Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File:                     RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier:          H38mShUiOLnPwQREhfMArxt3yN4TRdStwz5Lp9PD6e0=
Subject key identifier:   FC:C6:9B:B2:35:58:42:26:AE:2A:6E:7B:8C:21:84:6C:32:6D:25:C1
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer:       /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial:       0456
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number:          0437
Signing time:             Tue 01 Jul 2025 00:55:45 +0000
Manifest this update:     Tue 01 Jul 2025 00:55:45 +0000
Manifest next update:     Tue 08 Jul 2025 00:55:45 +0000
Files and hashes:         1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: 9rzswu8jxDDp7pefHPRtHmCeIXiHKa/HJ5vlUN490N0=)
                          2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=)
                          3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=)
                          4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
                          rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 00:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110 (0x456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
        Validity
            Not Before: Jul  1 00:55:45 2025 GMT
            Not After : Jul  8 00:55:45 2025 GMT
        Subject: CN=68633211-bff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:2b:d1:24:93:2a:2d:f4:c3:58:49:52:11:
                    52:3c:12:93:fd:e3:14:83:3a:16:85:c1:cd:d6:66:
                    23:8b:87:ca:f6:0e:11:11:da:b4:74:0f:59:87:6b:
                    e7:52:cb:69:ff:af:3c:ea:5e:4b:43:c6:9c:fa:87:
                    84:c7:14:22:5d:96:70:ae:e1:33:ca:63:1a:da:34:
                    7f:7e:25:32:8d:e4:3a:b8:6f:4b:78:b1:2b:6c:a7:
                    09:04:91:9d:6a:03:a0:20:98:d3:90:49:96:bb:20:
                    92:16:48:8d:b2:33:8a:7c:10:99:2b:66:63:4e:5e:
                    0b:75:13:bb:2a:26:93:96:88:67:d2:47:7c:93:9b:
                    8a:83:d0:10:41:ae:a6:0b:9c:77:ab:07:a3:d8:da:
                    d3:ee:e5:8e:5f:5d:9c:bd:e9:48:86:c8:7c:e2:eb:
                    1e:02:8a:f0:c7:b3:13:de:72:ab:b2:b6:f9:0e:ac:
                    a7:d9:de:37:e5:7b:df:48:64:63:a4:1d:da:39:c6:
                    d8:67:5c:c8:98:1c:ac:32:be:f5:11:64:bf:86:82:
                    3f:ba:c1:68:64:3e:99:8e:f3:39:37:df:62:79:d6:
                    0c:27:2c:a0:86:c9:24:37:19:a4:19:18:12:85:e0:
                    26:86:59:a8:99:a1:31:a8:67:b4:4b:e7:3a:f7:d7:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C6:9B:B2:35:58:42:26:AE:2A:6E:7B:8C:21:84:6C:32:6D:25:C1
            X509v3 Authority Key Identifier:
                keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:b5:a4:62:c5:d2:26:1e:2c:0b:6c:ec:17:b7:0d:16:37:
         2c:df:19:b2:15:14:0b:e0:e7:b9:b6:f2:07:39:91:a1:f1:26:
         4f:95:c0:4e:45:26:4e:e5:b5:c2:a1:27:aa:31:c7:19:ed:b9:
         db:ab:4e:1c:25:c6:f5:51:a5:9c:a3:fe:03:70:a6:c3:dc:ae:
         b9:22:84:e5:00:b7:c0:95:2c:44:2f:86:7f:d9:bb:d4:7c:a9:
         a3:7d:95:2f:b5:d7:8c:17:d8:bc:ec:25:b6:3a:9a:9d:f8:eb:
         38:15:5d:19:60:26:a6:57:29:b5:ed:69:34:fc:22:5e:13:db:
         26:91:f1:b2:d7:62:e0:d9:42:a0:fe:9a:4c:c8:59:2b:b0:76:
         83:85:d6:24:c2:a1:56:fa:7d:2d:18:d4:58:57:d6:f0:22:21:
         1b:f4:8f:ed:dd:1e:21:bd:bd:b4:48:3c:0d:dc:18:c2:b0:ae:
         2c:93:f9:0c:14:0f:34:67:21:21:0b:96:81:d1:ed:fd:1a:15:
         ea:e6:86:f6:c1:e7:57:d9:8c:d1:fa:9b:c2:bb:40:d5:2d:16:
         7a:92:d9:cc:a3:08:2b:3e:0d:e6:8b:a4:28:f7:83:33:c5:28:
         c7:ba:ff:cc:c5:f7:eb:84:57:9d:dc:24:b2:4c:11:93:fa:f8:
         9e:13:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:51:43 2025 by rpki-client