Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File:                     KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier:          17zrF/KC5pMTVuVG5Mto63NMfa+hi/CaMETXnd47GVk=
Subject key identifier:   CE:8E:B7:70:04:F9:F9:04:ED:35:01:82:47:C5:F1:B5:DE:E3:9A:9C
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number:          0309
Signing time:             Tue 01 Jul 2025 01:50:44 +0000
Manifest this update:     Tue 01 Jul 2025 01:50:44 +0000
Manifest next update:     Tue 08 Jul 2025 01:50:44 +0000
Files and hashes:         1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: OaMeITvyhjFLPGY1FrblD5s47VYjuxRWStEr20lNlc8=)
                          2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: Crj6EQEsFsVZ7Rl37tD7+KlB9qlhMrOAHvL0KyIGgkI=)
                          3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: 16TIMxSDuDuwbvd9GQ+m4o06d2DMg8lDV7WSYdSxPbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: Jul  1 01:50:44 2025 GMT
            Not After : Jul  8 01:50:44 2025 GMT
        Subject: CN=68633ef4-fbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:42:81:25:6a:55:63:5f:f1:80:e3:48:7d:
                    f8:3e:e5:98:eb:12:aa:f9:8e:7f:9b:5b:0d:5c:39:
                    36:09:e8:c0:e5:8a:e7:99:10:bb:0a:99:05:8e:27:
                    c2:cd:91:6e:fb:76:12:20:85:b6:fd:05:11:f3:27:
                    49:21:32:6e:cd:3b:49:e0:04:c9:16:a4:62:01:9f:
                    04:b9:5f:a2:ac:de:25:08:e6:5b:b3:1f:cb:3b:d9:
                    08:65:45:ab:73:e1:a6:ba:82:f1:8f:71:0d:44:ad:
                    fc:07:35:7f:97:2d:6b:f2:bd:7f:b9:3b:84:07:0a:
                    ff:97:39:cd:4b:77:f8:11:73:4c:9d:99:ef:9f:bf:
                    c4:3d:28:92:5d:d9:66:96:ac:7b:a7:db:c3:15:65:
                    cc:77:fb:8f:23:d8:3a:1c:4c:ee:3f:44:9c:9d:46:
                    87:f5:b4:73:59:19:93:80:84:f7:f5:b5:f1:30:d6:
                    86:94:fd:5b:3b:5b:b3:37:7c:7a:81:4b:b0:4c:48:
                    72:fb:ac:4a:67:6f:cc:3a:c6:ba:90:e4:44:f5:52:
                    02:a9:c7:af:85:ba:b6:3d:c2:46:4f:6a:62:98:c4:
                    82:35:9e:bc:fc:a0:16:e6:c3:8a:4f:61:30:03:64:
                    97:c7:9f:b3:60:71:5a:a6:70:c7:ad:0b:94:6c:03:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:B7:70:04:F9:F9:04:ED:35:01:82:47:C5:F1:B5:DE:E3:9A:9C
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:2f:f5:e1:c9:54:b9:10:8a:30:f9:c3:0d:cd:35:b5:15:
         a4:30:64:1b:0f:a1:89:2c:ab:83:21:9a:dd:04:7f:a3:88:d2:
         c9:c6:c5:af:4b:f1:a0:0f:92:71:93:78:57:12:91:dd:15:d3:
         15:d5:96:2f:ba:8c:f4:55:ca:3f:6c:8e:77:9a:4e:32:fa:98:
         4b:cd:cd:49:49:49:ce:c3:72:21:92:03:02:ad:01:98:a2:a8:
         28:f1:32:14:04:98:bc:0c:af:8c:5c:91:a3:8a:c5:88:b4:90:
         1b:5e:2d:05:50:6e:61:e0:8a:0a:91:34:33:2b:2d:1d:fd:af:
         ca:49:17:89:57:99:41:65:41:3c:9b:09:16:b3:7a:62:ac:c2:
         05:8e:c1:85:c4:c5:0b:6e:75:93:2a:c4:47:f9:5a:41:ed:8d:
         4d:bb:b9:58:b8:a9:fb:80:46:82:0b:82:3b:e5:f1:b8:0d:cf:
         ec:be:42:4b:35:87:4b:88:dd:2c:c4:7f:9b:7f:48:04:21:3b:
         75:1a:0a:93:6f:46:9f:bb:7d:02:0e:ab:e4:00:91:3b:5c:7e:
         31:d4:b0:58:7b:2e:b0:8f:47:04:bb:ab:9f:68:e5:7c:7f:ad:
         32:1c:28:f2:30:a8:01:11:42:77:3d:fb:42:17:39:03:f3:27:
         9e:6b:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:11:09 2025 by rpki-client