Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
File:                     RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json)
Hash identifier:          twaSIp7ibhQERDwAcOcANxv/STIRTZsJU5pxOx9RHiI=
Subject key identifier:   DE:A7:36:E9:7D:BA:98:68:A1:E7:86:77:5A:69:00:B1:9E:B5:CC:91
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1BE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
Manifest number:          1BD5
Signing time:             Mon 30 Jun 2025 16:24:45 +0000
Manifest this update:     Mon 30 Jun 2025 16:24:44 +0000
Manifest next update:     Mon 07 Jul 2025 16:24:44 +0000
Files and hashes:         1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: 24GL2yk08DtzQGH7FeDs/zEtMABU+i/r26cp/PcM1cw=)
                          2: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: YvBaVC/FCxSr3mH7Wniem5Fc4fRE2xPCszYEETdJT64=)
                          3: 575AA83EC89611EDB6E9F849C4F9AE02.roa (hash: zUQrvX33/3TCKafKm47GXtbl0gyaNKZ7M04LcO+HoFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7144 (0x1be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Jun 30 16:24:44 2025 GMT
            Not After : Jul  7 16:24:44 2025 GMT
        Subject: CN=6862ba4c-d981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:30:66:44:b0:11:65:b1:ed:97:d0:11:4e:
                    d7:83:0b:36:29:f7:f7:ef:23:46:9a:85:98:1b:b3:
                    fc:64:43:01:ee:24:7c:22:e3:28:24:91:a8:f5:7c:
                    ad:68:ef:09:e1:e7:37:43:66:5a:e9:ca:90:89:8d:
                    6b:c1:4d:d5:d0:cd:23:d7:57:b2:8f:25:3e:a4:33:
                    ca:b2:c0:e4:fb:10:d6:f8:3e:8c:2f:44:9d:18:dd:
                    28:43:8b:9c:1f:49:03:c1:f3:78:ee:2e:c8:c1:b6:
                    4c:af:c7:a9:ef:45:9f:d2:45:d5:0e:34:c6:91:84:
                    b7:c2:23:a4:7b:9d:8c:32:21:19:d5:52:a4:e8:d8:
                    3a:c5:44:81:3b:81:26:29:0b:b1:ed:1a:50:f6:a4:
                    25:49:f7:05:5e:12:b8:7e:d5:ed:9a:87:68:88:71:
                    b4:cf:eb:b6:58:64:5b:53:00:ba:a2:ac:89:2f:20:
                    5c:a7:a6:c7:14:b8:f1:2d:75:19:6f:cf:81:a4:9c:
                    29:0e:9a:44:27:35:dc:c7:d3:0b:a6:d7:ef:82:3e:
                    32:04:01:07:4c:e5:2f:43:1a:10:14:52:a8:70:2a:
                    b9:13:49:c8:88:9a:40:0e:c3:65:79:cc:58:4d:53:
                    f7:37:2b:fe:53:e5:34:7c:df:90:4a:48:3c:ed:09:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:36:E9:7D:BA:98:68:A1:E7:86:77:5A:69:00:B1:9E:B5:CC:91
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:d3:4e:d9:f9:8e:87:f4:b2:e7:a4:4e:94:11:df:d0:ac:
         62:df:20:68:2c:22:2a:6b:2b:73:e4:fc:81:52:af:f4:e4:1b:
         78:d3:2b:0d:ac:85:50:a9:bf:eb:1e:b8:4f:fe:8c:0b:c5:b9:
         9a:6d:8e:c3:96:96:df:11:c4:63:f9:e4:53:39:b0:c1:ab:6d:
         6b:c8:81:f5:c4:13:d4:ce:04:83:68:ba:84:6c:1c:f0:d1:7f:
         ec:69:d8:ad:dc:e4:ad:6b:7a:a0:af:cf:19:f2:42:12:e9:ce:
         b2:02:56:c7:e8:37:2a:43:0e:dc:46:94:f4:37:10:74:f9:02:
         39:24:95:e7:01:74:2d:b8:39:de:94:77:15:2d:b3:83:47:e4:
         86:51:43:3f:3b:c0:13:77:0b:5a:c1:ad:e9:c9:59:a1:b2:51:
         0e:b8:0f:5f:ec:44:a7:d2:1d:ff:83:a3:af:0f:6f:56:29:3e:
         4a:46:9c:19:11:63:62:e8:7a:75:94:09:9a:cf:6c:ab:86:7d:
         c5:6e:79:2a:8b:02:1a:8f:72:98:2d:3d:f7:97:7d:b4:ce:28:
         f1:eb:62:62:a2:cd:ba:77:a6:f0:2d:e8:cc:ce:ed:9b:1c:e7:
         ea:33:6b:01:9e:63:32:20:b3:80:35:41:d0:d7:0d:ab:70:6e:
         0d:24:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:12:06 2025 by rpki-client