Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File:                     RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier:          L8G/QON0MghcAInBYdGbDnSwq8RmEr08BOGR0l7LUTk=
Subject key identifier:   E6:7F:90:AB:A5:3A:54:3C:E5:E8:A7:4E:A5:FE:25:19:AA:17:7F:81
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer:       /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial:       0B7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number:          0B62
Signing time:             Mon 30 Jun 2025 19:17:53 +0000
Manifest this update:     Mon 30 Jun 2025 19:17:52 +0000
Manifest next update:     Mon 07 Jul 2025 19:17:52 +0000
Files and hashes:         1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: YkuGnhCHbr+rSzNEbY3QOqA66rEsSFZf3ixnieU8DFw=)
                          2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=)
                          3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=)
                          4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 19:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2943 (0xb7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
        Validity
            Not Before: Jun 30 19:17:52 2025 GMT
            Not After : Jul  7 19:17:52 2025 GMT
        Subject: CN=6862e2e1-e8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:e4:d1:94:ae:04:20:75:cc:24:a4:07:e9:
                    a3:c3:31:e1:4b:de:ae:8b:cd:7b:18:9f:82:a6:13:
                    96:8f:47:59:2d:2c:9c:77:db:a9:b1:b6:1b:11:0e:
                    f7:86:f1:b4:58:7f:ac:7c:1f:aa:20:36:b0:d6:9b:
                    b1:36:bc:e8:98:33:84:4e:27:91:92:b9:e0:cb:cf:
                    b3:bc:e9:02:34:51:9e:c1:0e:b6:31:18:13:77:18:
                    c4:92:db:5c:a5:9b:25:55:11:84:a8:a0:92:76:ec:
                    5b:33:11:d5:bf:c0:12:87:31:37:d4:ea:35:b7:34:
                    25:61:f4:c9:e1:a3:da:91:ab:d3:ec:a9:4c:d6:95:
                    af:8a:96:c8:5a:ff:02:01:5d:ad:18:86:0e:29:e1:
                    7b:15:48:b3:6c:0b:22:5c:6e:0b:70:80:06:49:15:
                    be:82:a9:f8:b8:6a:87:f0:75:59:d0:c6:64:87:05:
                    02:f4:1a:79:06:76:93:19:de:48:c3:24:c9:d1:0e:
                    9f:87:ed:40:f9:a7:10:e3:fd:23:2f:5e:16:d2:dd:
                    0c:25:ac:78:25:30:2c:e6:c3:f7:f4:3e:0b:5b:cb:
                    61:37:71:d9:74:98:56:ff:8d:78:dc:31:17:2e:db:
                    8e:50:0b:bd:a3:95:9d:8f:91:d7:f8:ac:92:8f:53:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:90:AB:A5:3A:54:3C:E5:E8:A7:4E:A5:FE:25:19:AA:17:7F:81
            X509v3 Authority Key Identifier:
                keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:21:df:d2:3d:49:83:57:36:51:4c:2f:3e:c7:8d:f4:8d:d7:
         b4:95:65:62:c8:48:a8:ab:11:ff:74:1b:7f:f8:9c:4e:5b:9f:
         9c:47:9c:2c:e7:0b:6c:3f:7f:19:15:f1:48:0a:37:07:37:d7:
         d4:88:7d:7c:36:1f:8b:5c:28:57:06:36:62:c2:68:bf:70:43:
         20:2e:7f:37:c1:fb:ad:e0:2d:6c:7f:3c:10:34:65:79:3a:aa:
         e5:35:cb:ba:3a:ea:5f:35:f2:82:87:61:09:23:8f:69:36:70:
         ed:91:9f:02:be:08:d8:2a:00:a4:e5:5a:5e:7e:83:82:30:98:
         e4:61:6c:d0:35:70:27:27:96:41:60:a6:b2:34:f0:4a:dd:22:
         49:7a:5a:7d:aa:bb:da:77:5f:63:d8:a4:bc:6d:5e:12:47:cf:
         92:dc:06:66:1e:d2:92:a5:00:c4:24:79:a4:54:51:f6:f8:fe:
         7e:ca:d9:3e:04:42:de:1f:ec:99:b1:bb:25:d3:16:43:b9:f2:
         8e:fa:37:a1:98:c2:87:56:87:1a:3b:29:57:5f:fa:09:ad:d9:
         52:66:c3:1b:cb:bc:0e:aa:23:aa:3f:d1:bf:a1:4e:3e:16:9a:
         47:48:50:42:4a:ad:17:ee:76:4b:eb:09:8e:81:73:1c:b2:5e:
         ba:88:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:45:13 2025 by rpki-client