Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File:                     ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier:          E0xMrsdBv1OGbQ4nIYmnxffMecZmOiFS554+AxPZ8Z4=
Subject key identifier:   30:C3:FA:40:F5:40:12:76:73:A3:AC:AB:48:E6:7B:81:97:C0:16:E0
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0C52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number:          0C4B
Signing time:             Wed 02 Jul 2025 18:42:11 +0000
Manifest this update:     Wed 02 Jul 2025 18:42:11 +0000
Manifest next update:     Wed 09 Jul 2025 18:42:11 +0000
Files and hashes:         1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: ghGJ5BFdOQHN5r0TKPJiAFGPX1nLaAymtAI8b0bW+cA=)
                          2: F0208B2012BC11EBB3294950C4F9AE02.roa (hash: eaM5ERmLR+NewtcyA9NoXbFVJmh3ke0mtpONHl7mYGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3154 (0xc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Jul  2 18:42:11 2025 GMT
            Not After : Jul  9 18:42:11 2025 GMT
        Subject: CN=68657d83-3936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f5:d7:e6:e3:97:ee:48:c3:05:5d:20:6d:57:
                    ec:3f:97:87:01:99:c5:b3:f1:c0:71:7b:0c:71:e7:
                    37:f9:77:e1:3e:04:24:77:81:46:0a:9d:60:86:6e:
                    8b:0b:c6:74:e4:d1:4e:50:ce:44:24:a5:a0:3c:a5:
                    4a:38:dc:69:1d:b2:69:51:a7:b8:da:10:a8:f1:f8:
                    85:0f:1d:37:f8:16:0c:28:15:ed:6e:f7:0a:dd:e8:
                    19:8a:f1:11:6a:44:bb:d0:04:0e:a1:6b:ab:91:3d:
                    54:cc:7e:a7:18:95:26:f7:32:e3:c3:94:b3:5d:e9:
                    eb:16:da:8a:46:bd:34:fc:6a:19:ad:35:ec:d8:98:
                    80:b4:8c:85:d9:1d:16:10:39:11:89:9d:7d:1f:3e:
                    19:e0:13:d9:dd:9a:f8:d5:dd:02:8e:22:ef:86:3a:
                    24:65:f2:4f:cc:62:df:02:88:01:db:cc:14:a6:4a:
                    4e:e6:ff:31:20:72:62:01:f2:86:68:e9:88:81:83:
                    ff:bc:08:bd:7f:16:f0:0c:36:32:30:46:9f:04:0d:
                    c0:26:8e:b1:69:ca:b6:66:6f:ec:1c:e7:db:b1:c0:
                    c6:3d:fa:65:86:15:ef:97:96:d5:f7:25:81:fc:ef:
                    f1:69:2c:3e:f1:25:b0:33:cb:c5:ac:2a:23:50:2c:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:FA:40:F5:40:12:76:73:A3:AC:AB:48:E6:7B:81:97:C0:16:E0
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:01:a3:6c:b6:66:39:c8:42:cd:f0:e5:c1:3d:1e:b4:a4:
         16:2a:5c:0a:24:d1:e3:87:ea:0f:e6:e8:14:65:b1:b0:4f:e7:
         43:b7:23:52:8a:40:ff:6d:2a:bd:da:23:e5:e3:d7:10:9d:f3:
         fb:24:59:3c:0e:2e:ab:a0:aa:9d:33:35:8b:8b:5e:70:91:ab:
         69:99:da:5f:58:2e:4e:68:7b:a8:2b:6a:82:ba:04:8b:33:95:
         2f:2b:19:aa:27:8c:9f:9a:81:3e:51:89:ee:b9:19:76:34:e1:
         ac:04:61:f2:90:69:19:c4:e3:ae:5c:4f:64:39:77:d5:50:07:
         6b:6e:81:60:1d:7a:0d:07:d0:a9:20:53:1c:99:9f:5f:37:ee:
         15:0e:94:7b:ee:07:71:09:0d:ce:79:ce:f1:ef:d5:0f:40:b3:
         b8:cf:22:7e:76:92:b0:1e:92:45:61:da:0e:a2:c0:73:a1:82:
         09:dc:67:ad:27:89:cc:ba:c4:29:ec:91:df:71:00:78:f6:3f:
         37:56:1a:27:d4:81:3a:8e:5e:b6:0d:78:7e:51:11:41:7d:fb:
         31:eb:95:db:66:77:1a:31:bd:1d:0f:fd:17:d9:b4:93:51:34:
         2f:fd:24:4a:c0:bc:75:00:68:c6:3c:7c:75:4a:6d:37:54:54:
         61:8a:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:21:06 2025 by rpki-client