Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File:                     exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier:          GncGSwwZ5yK/eiN0gnFgcqoT2hSgYCL5tvW+AcAb2zM=
Subject key identifier:   E0:0B:3E:C9:81:CC:FF:3D:D1:09:2E:36:F1:38:71:65:89:62:26:0E
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer:       /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number:          03B1
Signing time:             Thu 03 Jul 2025 01:03:52 +0000
Manifest this update:     Thu 03 Jul 2025 01:03:52 +0000
Manifest next update:     Thu 10 Jul 2025 01:03:52 +0000
Files and hashes:         1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: RDKS+gLT3LJ0GgnsjyhwYPK97ZNzkTG2npArjbY/IF4=)
                          2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
        Validity
            Not Before: Jul  3 01:03:52 2025 GMT
            Not After : Jul 10 01:03:52 2025 GMT
        Subject: CN=6865d6f8-a9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:4a:c1:db:e7:cd:c7:b0:b4:db:c7:72:48:
                    e0:f8:43:3b:d1:9c:1f:e8:e5:12:6d:e5:e8:03:d1:
                    49:50:c7:9a:ae:9f:c2:39:0e:73:3c:78:0f:12:b3:
                    88:5a:f0:a6:b8:9b:ae:6f:2f:3c:8a:0a:aa:f8:b4:
                    48:ca:ca:23:43:9b:c7:ae:09:37:bd:e9:59:58:da:
                    8a:3b:34:13:06:2d:ce:41:6e:e2:f1:18:bb:a8:9a:
                    47:fe:ce:2f:87:c1:40:6c:90:02:a2:93:27:85:51:
                    62:ae:67:67:b8:b0:d2:49:16:29:6c:d0:c0:28:1a:
                    5f:19:94:ef:7e:3b:8c:7c:fe:fd:65:27:39:66:9c:
                    a9:d8:39:71:f4:b1:9a:22:66:2b:0f:3e:1d:e1:96:
                    cb:38:73:83:b8:c0:36:f0:9a:57:27:96:ad:84:b7:
                    e4:cc:4a:cf:a3:30:a3:98:76:e7:e5:71:42:d3:a3:
                    63:64:ba:c9:8d:5e:a3:b3:50:a0:99:42:47:90:2b:
                    5b:87:17:45:29:62:26:d1:d3:b1:88:ac:02:e5:cf:
                    f9:ec:76:a8:f0:86:7c:9b:0a:24:f2:3b:4d:8d:8f:
                    f4:3d:5c:3f:77:27:3a:29:87:a0:89:41:1c:c4:b5:
                    7a:63:42:b4:6d:44:48:39:0f:b0:5f:7a:ac:f1:03:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0B:3E:C9:81:CC:FF:3D:D1:09:2E:36:F1:38:71:65:89:62:26:0E
            X509v3 Authority Key Identifier:
                keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:70:3b:d5:d6:4f:5a:67:41:6c:51:15:2c:aa:c5:64:05:e4:
         89:1f:e0:ad:41:7b:8a:f6:dd:d5:a0:1d:79:8c:8c:58:50:92:
         bd:ce:be:9b:da:23:c9:7a:65:c3:41:27:eb:9e:15:1d:36:6c:
         b0:c0:14:51:f8:f1:f3:cd:62:6c:bc:a5:86:bd:e6:59:81:11:
         63:50:4f:ad:36:62:2a:72:50:84:34:50:fe:59:95:7a:fb:14:
         43:d2:25:98:10:4c:2b:ba:22:b0:1b:90:58:c2:ec:ac:97:18:
         54:a9:62:ff:29:c1:ee:13:da:99:e6:08:68:90:80:c3:f5:2a:
         2c:61:ec:31:06:86:d8:60:67:33:6a:7a:50:a3:92:52:42:1e:
         c5:1e:a6:e7:55:b6:1b:00:98:e8:52:02:50:2f:9e:30:07:18:
         af:cc:0c:5b:14:f6:89:72:cc:16:cd:9f:db:d1:d7:8f:7f:c8:
         85:aa:76:e3:19:0c:a1:a1:f6:9d:5f:a2:d9:26:3f:79:05:9a:
         22:23:6b:b5:76:bc:63:0c:c2:e9:41:47:ba:54:35:32:1d:61:
         32:08:49:45:35:fa:a5:87:05:e8:88:36:01:a8:89:bc:ee:ee:
         2d:51:af:79:30:27:07:a7:5c:62:04:a9:0d:45:64:7a:d6:10:
         c6:14:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:59:21 2025 by rpki-client