Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
File:                     AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json)
Hash identifier:          rZcb55gDB8YeTmObmcItbnRx3HACc5chgrtw7MYrf3Q=
Subject key identifier:   95:E1:7F:F3:9F:11:FE:36:AB:93:57:BA:50:61:74:35:F9:D5:D8:37
Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12
Certificate issuer:       /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
Manifest number:          01BE
Signing time:             Sun 29 Jun 2025 02:09:41 +0000
Manifest this update:     Sun 29 Jun 2025 02:09:40 +0000
Manifest next update:     Sun 06 Jul 2025 02:09:40 +0000
Files and hashes:         1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: JROia6o2P04+VAWGP9L5YxUk7MTL9fNBWO5c9JhJHQo=)
                          2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: ZbTPGmKh281ymLxinCV1W0SdNG3gcop2OrOUFYRhJy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl
                          rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12
        Validity
            Not Before: Jun 29 02:09:40 2025 GMT
            Not After : Jul  6 02:09:40 2025 GMT
        Subject: CN=6860a064-9988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:e7:4b:51:24:85:42:2c:20:d3:95:95:52:
                    34:d2:81:7c:c3:2b:18:b2:40:70:d2:31:0e:a0:f7:
                    2d:58:a6:af:92:24:10:01:2a:d1:d2:6a:6a:51:8f:
                    ce:92:3b:8e:73:c2:ad:45:d1:4e:a0:ba:b2:5e:e7:
                    04:af:dc:5d:f9:ea:42:16:e1:96:1d:44:19:39:e4:
                    fa:c6:7d:f1:22:24:04:ab:3f:0e:de:58:e9:70:3a:
                    6c:b7:86:11:87:af:99:60:31:21:2e:72:2c:4b:c8:
                    c1:d2:a9:15:5b:34:64:95:91:d5:73:27:47:97:b5:
                    29:30:af:af:fa:59:b4:9b:36:7c:77:5d:05:c8:5b:
                    a5:28:32:7c:ca:46:71:6f:89:ec:0f:d3:ac:f1:a9:
                    d8:69:f1:fe:e3:5f:d2:ba:a5:79:ff:f3:79:73:13:
                    05:68:32:db:01:5f:3f:30:de:c1:0e:0b:07:90:42:
                    d7:fa:c6:2c:87:40:ca:3a:ff:d1:f8:3c:59:6f:25:
                    53:b3:b3:71:3a:11:c6:7a:c9:94:f9:d6:84:75:f5:
                    1a:65:cc:d2:47:aa:be:6a:16:20:2a:c4:bc:38:c4:
                    3e:78:b0:90:ff:9d:ed:59:bf:67:76:12:5c:6b:0c:
                    a4:d7:62:70:7a:84:18:9f:bb:d7:15:a4:8e:b8:8f:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E1:7F:F3:9F:11:FE:36:AB:93:57:BA:50:61:74:35:F9:D5:D8:37
            X509v3 Authority Key Identifier:
                keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:98:9a:d2:46:bb:b7:d6:07:1b:b1:6c:d9:e4:cd:08:8f:
         4c:43:ab:b7:61:0d:36:17:15:69:ac:1f:75:87:50:70:a8:bc:
         d7:34:5a:89:29:24:7d:e3:2f:a7:44:95:8d:08:17:05:e1:14:
         01:ad:3c:b5:89:a9:3b:c7:7a:3e:b6:0b:11:d4:01:c7:8a:06:
         17:bf:38:22:04:62:1e:cb:06:95:ad:07:a7:4e:b9:59:37:8f:
         44:78:62:17:9f:a8:3a:5a:7b:ad:10:cd:0a:31:ed:ca:56:ad:
         5d:19:14:ce:12:8c:a3:ad:86:f1:6c:07:03:d5:20:0b:6d:bc:
         57:e8:01:1a:09:c7:b9:95:86:18:96:a6:e4:ee:9f:f2:8a:df:
         d2:fd:a5:8c:8c:3a:1b:8a:29:97:06:bd:c1:11:73:ea:31:28:
         0a:95:9f:0e:5c:77:7f:b0:fc:59:7e:ab:b2:17:7b:5a:cd:7d:
         5e:4d:e1:aa:5d:06:91:11:d6:35:83:7a:52:22:ab:38:03:a6:
         b9:ef:c0:56:b6:f8:3f:f2:03:26:88:13:20:96:40:2d:8a:3a:
         9f:d4:31:c2:7c:a8:b0:ab:b4:46:81:64:60:c1:cd:e4:aa:18:
         26:90:8e:3a:b9:15:23:48:d3:7f:11:48:b5:75:fd:eb:21:99:
         47:fa:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:50:17 2025 by rpki-client