Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier:          h8sK/9J0A5B9Reh56FXUiRRoPnys4fWO+zY4m7Cb5t8=
Subject key identifier:   45:22:5F:D0:45:60:39:B2:BD:0B:3D:26:72:DB:AE:1D:AC:E1:C7:70
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0E10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number:          0E01
Signing time:             Fri 04 Jul 2025 18:09:39 +0000
Manifest this update:     Fri 04 Jul 2025 18:09:39 +0000
Manifest next update:     Fri 11 Jul 2025 18:09:39 +0000
Files and hashes:         1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: iiU/1z6DIEOIzHhhyHpnh44HLkrVS+c+CswCuCTlphg=)
                          2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=)
                          3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3600 (0xe10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Jul  4 18:09:39 2025 GMT
            Not After : Jul 11 18:09:39 2025 GMT
        Subject: CN=686818e3-3cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:8d:d2:a1:78:8f:ed:95:81:01:16:84:c9:
                    22:94:a7:63:24:54:6b:af:70:52:f1:64:2d:fd:7d:
                    42:fa:1d:53:1b:1f:57:c4:06:18:61:3f:0d:ea:75:
                    ce:fc:5a:24:ec:14:12:7a:71:61:e7:07:03:1a:15:
                    be:31:74:b9:9e:ae:2c:96:32:1a:86:ae:ed:bc:e6:
                    e1:c7:e6:7c:bc:e5:ab:4e:fa:6f:27:b9:b5:96:b8:
                    06:0f:74:5a:d7:9e:4a:8a:88:f1:a5:a6:ef:4b:32:
                    ef:38:f3:d8:6d:1b:11:b2:ea:fb:3b:78:85:ac:09:
                    50:45:52:07:98:a0:9b:31:d6:0f:f2:aa:87:a0:e6:
                    b8:60:45:15:04:79:74:43:86:05:01:98:98:e8:75:
                    89:96:64:ae:c3:43:99:b8:6a:9b:47:e9:17:6e:2d:
                    c0:1a:0f:9b:14:71:27:c8:7a:6d:df:f9:d2:24:a8:
                    0a:42:bb:fc:dc:06:7a:12:29:6b:15:15:86:bc:50:
                    ce:d7:db:aa:83:5f:d7:ff:70:98:84:f8:a5:6f:16:
                    72:e9:f4:20:48:0a:bf:c2:18:02:6c:dc:bd:f2:3c:
                    31:2d:b0:ea:0b:bd:db:f6:06:4a:35:67:9f:e1:ab:
                    2c:6f:5e:22:78:98:60:9e:e3:54:c7:47:d9:85:40:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:5F:D0:45:60:39:B2:BD:0B:3D:26:72:DB:AE:1D:AC:E1:C7:70
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:ee:cb:cb:87:56:94:9c:e2:bd:27:1e:db:7c:b9:b9:01:
         2d:8b:fe:71:1a:a9:7e:0a:b3:90:58:34:b4:be:61:af:93:d5:
         17:af:05:8d:21:09:30:1c:ef:38:46:01:1c:6d:f8:58:95:b9:
         08:4c:48:38:46:63:1f:87:15:68:2c:1f:a1:77:8d:8d:d5:e8:
         83:b5:29:cf:f5:2f:47:bb:d0:97:1f:e3:a8:7a:ea:4c:49:70:
         83:8f:e6:ee:4f:b3:53:9a:ed:c5:ac:5f:d2:c5:db:e0:5e:8a:
         cb:5d:ed:db:6d:d1:ab:c7:68:ee:a3:96:92:a4:15:c0:98:8f:
         5a:ca:fc:3a:c8:a0:cc:b3:e0:a6:45:d0:73:35:6a:f4:bb:b2:
         ff:0a:55:15:26:d0:b3:89:37:34:1b:72:84:90:47:cb:55:9f:
         e6:73:14:7a:f7:16:9e:d4:52:fe:7a:6a:40:24:20:53:ba:93:
         01:15:9b:3f:a2:18:4e:a9:00:08:4f:34:d9:20:f0:8a:f8:44:
         c4:27:51:e4:f4:82:b1:7d:24:29:1e:db:0f:11:70:a3:a1:0e:
         ae:fb:1e:7f:bf:e5:b7:3c:68:57:c3:f5:34:5b:20:c3:df:64:
         89:4b:ae:9d:c6:15:bf:95:48:cc:fc:f2:01:cb:cf:dd:ec:ba:
         d3:c7:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:51:53 2025 by rpki-client