Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
File:                     3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json)
Hash identifier:          KyxhZijbaAaOe9l48Sj3i5lxUpjsOCfRxvxSwcAfG1k=
Subject key identifier:   CB:BA:58:17:40:43:D2:81:2B:96:83:17:FA:CF:57:9C:59:9C:B6:C2
Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E
Certificate issuer:       /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
Certificate serial:       1B6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
Manifest number:          1B4C
Signing time:             Wed 02 Jul 2025 16:24:08 +0000
Manifest this update:     Wed 02 Jul 2025 16:24:08 +0000
Manifest next update:     Wed 09 Jul 2025 16:24:08 +0000
Files and hashes:         1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: mqMYJhNLuWwlczu2uXJ5oC05CbuMUut4xiQMkFcSx9g=)
                          2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: 26Hx4AkbPRTYM9L9rQHlirDpC55IRFhPxlOYhEhXmNA=)
                          3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: ItkNWWq8nRtDa6uB2Q8iwUXsM5xJRUOh/lTQOL6uROM=)
                          4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: VGx79HjfctMAH3951trK9IBgyFBPVt62lhijc0hOVt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl
                          rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7022 (0x1b6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC4E1, serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E
        Validity
            Not Before: Jul  2 16:24:08 2025 GMT
            Not After : Jul  9 16:24:08 2025 GMT
        Subject: CN=68655d28-2bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:64:58:e1:d0:14:4b:7f:9c:f9:1b:e0:25:
                    84:33:5c:20:c6:9d:ce:58:f1:88:81:c6:bd:49:91:
                    d9:6b:5b:7e:34:ef:59:a9:56:2e:62:bd:9a:ff:76:
                    5c:f8:20:61:20:87:42:37:8f:51:70:9b:c9:6a:38:
                    c4:8a:0b:8a:b7:43:8a:13:c3:af:fa:dc:6a:2e:27:
                    33:88:74:52:53:30:bd:f2:05:66:e2:05:ac:1c:38:
                    05:65:b3:41:da:30:12:44:76:cd:b9:9c:d8:31:e5:
                    8c:9e:56:21:8e:4e:44:1c:8e:5d:d8:1d:15:b8:36:
                    25:ad:26:64:2c:d4:81:51:b4:7b:58:9a:66:ca:00:
                    8b:75:04:21:65:ba:57:f5:66:79:8a:48:00:86:65:
                    ea:30:93:72:26:d7:f5:63:d9:29:bc:94:01:d6:57:
                    7f:55:25:ae:41:95:c7:64:56:a1:25:64:3e:95:74:
                    68:9e:17:72:2a:69:54:d7:cf:14:ef:99:3f:10:26:
                    c9:09:06:d7:35:e2:63:28:41:37:3b:e5:33:58:4e:
                    55:11:ab:47:44:b3:6d:cc:00:f9:e7:57:ae:b5:8a:
                    b5:65:22:00:89:b5:54:0e:7b:61:82:e0:7a:59:80:
                    aa:e8:e6:82:e8:88:af:25:bd:98:4b:8c:56:44:57:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:58:17:40:43:D2:81:2B:96:83:17:FA:CF:57:9C:59:9C:B6:C2
            X509v3 Authority Key Identifier:
                keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:dc:11:2d:9c:93:db:30:0b:73:84:38:ec:55:c4:09:16:
         01:d4:3c:24:29:68:63:c4:aa:d4:12:7c:04:ab:4b:63:99:79:
         fd:47:02:3d:b2:28:3d:25:37:62:e9:84:b9:66:b5:5b:ea:40:
         f5:ae:75:69:bf:f5:0f:1b:df:c0:2e:80:48:4c:58:e4:cb:fa:
         54:5a:e0:e5:82:e2:8d:e0:73:33:e5:cf:7a:d1:1a:ce:60:ae:
         69:e1:d9:4e:27:87:c7:7e:92:60:f3:6b:a2:04:b3:9e:a3:51:
         b6:32:e5:df:d1:66:8d:7b:b6:b2:99:ac:2f:92:47:3e:bd:f7:
         7b:b1:33:32:e0:62:0b:e3:eb:fb:e1:75:d6:86:2e:32:fb:b2:
         a3:1d:c6:6b:15:e7:d0:7c:80:61:0e:68:6d:66:23:d3:24:46:
         84:a7:1d:2e:ed:dc:f3:2b:92:1e:74:54:db:fc:8e:73:a8:37:
         92:87:88:65:23:79:aa:78:4a:88:65:36:79:64:22:78:c7:e1:
         1a:b8:10:35:4f:44:23:70:9f:6d:07:d2:18:96:4e:1f:4e:26:
         2b:9b:80:6a:8d:51:61:c0:0f:ae:bd:6e:cc:13:ab:f5:cb:0e:
         49:61:d1:16:71:28:8f:a4:06:d8:60:b6:ab:76:74:d7:54:2f:
         7a:27:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:59 2025 by rpki-client