 22:28:32 +0000
Manifest next update:     Mon 07 Jul 2025 22:28:32 +0000
Files and hashes:         1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: LpcXXb/c3PsvenEf+ev4edIJdyAXJiy01YDuMCRgRPA=)
                          2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
                          rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 22:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
        Validity
            Not Before: Jun 30 22:28:32 2025 GMT
            Not After : Jul  7 22:28:32 2025 GMT
        Subject: CN=68630f90-cdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:df:27:b4:54:de:a8:92:4f:e8:0e:2a:63:
                    4c:f6:a0:34:66:1d:6a:34:a8:6e:de:f5:1d:c9:d1:
                    0b:74:bc:52:80:7c:7a:db:95:24:75:22:08:c4:98:
                    5d:ec:fe:28:5e:6c:f3:23:a5:24:4e:aa:29:ef:0c:
                    35:1d:03:c9:30:77:92:05:f3:eb:c7:2c:5a:1e:af:
                    5e:27:22:a1:4b:88:40:de:cd:34:c8:00:a1:a3:31:
                    fc:ee:c3:31:a7:b2:6b:93:a1:c2:96:cd:fc:10:6c:
                    0e:f5:28:0a:30:a0:63:b0:e1:2e:3e:75:e9:2b:f6:
                    b0:42:83:80:7f:46:ef:1d:bb:c9:13:db:36:98:51:
                    59:fd:b4:43:67:9a:e8:15:ee:d4:84:af:44:f1:a8:
                    b4:75:3c:16:b2:88:86:56:34:6d:d0:82:de:f3:08:
                    13:6e:fb:d9:47:84:e7:3c:fd:ff:35:37:aa:b8:9d:
                    08:8d:6f:79:85:c2:a0:d1:23:87:51:e0:ac:fb:4e:
                    c7:ba:8c:cc:e4:b2:88:2d:dc:be:37:cb:e5:75:40:
                    c0:49:49:94:23:a6:5b:c5:9e:8e:c0:38:1f:fa:7a:
                    0a:e5:6f:6f:36:af:e0:c7:70:a9:70:7a:45:8f:5a:
                    ec:90:a7:ce:da:53:bd:77:1f:de:c0:f5:24:6f:09:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:38:C3:DC:E9:14:F2:2A:FF:5F:A1:B9:C2:60:FC:9C:5E:66:6B
            X509v3 Authority Key Identifier:
                keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:9d:7a:5e:96:3d:eb:89:6d:9b:06:73:d8:53:60:af:6c:
         51:c1:b8:bb:80:ab:ac:a3:ba:80:e8:2c:da:3f:24:60:68:99:
         f1:cf:1b:32:b5:b8:6e:cd:bf:ab:9b:b4:15:72:9a:6a:2c:8c:
         ba:bc:ae:6f:6f:5f:92:3e:13:53:25:cc:1c:7b:14:62:95:ef:
         a3:7c:83:8d:64:63:02:27:11:56:4c:4a:f9:a1:16:eb:af:d2:
         ca:5a:9a:54:0c:7f:5f:53:a5:e2:0c:e4:cd:bd:11:0a:81:ba:
         bf:81:0f:3c:5c:b9:80:99:1b:89:42:18:cd:26:f8:35:2b:af:
         85:b5:f9:ba:1e:88:08:48:b2:7f:2d:c4:ee:1d:8a:64:62:42:
         38:f9:58:63:c7:60:7e:f1:6d:0c:66:02:84:6f:04:17:e9:94:
         8b:e1:83:3a:6b:33:bb:e6:6b:ed:9e:3b:4b:56:8f:5c:09:21:
         e8:d5:01:e2:2c:fd:8d:8d:6a:ba:82:fc:fe:6b:77:4d:d3:d5:
         d7:c0:66:c1:4e:13:11:c8:69:e9:65:69:75:92:f9:f4:d8:b8:
         0e:f3:e2:81:0d:fc:a0:47:8f:b8:de:10:dc:16:76:0a:88:ed:
         97:49:40:e8:7d:c6:17:01:21:3d:72:3b:71:c2:bb:c7:d1:74:
         47:1b:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:57:04 2025 by rpki-client