Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          eMsbgnh2vo+oUN0W2EWgCFTgUlnoloqR+8wAvxjA8EQ=
Subject key identifier:   2D:10:FD:E4:4F:92:62:9D:68:33:B3:79:E6:2D:1F:DF:BF:45:1D:DF
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       33E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          33D2
Signing time:             Wed 02 Jul 2025 15:25:39 +0000
Manifest this update:     Wed 02 Jul 2025 15:25:39 +0000
Manifest next update:     Wed 09 Jul 2025 15:25:39 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: 3nsjrv9e2z8oM+HXsYTaAYEFMv/YtW6qjblJAsHxJR0=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13280 (0x33e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Jul  2 15:25:39 2025 GMT
            Not After : Jul  9 15:25:39 2025 GMT
        Subject: CN=68654f73-827d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:e7:27:1e:b2:58:4f:64:3d:c3:fd:da:12:
                    74:83:8a:36:c6:13:13:8e:2a:1c:0b:a0:b8:46:6e:
                    df:02:b8:e7:c2:97:46:24:4a:45:c4:0b:28:55:41:
                    52:71:47:d6:0e:d0:b9:96:27:b4:fc:82:53:e8:66:
                    97:70:52:9b:d5:29:33:7d:30:d4:53:33:c5:87:d7:
                    c3:79:ba:94:0e:23:82:15:40:dd:73:6b:82:2e:f0:
                    a7:5e:a9:56:08:c3:e0:6a:05:d5:7a:e7:ae:5c:4d:
                    91:10:ee:b5:2d:0d:10:e4:9d:df:19:0b:3e:8d:91:
                    74:89:9c:e3:9c:89:53:1f:bc:3a:ab:7d:0d:98:f4:
                    2c:bd:ca:89:a0:22:31:90:0b:2f:77:da:58:3f:c7:
                    31:e1:31:b5:f5:fd:6d:d1:87:91:71:1b:56:0a:d4:
                    64:df:7c:a4:f4:c3:81:47:d6:f8:04:a7:60:ca:fc:
                    39:1b:5f:90:1c:e2:a7:d1:3f:c3:35:1c:34:0e:36:
                    12:6f:6c:10:c2:fb:3c:2b:71:27:b8:25:d6:db:c4:
                    21:9c:57:6c:3c:c9:b0:99:b0:29:d9:01:65:4c:a3:
                    51:75:d8:76:f4:19:4f:54:76:74:90:cd:ba:3b:e4:
                    4b:c1:b7:33:02:87:3c:d3:a1:ab:80:c7:0b:78:85:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:FD:E4:4F:92:62:9D:68:33:B3:79:E6:2D:1F:DF:BF:45:1D:DF
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:80:24:47:7c:5c:eb:11:e4:46:b8:31:00:2a:c8:dc:c1:d6:
         cb:a7:f0:31:32:5f:15:0f:05:56:76:00:dd:a3:02:73:2b:cd:
         78:a3:46:80:c0:18:4f:bb:92:08:2d:b5:39:84:df:34:a9:2b:
         6f:d4:ca:8e:c7:ce:4d:ea:74:6b:86:a5:92:48:cd:2a:5f:da:
         03:0f:93:28:d0:2b:79:2a:b3:2d:dd:13:3c:55:38:c3:53:4a:
         a7:98:4d:14:4d:19:57:25:ca:3c:0a:14:ca:21:75:61:0e:a5:
         93:37:ae:71:1e:81:c2:dd:e7:c4:eb:80:8b:f5:5e:f3:a3:b6:
         3f:86:03:ae:36:25:b6:b1:34:0f:38:bb:a8:f8:84:dc:c2:da:
         31:2e:dd:e2:60:2d:ab:fd:4f:cc:56:cb:c9:15:4c:53:4c:78:
         31:ac:22:e8:8c:de:c9:17:7d:f8:36:d5:53:30:5a:21:a0:83:
         a0:30:9b:b3:63:21:65:e1:9b:c0:e1:8d:b1:f0:4b:ef:61:20:
         7b:91:3c:c9:73:f2:fe:e5:de:1d:7c:5a:f7:68:54:c5:15:54:
         53:1a:05:3e:b6:76:1b:0c:6e:56:5c:36:1e:34:4c:30:8d:36:
         b0:f7:1f:dc:78:d6:8f:b6:c5:7a:a2:d9:90:30:1c:dd:90:4c:
         cd:6a:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:57:42 2025 by rpki-client