Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File:                     scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier:          /k0GGuZNXTop/d7y28ubnX/NZC9Ojdg4/NJ5yDkFekg=
Subject key identifier:   DE:BE:7D:E4:56:6E:A0:C9:31:26:C4:0B:69:BE:A1:A2:35:0C:53:82
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       06C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number:          06B3
Signing time:             Sat 10 May 2025 21:46:14 +0000
Manifest this update:     Sat 10 May 2025 21:46:14 +0000
Manifest next update:     Sat 17 May 2025 21:46:14 +0000
Files and hashes:         1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: iQumQMILCJae8D2eHnvrD4F0JRDVwDQZrg/d/fcicwg=)
                          2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: H1d0qtWMbN/ZLehnM+qkk/9VJSqY96iabdAlvpWRnf8=)
                          3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: YNpH5Q9f52SuXXmbgomoqSZtciJ+QBf4TgDm3Z8IhyI=)
                          4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: IRUZ+HQ+rrY+P2Ftx4LEZSfF4IIIe7sj7QLj+A7Ieao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: May 10 21:46:14 2025 GMT
            Not After : May 17 21:46:14 2025 GMT
        Subject: CN=681fc926-b247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:29:ea:0a:a0:d3:89:0f:0b:61:cb:84:f0:
                    32:82:f8:ec:18:83:93:47:ea:4b:fc:38:60:3f:5d:
                    fa:d6:f4:4a:cb:4f:9e:e3:89:34:5a:2c:4d:cc:4a:
                    8d:62:f7:ed:9f:63:a3:59:06:98:9e:95:80:b5:14:
                    4a:b8:80:78:a4:68:c9:bd:6d:3a:c5:66:27:b3:1a:
                    bf:2f:3f:ff:be:ae:19:8e:e4:f3:fa:bd:bb:70:f2:
                    5d:e4:79:44:39:ea:6c:64:77:01:c6:f3:45:44:90:
                    7e:34:84:7e:ae:25:ae:f9:49:fa:a3:5a:ba:01:11:
                    1e:e4:76:d4:84:fe:80:e6:c9:00:ad:71:f4:33:bb:
                    ef:d6:08:8b:bd:1d:f8:47:61:07:de:57:4b:54:0a:
                    9d:54:6a:de:28:3f:25:92:66:31:5e:99:a4:92:07:
                    9e:07:ec:d1:27:df:a2:51:91:77:76:58:08:7c:83:
                    53:d9:09:cb:eb:67:69:8f:8a:cf:7f:c7:f8:4b:9f:
                    d2:ce:8e:59:ac:c3:bc:d6:c0:68:63:16:ab:f5:23:
                    97:36:ed:9c:c1:82:78:bb:74:53:2f:1c:a3:c5:af:
                    f9:cc:2c:3e:0c:db:c5:8d:7c:39:63:07:85:4d:ac:
                    d8:06:61:bb:56:b6:a8:e4:6d:59:6e:22:99:60:0b:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:7D:E4:56:6E:A0:C9:31:26:C4:0B:69:BE:A1:A2:35:0C:53:82
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:68:da:11:05:99:f0:8d:5d:9a:2d:7f:f5:51:dc:bf:e7:
         7d:8b:fa:01:cc:50:5f:06:05:36:ce:fc:5e:6e:38:12:35:71:
         ff:5c:29:32:6f:69:d6:79:62:bc:f3:7d:ec:11:8c:8f:ef:3d:
         53:d2:72:f8:85:76:a4:21:27:eb:46:6b:90:1c:60:da:ac:14:
         75:64:cc:c1:32:50:f2:4a:ee:38:ae:3c:c2:ce:e4:43:bc:df:
         d0:12:45:82:8f:d6:92:bf:12:79:1d:6f:f4:9a:42:73:12:33:
         d3:af:15:22:f3:60:21:f3:af:45:0e:b0:e0:3d:12:b6:b5:4e:
         f9:e9:18:52:4c:43:98:31:9f:28:bc:55:cd:e8:59:e8:ca:06:
         da:7a:72:13:a8:5a:b4:92:ca:85:7a:e6:36:fd:82:cd:1b:a0:
         7d:dd:b0:8d:7d:58:ca:8e:af:10:f1:20:df:6a:b8:77:14:7f:
         8e:c6:77:6c:56:9d:b1:85:67:51:c9:76:f6:c7:62:7f:f2:e1:
         7f:45:3d:d4:bc:7b:8d:c6:26:a3:3b:e2:2d:40:f8:2b:70:82:
         c6:6e:97:9f:05:28:e0:cf:4e:a9:10:f6:20:d9:62:89:e1:50:
         df:ba:ea:7f:5d:d5:43:9d:7a:df:c3:b3:73:2b:df:82:b3:b0:
         33:ab:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:54:52 2025 by rpki-client