Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File:                     RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier:          M0w0x/VrseIGpqjyCy7t21pR59toPulFcwcgfqE/4/0=
Subject key identifier:   C9:BB:3E:7B:BC:15:5B:39:A4:5A:D2:B1:D9:10:3E:23:91:10:F8:91
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer:       /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number:          0194
Signing time:             Tue 01 Jul 2025 03:49:57 +0000
Manifest this update:     Tue 01 Jul 2025 03:49:57 +0000
Manifest next update:     Tue 08 Jul 2025 03:49:57 +0000
Files and hashes:         1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: 2n47ss8iyeN8sW23m5KyFPTlP/1/2gaxl1LZKpMsq1s=)
                          2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
        Validity
            Not Before: Jul  1 03:49:57 2025 GMT
            Not After : Jul  8 03:49:57 2025 GMT
        Subject: CN=68635ae5-723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:3a:5d:04:6d:12:5b:02:77:dc:1e:13:d4:
                    27:80:30:1e:d9:c6:78:81:4c:5c:18:c4:04:93:3c:
                    af:ce:d2:c6:22:b4:b0:ea:47:fb:97:fe:1f:8f:d4:
                    86:d5:11:38:cb:20:ca:7c:6b:e4:9c:31:76:f5:3a:
                    56:5f:08:c4:1a:22:91:96:dc:c3:03:db:e8:07:0f:
                    c9:78:a6:46:a8:ad:a0:2b:3b:aa:fa:87:b4:23:fd:
                    72:3b:41:89:3d:05:48:36:b3:92:2b:96:bc:bb:da:
                    6e:ca:93:96:c3:88:f7:f8:2f:db:e7:3e:ab:73:c6:
                    9e:13:38:46:29:52:cb:9a:2b:3a:ae:a4:b4:d0:77:
                    73:05:4b:61:67:1d:10:a1:b5:6c:e8:ec:2f:1c:46:
                    6c:e3:d0:9d:64:95:bc:69:d3:40:80:55:9e:5c:4d:
                    7b:5f:e5:ee:f8:f6:8b:c4:89:a6:f7:94:b0:81:19:
                    01:99:1d:e3:94:d2:c0:1b:96:dc:ee:97:4e:87:7b:
                    66:af:df:db:fc:5f:84:90:73:27:cc:5e:22:75:13:
                    c7:f4:16:dd:8c:d5:c0:52:cf:58:3f:bf:27:3b:aa:
                    a9:72:01:5a:87:c8:35:62:53:88:1a:b7:ab:14:a8:
                    d1:eb:1c:93:15:86:41:db:84:37:c6:99:72:d7:2d:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:3E:7B:BC:15:5B:39:A4:5A:D2:B1:D9:10:3E:23:91:10:F8:91
            X509v3 Authority Key Identifier:
                keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:59:27:5f:ef:60:e2:95:48:48:f8:93:84:7e:70:bf:2f:49:
         a4:7d:11:67:f7:ce:fa:00:c8:90:d9:8a:1d:b0:8b:97:26:27:
         81:14:a2:fd:14:2c:23:43:5e:ca:01:8a:10:e2:3a:69:d1:6b:
         f2:fa:8e:1c:13:18:14:20:f8:d9:c8:7d:9c:f3:0f:13:7a:29:
         8c:3e:ab:c2:88:0c:e1:30:f6:50:7e:70:f0:ad:12:98:59:a1:
         bc:e9:4d:f5:59:d9:7e:f6:a2:9c:8d:05:3f:3f:dd:59:29:fb:
         c7:a3:45:a1:fb:2b:f1:01:e0:e5:e4:f1:3f:11:4f:92:8c:4b:
         2a:f7:d8:e6:e8:7e:d9:91:aa:be:33:9c:fb:25:64:fe:4e:7a:
         a1:de:66:c4:0b:cc:7a:7b:13:37:34:46:9a:f8:f7:0f:a4:ff:
         37:76:bf:0b:9b:47:26:7f:84:6c:75:8b:50:ac:6c:c3:d8:e5:
         91:c5:f4:f1:81:c0:0a:93:f1:a0:26:47:4c:59:cc:36:ee:fb:
         51:7a:92:89:54:58:e3:45:8d:87:08:cc:b8:1b:60:38:0e:24:
         3a:91:96:83:51:4e:9e:fc:33:66:00:d9:01:80:27:5e:d7:d4:
         9f:7e:bc:b4:b0:7e:a4:90:2f:47:ab:19:3e:ef:b8:0c:d0:88:
         38:b7:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:47:53 2025 by rpki-client