Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          EKqxFRmHIwOncE9IgSg9VVomYkhP5Yhs19ycleCOuc4=
Subject key identifier:   11:EC:18:48:C9:59:26:CA:F8:F7:35:DE:92:59:DF:37:67:9A:0E:CA
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          05D7
Signing time:             Mon 30 Jun 2025 23:27:21 +0000
Manifest this update:     Mon 30 Jun 2025 23:27:20 +0000
Manifest next update:     Mon 07 Jul 2025 23:27:20 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: UH2CQbvty3lkmtSs8oKhSt45/wi5q9tHhmCl6dVWT5c=)
                          2: 387532CEE46D11EE8DBC2937C4F9AE02.roa (hash: ruwggHNoAUFm9Chx4UGeH2/Ms9/ktBjyMv9b4cEeu5E=)
                          3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: Ofg177dT9U9TbFcWrgETTbW4rQYxs3ewgMOUkLe9Rug=)
                          4: F5BE1E346FFD11EE83D3D154C4F9AE02.roa (hash: zkvJXsg6ZbaTEwK193SUdCnoyTyMt79mUaZuDwnshuE=)
                          5: D4413B92007C11EE99460918C4F9AE02.roa (hash: bEBpIBlAOueDVvlaTSK/ST40bTuOmwGNh/38eLyftkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jun 30 23:27:20 2025 GMT
            Not After : Jul  7 23:27:20 2025 GMT
        Subject: CN=68631d59-5a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:21:f1:89:38:65:2f:18:a2:54:7b:2c:d8:
                    2f:88:cb:c5:f7:72:c9:8d:b2:b8:1e:e5:3f:2d:de:
                    e5:d7:ee:7f:f2:50:cd:ea:2e:a9:33:c6:c0:0d:e0:
                    67:e0:36:b9:a6:ee:dc:fc:77:d4:0f:7e:93:88:76:
                    28:d0:c5:9b:2b:35:03:f3:c6:05:75:fd:f6:fe:c3:
                    0a:07:75:c5:10:71:c0:03:3f:18:86:46:b7:2e:38:
                    cd:4e:c2:87:ee:a8:62:3d:2f:57:b3:d3:6d:41:a4:
                    6f:c2:8b:d6:4f:25:18:02:bf:a7:da:d4:b0:d3:95:
                    28:2c:f6:6a:74:a5:13:30:2d:6e:50:26:ef:4a:ee:
                    34:d5:7a:3b:d0:eb:01:41:e4:b2:8e:49:2e:f1:eb:
                    fb:18:04:73:39:64:82:02:ea:8f:27:5c:89:01:d6:
                    23:98:88:4b:91:7a:02:76:17:03:36:68:e3:42:85:
                    3d:14:33:17:8a:43:55:47:de:8e:b6:bc:5a:9b:b8:
                    5b:e1:6b:b5:9e:73:93:b9:32:fa:e9:b0:93:28:57:
                    4b:35:4e:10:f8:df:34:4d:b1:cc:69:b0:c4:ce:d2:
                    14:31:21:c3:af:93:63:0a:eb:56:22:8b:51:e5:ce:
                    24:4e:15:27:cb:74:30:be:02:c7:7e:e3:f5:1b:f1:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:18:48:C9:59:26:CA:F8:F7:35:DE:92:59:DF:37:67:9A:0E:CA
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:c7:3e:66:0e:4c:98:10:2a:07:ff:b4:ac:7d:b6:99:cc:
         a9:b6:b6:db:0f:ce:2d:46:0d:19:d2:6d:a8:a9:1f:c1:18:ff:
         41:64:5f:3b:6b:f5:01:7e:10:94:0d:e6:a7:c5:2f:4b:a8:10:
         73:b2:e4:83:3e:b6:b1:40:ff:d2:68:1b:0a:87:a8:e0:62:eb:
         4b:59:60:bb:71:c0:85:a6:42:a2:64:5f:75:f0:8f:56:5f:a4:
         f0:28:3d:dc:e7:75:8c:05:f5:b2:8e:ea:a3:30:25:1f:61:17:
         4b:4d:63:c4:06:67:b5:00:30:cf:5b:da:8e:8f:30:d9:b0:fc:
         dd:b8:15:8d:c0:34:64:84:c1:ec:58:b4:30:e9:4d:93:f6:80:
         3c:c2:cb:2b:b0:ab:09:b2:ac:c8:c9:92:7c:ed:6c:e3:c9:b8:
         33:fe:26:83:d3:43:aa:33:31:4b:fc:9d:47:47:d0:1f:f6:69:
         d4:f2:61:8f:04:28:4e:8b:bb:4b:55:83:8e:f1:d5:2d:f7:9e:
         bf:5a:bb:1c:9f:35:0f:af:0d:e7:d5:2e:f5:a8:2d:66:14:1c:
         b5:ae:d3:59:3f:2b:3a:49:7d:7e:07:1e:e7:f6:6a:8f:5a:89:
         92:58:0d:76:b3:6c:e8:13:54:05:67:84:53:8e:f7:80:98:64:
         60:d0:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:38:41 2025 by rpki-client