Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File:                     dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier:          uDa+Ie4dlqDPfqs1psyi6n6sqyi0hktjtHSkRVzy91o=
Subject key identifier:   F8:49:7F:C8:6E:8E:90:E6:A6:0B:D6:14:18:FF:B6:5E:03:7A:2F:27
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer:       /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number:          018C
Signing time:             Sun 29 Jun 2025 02:37:26 +0000
Manifest this update:     Sun 29 Jun 2025 02:37:25 +0000
Manifest next update:     Sun 06 Jul 2025 02:37:25 +0000
Files and hashes:         1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: Gn+VJmlOdh5TSZZp3YqgX3y4TuxjjxhuExYEQqbMZJs=)
                          2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=)
                          3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
        Validity
            Not Before: Jun 29 02:37:25 2025 GMT
            Not After : Jul  6 02:37:25 2025 GMT
        Subject: CN=6860a6e5-8ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:a2:08:62:e7:1a:ec:ac:f1:94:c7:ef:27:
                    a6:90:5c:ab:5f:79:3e:94:08:af:f9:db:7e:ec:2b:
                    ec:14:79:06:d2:e7:5f:fd:ac:f0:2f:8b:e8:7d:c3:
                    8d:20:ed:1d:db:5c:be:bd:03:f2:5c:a8:d9:fe:78:
                    e4:f0:f5:46:b0:51:30:3b:ca:fe:91:8a:c1:8a:9e:
                    be:d1:59:95:22:81:bb:01:2d:ec:a1:86:23:2b:d1:
                    c0:d0:f0:0b:8e:85:2b:c0:bd:1a:a2:58:f5:07:24:
                    f6:c0:bc:50:db:6d:b7:f5:5e:ce:c8:e9:ca:80:18:
                    1f:f1:45:c1:96:d5:44:c8:d9:20:10:98:2d:88:63:
                    21:52:57:8a:68:9d:71:9b:1a:30:0f:c0:e6:f3:99:
                    2a:57:fd:60:cd:2a:01:e7:0a:2f:b0:ce:a1:87:8c:
                    1d:b6:58:2f:d9:ed:60:3d:b5:d1:3e:10:89:9e:26:
                    13:7f:1e:a8:4c:52:90:38:17:25:42:0a:bd:a4:89:
                    4f:29:8c:2b:fc:ce:63:d3:36:ce:03:d2:90:65:8a:
                    50:5e:40:5f:6e:70:fa:1d:50:a9:fa:88:7c:fe:3a:
                    0d:dd:15:ca:e0:72:e9:ae:a1:e5:db:5e:23:e3:59:
                    19:1e:f9:c7:0e:44:d5:eb:b2:09:03:bc:4a:c5:23:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:49:7F:C8:6E:8E:90:E6:A6:0B:D6:14:18:FF:B6:5E:03:7A:2F:27
            X509v3 Authority Key Identifier:
                keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:78:ac:18:5b:95:8c:2f:87:ab:cf:01:c6:c0:bb:6f:01:15:
         1b:68:7e:8f:b7:dc:38:e5:94:84:80:16:21:cf:3c:08:e7:54:
         e8:2b:0d:be:a5:a6:aa:e4:2a:24:dd:5a:2e:4a:46:6f:dc:67:
         67:6e:47:9f:61:8e:d4:c2:47:9b:6c:6d:34:20:6f:39:8d:c1:
         65:33:e4:87:f4:99:50:ba:f0:12:46:15:f5:dd:6d:9b:8a:e7:
         4a:fc:31:ea:95:ba:47:c0:44:fc:2d:ca:b0:3c:8e:e5:d9:78:
         3f:b1:5a:5c:55:11:fc:c9:7e:d4:6b:8f:fd:9a:91:e0:ef:c7:
         4b:c8:82:ce:53:aa:8d:1d:71:8b:92:d5:b2:09:4c:4c:d4:d8:
         81:48:61:f9:cd:83:29:ac:b8:93:33:7b:3d:ff:89:f3:00:5d:
         2b:d7:e8:31:3e:71:f4:ab:88:76:b3:e5:3c:3a:76:43:6c:1a:
         17:a2:fb:15:c2:00:be:79:73:04:7f:bd:03:47:84:a8:c4:cf:
         68:53:cc:52:12:29:11:c3:89:26:5a:16:7b:57:46:49:64:4a:
         c3:cc:f8:58:d2:f0:81:e8:a4:f9:4e:2d:75:95:38:41:71:fb:
         08:40:eb:ab:fd:47:cd:97:e8:41:64:e6:94:30:67:30:ba:f2:
         58:24:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:15:17 2025 by rpki-client