Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          hqa4Z/ouwuiuVGb87FhmknFSEw8yAKCs0VQrIREB5Uk=
Subject key identifier:   FC:5D:7A:B4:5B:F5:03:B8:2C:5B:B8:EB:A2:F7:FE:81:28:A4:E0:0D
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          01D5
Signing time:             Sun 29 Jun 2025 01:58:29 +0000
Manifest this update:     Sun 29 Jun 2025 01:58:28 +0000
Manifest next update:     Sun 06 Jul 2025 01:58:28 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: eYA7Wt0Yx/u9zZUmQ7fBACBO+sXHmohXh+AUKcVon4I=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 01:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Jun 29 01:58:28 2025 GMT
            Not After : Jul  6 01:58:28 2025 GMT
        Subject: CN=68609dc5-9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:ef:20:51:d3:d4:15:07:b6:75:02:b2:12:
                    32:de:84:46:31:45:01:e2:6a:45:35:eb:53:87:d9:
                    ab:08:12:7f:28:91:18:f4:92:95:e1:c3:54:a7:ed:
                    77:7a:ad:4d:df:7d:ac:b9:73:36:ce:f9:54:74:b5:
                    c8:98:cc:9f:10:bb:41:85:6c:f5:fe:cd:1c:fd:8e:
                    6a:c1:cb:e7:81:df:65:0d:fd:f7:9d:c6:f0:b3:2c:
                    c4:1e:c0:92:9a:f6:df:6c:fe:4a:7f:4f:bc:78:f9:
                    bd:16:76:7b:b1:9a:b6:b1:bd:c1:bf:a8:cc:ab:49:
                    b9:fc:b7:b8:df:12:05:3b:38:c5:9d:bd:cc:4b:13:
                    86:6c:0d:bf:6b:6f:d2:6f:f0:8c:68:70:3b:de:a5:
                    fb:46:14:94:25:73:63:6e:b7:37:bb:65:ab:dc:09:
                    c5:61:41:49:ed:5b:fb:6f:89:bb:98:97:ae:8c:3e:
                    ef:c9:5e:68:48:e2:c8:4e:22:a1:00:10:65:24:7c:
                    bd:b8:6d:06:88:3a:de:7b:e2:7a:1e:44:6f:ee:9b:
                    4d:12:f5:93:f9:22:21:fc:27:87:11:12:5e:77:8a:
                    81:53:50:d9:07:0f:0d:e7:22:62:56:48:fa:68:7e:
                    9b:a7:7d:56:10:1e:f8:f4:46:0a:72:c1:19:87:0f:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:7A:B4:5B:F5:03:B8:2C:5B:B8:EB:A2:F7:FE:81:28:A4:E0:0D
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:61:33:98:c4:a5:87:18:53:47:32:e7:e9:a4:9b:6a:5b:
         85:8c:ae:51:34:1b:d4:f1:e9:54:81:2d:f3:2b:58:42:75:7b:
         69:c8:fc:1c:0d:7c:0e:c4:c7:97:80:c3:64:70:b4:2b:4b:aa:
         87:3f:62:4e:ba:33:b0:bc:f0:9f:72:dc:c1:89:f3:d1:9a:01:
         83:b7:ba:f0:46:f4:53:16:b4:64:e7:75:e8:43:3e:db:69:b0:
         dd:cd:39:34:2c:9e:13:ca:da:17:9e:13:d1:a1:bb:96:a8:55:
         ef:a4:6a:ab:56:9b:95:0e:50:87:1f:43:61:63:15:51:05:12:
         9d:ce:1e:7c:45:47:a3:47:88:67:e4:35:88:f0:51:c7:b1:c1:
         b9:33:ac:22:c2:91:25:2d:a8:00:1a:5a:26:16:cb:99:2a:7f:
         ae:ed:f7:ca:67:05:53:e8:7a:79:dd:46:d4:c3:5f:29:b0:41:
         32:57:36:a6:96:8b:f1:05:a7:f2:5b:a4:e4:bc:2b:e6:f2:c1:
         cd:91:cd:76:95:da:ad:c3:38:25:57:89:e8:e3:fe:6a:4c:54:
         0f:fd:c0:4a:1d:82:78:f9:4a:c8:b9:fb:90:c7:37:b7:7c:62:
         9c:0d:44:b1:74:d9:bf:29:9f:50:55:0e:90:70:cb:8a:15:ae:
         b9:0f:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:18 2025 by rpki-client