Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File:                     4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier:          4QZF+o3OzD3oplML/2bCSpvOGHmwVOI/v6SIxpJOaWs=
Subject key identifier:   80:79:5E:36:82:0F:3A:8E:CD:61:16:0C:7D:EE:FD:D6:04:C7:4C:D5
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number:          0651
Signing time:             Wed 02 Jul 2025 23:13:00 +0000
Manifest this update:     Wed 02 Jul 2025 23:12:59 +0000
Manifest next update:     Wed 09 Jul 2025 23:12:59 +0000
Files and hashes:         1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: FJC0KJtpu+eWXUKeB9005fgIXaX4CKmRYiJg2oqtJW4=)
                          2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=)
                          3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=)
                          4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=)
                          5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Jul  2 23:12:59 2025 GMT
            Not After : Jul  9 23:12:59 2025 GMT
        Subject: CN=6865bcfc-57e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:b8:90:4d:2a:91:70:9c:6a:e0:af:7c:2f:
                    0e:d0:04:a2:0f:fc:66:24:78:2a:43:13:18:ca:94:
                    72:35:ef:82:55:8c:56:70:a6:a2:80:7c:dc:c7:0a:
                    88:d3:8e:73:b5:4a:6b:f6:b7:0a:72:fe:37:89:fa:
                    99:e5:42:c0:5f:97:f2:25:a5:25:14:3c:de:37:62:
                    ce:65:e4:17:09:c6:83:f6:0b:54:35:4e:fa:8c:73:
                    22:ec:0f:83:49:85:f0:83:89:c8:4f:67:fe:ff:1b:
                    4e:8b:01:a8:7a:a2:c3:55:dd:90:88:02:14:11:c7:
                    15:bf:78:71:8f:87:c7:9f:cd:4f:b5:17:d9:f1:65:
                    89:e7:3c:97:a6:7c:9f:8c:b9:6e:ca:b2:27:12:cd:
                    e2:11:1d:dc:7d:6c:24:7e:c3:48:81:e4:cb:9a:ca:
                    46:39:16:a3:c5:1a:eb:ca:6e:a2:6e:5f:1b:72:27:
                    d6:f0:83:33:45:7e:33:f5:87:bd:5c:13:b1:c7:fb:
                    2d:bb:c7:e7:1d:8e:18:25:3b:33:53:e5:0c:61:44:
                    b7:90:76:5f:81:db:9c:a4:60:00:a7:ac:0a:b8:b2:
                    40:9f:75:2a:e4:77:93:ac:df:38:f8:d5:e5:8f:58:
                    69:ed:96:67:f8:68:f6:7f:dc:b3:84:5c:c7:56:11:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:79:5E:36:82:0F:3A:8E:CD:61:16:0C:7D:EE:FD:D6:04:C7:4C:D5
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:04:6e:9f:6d:ef:d4:2b:57:15:88:cb:97:73:9c:b6:99:
         60:9d:77:43:a7:8e:a7:de:7b:42:d9:01:a6:44:d1:13:37:e8:
         bc:8b:ab:c1:f8:c2:ec:b4:f0:c6:07:71:62:ca:50:b5:4f:4c:
         23:fc:ea:b3:73:dc:c3:32:a8:fc:39:f6:3d:06:c8:41:e4:a3:
         fb:06:30:fe:41:54:f2:c0:a5:e6:18:e8:73:cf:0e:d2:24:be:
         7a:15:35:5f:d1:8f:dc:f0:15:35:b6:8e:c4:dd:e2:52:1f:54:
         ec:54:1d:65:a9:65:e5:6d:3f:20:de:8a:52:76:df:03:43:c1:
         92:23:84:09:48:5a:d6:2f:1f:63:af:a5:03:50:34:a0:a1:0d:
         38:7e:4e:49:51:cd:40:36:46:52:f7:ff:9e:41:9f:6d:d1:db:
         32:24:d4:e7:99:e5:36:ac:26:fe:15:05:56:30:33:9d:16:30:
         e6:5a:06:29:b4:e6:4f:6b:a9:85:39:63:29:ad:77:fe:42:af:
         5a:db:9b:37:65:5f:b1:40:10:bc:c6:9b:ca:57:59:ae:87:b3:
         54:c7:9a:0d:43:01:ae:09:a3:58:95:55:3a:bd:51:54:90:fc:
         fa:42:27:3e:ee:50:9b:e8:8c:48:b3:1f:c1:f9:1c:ca:11:55:
         9b:3a:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:27:18 2025 by rpki-client