Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
File:                     tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json)
Hash identifier:          5QdvLWOUIbgzFJ3Xhs9kvpwK2JNHBaEXggG1DHOZoQs=
Subject key identifier:   4E:E9:56:2D:6F:D5:73:BA:E4:BD:37:BA:3D:91:D2:E9:44:94:D2:1A
Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E
Certificate issuer:       /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
Certificate serial:       06FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
Manifest number:          06EE
Signing time:             Wed 02 Jul 2025 22:15:01 +0000
Manifest this update:     Wed 02 Jul 2025 22:15:01 +0000
Manifest next update:     Wed 09 Jul 2025 22:15:01 +0000
Files and hashes:         1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: sZqceP1l7IYqrWft5Llszz+zoTb9nsDbb8/31AOULto=)
                          2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=)
                          3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
        Validity
            Not Before: Jul  2 22:15:01 2025 GMT
            Not After : Jul  9 22:15:01 2025 GMT
        Subject: CN=6865af65-fbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:ed:1d:5a:dd:6e:dc:3a:b6:11:78:f1:51:
                    02:9e:80:a8:2b:46:01:5c:0c:50:e2:5c:45:a4:92:
                    c5:1d:d7:9c:a5:d2:ca:81:60:4a:ec:d3:0d:8d:f8:
                    a0:a8:6b:33:88:79:ca:9c:d2:99:da:93:e7:8c:06:
                    2e:64:f1:90:4a:26:7c:c3:9b:b9:c8:b5:3a:6b:e2:
                    c7:ba:8a:19:93:97:79:33:8c:2e:76:4e:09:be:41:
                    48:d6:46:8e:e2:c9:23:b4:82:1c:36:30:a5:1c:d4:
                    79:6d:84:73:d6:06:21:0e:c2:f6:a1:47:0d:80:47:
                    91:03:18:c1:11:99:49:c7:ab:ad:a2:37:bc:95:98:
                    30:9e:bc:10:2b:14:34:dd:0c:9d:2e:ef:c4:3d:43:
                    5a:f4:f4:cc:d3:46:4a:83:6e:35:26:43:5b:0a:cb:
                    8c:2f:b5:6a:33:cd:07:27:cd:eb:72:38:c8:23:d4:
                    24:00:d5:99:ea:57:81:ee:21:1d:20:95:f4:e8:a2:
                    ba:8c:88:be:f3:c7:57:ff:bc:04:61:43:35:00:8f:
                    d7:08:f7:29:8a:b2:aa:f6:2e:f4:12:e2:d3:3e:9f:
                    b6:ac:99:62:32:e6:2e:10:72:e8:89:e4:86:ef:23:
                    eb:95:d2:e8:89:26:bb:8b:8b:6d:30:9c:dc:d4:4b:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:56:2D:6F:D5:73:BA:E4:BD:37:BA:3D:91:D2:E9:44:94:D2:1A
            X509v3 Authority Key Identifier:
                keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:0a:bb:0e:95:2c:c2:15:c3:ed:b3:79:ba:47:b5:83:47:
         41:63:a3:ec:f2:bc:f2:b1:d0:7a:d0:ba:4f:51:fa:e4:c7:5d:
         0c:ea:7e:05:7c:df:d6:1e:d1:11:36:45:ed:f4:82:4e:37:6b:
         73:aa:2c:0a:73:17:84:17:4b:9a:fd:60:ea:56:83:3e:3d:0b:
         88:c8:f4:d8:e7:38:24:db:ca:3e:15:7b:d3:fa:2a:a8:37:4c:
         da:dd:eb:31:a7:c2:6f:2e:51:8a:e9:8c:d5:d3:d9:0c:4b:c7:
         a5:34:cc:a7:e7:3e:12:b0:ff:d8:84:f4:fb:b5:d2:98:d7:93:
         3f:35:90:25:9a:3a:c2:d2:80:f8:5f:c6:9b:63:3d:64:77:83:
         74:cf:bf:79:2d:5f:fd:3e:12:24:a8:fe:ec:6d:07:1f:42:8c:
         4a:b1:fa:a7:73:4a:19:9d:3a:9d:bd:ae:f1:27:39:1a:89:b1:
         fc:07:d4:05:0b:e0:5d:3a:74:60:0a:c6:57:cc:0b:95:98:26:
         01:cf:00:3c:4c:69:d1:af:f9:e9:77:8f:ee:b2:c0:87:94:a6:
         89:a0:bf:cc:0d:23:76:95:78:d6:bb:ea:20:0b:11:bb:a0:cd:
         a3:01:c7:2d:14:db:f7:15:35:04:df:83:fc:6d:f6:08:51:cd:
         14:ee:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:19:18 2025 by rpki-client