Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File:                     CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier:          f6pxyy2G2LUJiuaJ67u2ys2An8TKKah42rv5GZ5NyJg=
Subject key identifier:   37:24:45:0A:24:98:82:84:8B:80:31:5B:5B:4C:4A:05:13:01:10:21
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer:       /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number:          04F4
Signing time:             Thu 03 Jul 2025 00:01:59 +0000
Manifest this update:     Thu 03 Jul 2025 00:01:58 +0000
Manifest next update:     Thu 10 Jul 2025 00:01:58 +0000
Files and hashes:         1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: T8ddtlzxd/Km4gW5GjRGj99S5Mp+o8czlBHiLQOTHQU=)
                          2: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: eZkG1iVHjA07zqibQCS20vDKvxGWhApC6gs+W5wfJ9g=)
                          3: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 8CERVYgkltWj4G95QfjHRAzhZOs/2MofXT3PQbZreQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
        Validity
            Not Before: Jul  3 00:01:58 2025 GMT
            Not After : Jul 10 00:01:58 2025 GMT
        Subject: CN=6865c876-9275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:2e:0b:b9:05:fd:a7:ec:d7:9b:20:f4:40:
                    b9:0a:38:16:74:1a:c6:e6:10:d0:b5:50:4f:92:ae:
                    53:9d:02:e1:c1:00:05:9f:72:08:77:05:83:ce:84:
                    f0:1a:bd:68:af:2a:48:33:8c:0a:a4:53:a7:9f:22:
                    79:23:ad:d3:3c:ee:4d:a6:b1:73:c3:4b:ed:e3:07:
                    a9:9a:d4:44:ad:cc:6b:67:73:3f:75:08:0d:93:24:
                    d2:a4:a3:6d:21:78:6a:05:ef:d9:96:33:bc:06:d4:
                    7e:a4:7c:d7:d7:ff:11:1e:f6:b2:af:ac:fc:61:53:
                    63:a0:69:11:94:8f:b3:97:c4:16:37:0f:de:f9:84:
                    dd:49:0f:fc:ab:42:10:0e:c3:0e:79:e2:a3:59:a8:
                    17:96:fa:65:b6:6f:e9:64:b9:74:fe:dd:dc:00:2d:
                    54:2f:e4:69:6f:5b:88:d8:87:be:b9:9a:13:e5:02:
                    69:1a:68:c8:e8:13:bd:62:a9:b1:49:5a:01:10:b2:
                    9f:c5:e3:f0:99:97:28:0f:a3:1a:7d:fb:e3:e1:02:
                    1d:ad:41:4b:ea:e7:c1:2a:38:70:51:42:b4:fd:a9:
                    7e:6c:6a:75:ce:ba:83:4e:7f:6c:fe:47:3e:d3:e8:
                    be:e6:ca:80:91:4d:1b:91:99:98:75:1a:29:84:b4:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:45:0A:24:98:82:84:8B:80:31:5B:5B:4C:4A:05:13:01:10:21
            X509v3 Authority Key Identifier:
                keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:ce:d7:65:65:e2:99:78:bd:2a:c7:c0:d6:26:0d:8d:2b:
         f9:6c:60:dc:f5:6e:12:18:cf:02:54:58:04:c2:3a:fa:b4:d4:
         ac:ff:ba:c1:9c:d6:23:87:8f:af:26:f1:e6:2b:6c:ff:6e:8f:
         b7:e6:6c:95:fd:7c:e9:94:9d:3f:49:52:73:ca:25:5f:b4:ba:
         a2:47:9b:db:74:69:05:42:86:9e:eb:cd:b6:08:3c:fa:b7:bd:
         43:cd:a5:56:fa:88:6d:e0:1e:94:74:5e:bd:74:8a:7f:d7:0b:
         d6:f1:48:12:7e:37:8c:83:af:cf:3b:1c:a6:8f:a2:05:a8:01:
         fc:1c:dd:86:1a:33:eb:8d:b4:26:4a:94:9b:51:a4:a7:47:a5:
         cc:d4:1e:3d:1e:47:08:e2:0e:9d:2a:ac:bd:ab:58:b3:bf:db:
         70:fc:e4:a7:c0:28:4c:4f:8b:95:e9:16:8f:7c:49:83:5c:a4:
         eb:09:ce:ce:a7:ce:68:d3:ad:49:28:24:cd:81:1e:0f:88:d4:
         63:d3:58:96:d1:09:d3:f5:ff:40:49:78:e3:95:9b:8b:e4:85:
         7c:70:78:0f:ec:a3:b8:00:d7:1f:84:ca:a2:f2:3e:38:b0:51:
         ff:ad:a8:c7:83:14:b2:ee:7b:f2:33:8e:52:6d:61:44:9b:8a:
         a5:75:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:51 2025 by rpki-client