Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          QfZEmdX402w3xlTf1n9N36ZXASgiEmbu+d6AS1EqbYw=
Subject key identifier:   F0:DE:62:99:B9:EF:C8:26:CA:3E:3E:D9:45:CA:01:C2:50:99:02:E1
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          0546
Signing time:             Wed 02 Jul 2025 23:50:25 +0000
Manifest this update:     Wed 02 Jul 2025 23:50:24 +0000
Manifest next update:     Wed 09 Jul 2025 23:50:24 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: 2zmfpLBKYdPyeJBoGKmwDXuBO+MGROEsCuwglF75T40=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=)
                          3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=)
                          4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Jul  2 23:50:24 2025 GMT
            Not After : Jul  9 23:50:24 2025 GMT
        Subject: CN=6865c5c0-bac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:e2:6d:c5:92:8d:f3:e5:8a:99:d0:15:8b:
                    b1:b1:42:97:ea:81:66:b0:50:e9:4e:41:01:c7:1d:
                    ef:ab:23:5b:3d:29:4a:06:71:11:d6:02:b5:4b:3c:
                    97:65:2d:2d:9b:08:b4:be:8e:eb:2e:0a:06:7d:4e:
                    2e:7f:b7:39:43:15:b7:fb:d8:76:e9:23:20:22:cc:
                    e2:8e:e9:15:cc:fc:2f:c2:83:06:14:63:c0:58:18:
                    f2:09:2b:6f:cb:5b:cc:05:48:27:3c:0b:8c:e9:26:
                    6f:47:8a:10:fe:96:0e:e7:a0:58:6d:84:34:e9:3b:
                    16:c9:6e:05:5e:86:b2:3a:bb:31:5e:e6:ce:d4:99:
                    7d:21:67:86:17:fe:10:a9:8a:ef:f6:2e:e7:ef:93:
                    77:ef:3a:8e:c1:32:40:9b:f5:97:e3:2f:25:8b:6f:
                    14:0b:03:c6:e1:69:2f:9f:b1:10:45:41:89:eb:bc:
                    57:df:2e:0c:16:1d:d5:b4:86:9d:b1:99:02:17:eb:
                    6a:0b:fb:f9:47:44:78:3e:df:19:af:f9:06:e0:0e:
                    43:8b:e5:6a:97:cb:2e:ad:f8:19:f7:21:34:c1:97:
                    68:51:70:e8:bc:b0:66:c0:25:57:3d:9f:97:ea:af:
                    c9:9f:ea:23:a9:9f:10:43:96:c8:97:a3:ae:1b:34:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:62:99:B9:EF:C8:26:CA:3E:3E:D9:45:CA:01:C2:50:99:02:E1
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:f5:9a:15:95:a3:60:31:7c:5c:66:b7:1c:68:f5:63:36:
         13:6a:57:d3:49:c5:4f:3e:64:1b:de:f3:6a:5f:90:0b:ab:ef:
         23:ed:11:b4:93:f4:b9:d2:54:9f:a5:e4:fa:2c:b1:8d:00:c8:
         59:91:0c:ce:8c:30:3d:82:33:e3:12:33:5a:75:1a:e9:46:fe:
         d7:c7:4b:48:84:af:0c:f2:05:43:d8:0f:5f:f5:9d:40:d1:22:
         28:d5:f3:bb:4c:00:23:41:ba:96:57:0b:79:7b:47:83:eb:4b:
         ba:84:23:b0:c6:09:c8:c2:1e:e1:a7:33:92:bc:44:8d:d3:f5:
         fb:07:5a:ec:63:56:a4:f1:cc:61:c1:a4:d8:07:c8:8a:5d:ce:
         4e:1a:cc:c3:8a:cf:f5:33:c1:32:82:be:e3:24:88:23:90:84:
         0d:c2:8f:2d:42:21:d0:1d:cd:1d:80:cf:2b:3c:e6:62:e7:b4:
         76:96:32:c2:f7:95:16:bb:9e:02:ad:b5:d0:5c:91:17:9f:38:
         af:20:53:68:72:e4:c5:d7:d8:8b:3b:bb:c0:01:b9:1b:40:ee:
         a5:95:27:30:dc:d7:e0:72:5a:b1:d3:16:1a:dc:92:d4:d5:48:
         cb:11:44:23:43:33:f8:37:f6:90:5b:f1:34:ab:b2:9d:f7:7c:
         12:51:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:21:43 2025 by rpki-client