Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
File:                     MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json)
Hash identifier:          KwIeCR+5NQPkUVOQrm/yf3CdqK+eOyk7SupY1el/rHQ=
Subject key identifier:   5D:E8:C4:16:5B:48:0D:B8:33:42:0F:76:72:AD:38:D5:2D:58:F9:A8
Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88
Certificate issuer:       /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
Manifest number:          F2
Signing time:             Sun 29 Jun 2025 04:19:16 +0000
Manifest this update:     Sun 29 Jun 2025 04:19:16 +0000
Manifest next update:     Sun 06 Jul 2025 04:19:16 +0000
Files and hashes:         1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: Mw6ENi5KmLLIDtQnBXgKVWk8GzPZLeB0cWY0Iivjowc=)
                          2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl
                          rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 04:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388
        Validity
            Not Before: Jun 29 04:19:16 2025 GMT
            Not After : Jul  6 04:19:16 2025 GMT
        Subject: CN=6860bec4-fd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:ef:c9:06:21:82:14:af:a2:68:68:1d:e0:
                    cb:2d:e8:21:eb:60:35:e6:d9:91:75:f8:ac:6f:60:
                    42:51:25:0d:b1:65:31:a9:0f:86:c3:32:99:0e:74:
                    ec:02:31:b1:42:56:8e:24:02:01:33:b0:04:02:1a:
                    12:07:fa:21:c3:ad:8d:13:35:bb:6c:d5:6c:3f:e3:
                    93:16:45:24:51:8d:9c:dc:5f:e8:d8:4b:93:95:44:
                    d1:82:f0:63:c6:21:f2:f0:e7:7b:f1:6e:20:fb:ce:
                    0e:0c:e5:e8:9b:e2:5f:46:c2:78:f7:2f:d0:72:6c:
                    c5:55:42:1b:0c:03:0d:00:f1:28:bc:11:38:40:62:
                    e7:03:8e:24:c7:dc:26:7b:49:50:ea:69:87:b2:54:
                    a1:01:ef:a7:71:7e:5f:5a:f1:78:e5:b7:50:7d:58:
                    87:0a:19:65:c6:46:c7:21:44:16:36:f3:ab:bb:24:
                    13:ff:c4:fc:8a:b2:88:fb:40:07:8b:9a:f7:7e:5c:
                    ca:de:20:5e:4c:94:d9:de:36:2a:52:13:73:87:99:
                    b2:43:04:1b:9e:0c:c6:6e:9c:f9:e2:eb:6b:53:07:
                    2f:9e:32:bb:51:03:bf:30:59:6b:d8:83:10:55:45:
                    0d:a2:cc:4b:3d:6b:11:2a:72:30:ae:c0:2b:0d:e5:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:C4:16:5B:48:0D:B8:33:42:0F:76:72:AD:38:D5:2D:58:F9:A8
            X509v3 Authority Key Identifier:
                keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:60:72:a8:ea:1a:fd:88:45:d2:8d:52:ae:ec:67:7e:63:cc:
         f0:44:0f:80:e6:27:fd:81:7d:59:11:e7:13:69:72:ec:a5:66:
         b2:1d:db:b6:a3:fd:2d:9e:1d:33:cb:81:2e:34:31:b2:69:16:
         9a:1d:cf:2a:82:22:d8:ac:e3:96:80:cb:8e:0d:37:07:e4:63:
         1e:dc:93:9f:fd:35:3e:fe:b9:14:8e:4b:6c:93:be:9a:84:08:
         dc:40:93:6b:cf:31:5b:34:ff:75:29:b1:4b:cf:09:f3:4d:63:
         28:29:06:bc:2d:f4:77:80:be:f1:4e:08:27:83:8c:b8:c6:27:
         c6:fc:b6:49:6d:70:65:22:0d:6b:de:57:4e:c9:44:75:53:6f:
         ad:91:d7:c2:15:e7:82:37:89:c5:c1:bb:13:50:54:c4:df:89:
         14:d6:76:87:8b:93:7d:01:fd:42:d3:60:fc:e0:7c:f1:3e:ff:
         9b:58:aa:aa:83:70:68:fd:c3:cd:c9:69:a1:ac:bd:45:91:db:
         7a:70:77:62:f9:47:8d:5a:f3:52:32:94:be:c3:56:ef:7b:31:
         c1:2b:6f:c1:42:66:d2:f3:39:60:3b:8a:8e:ac:57:09:e2:83:
         7e:f8:83:ec:01:73:7b:3d:75:ea:58:0b:f8:f7:e6:bb:e5:cb:
         87:a2:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:03:36 2025 by rpki-client