Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          kY57O1sD3FKBesMd2gV9UWZcl/yJ470J0Oqv+6vv2Nk=
Subject key identifier:   47:5F:16:12:CD:4B:A2:DC:C8:55:85:40:C7:B7:BD:CF:BA:F4:36:DE
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       0671
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          066A
Signing time:             Fri 04 Jul 2025 22:52:48 +0000
Manifest this update:     Fri 04 Jul 2025 22:52:47 +0000
Manifest next update:     Fri 11 Jul 2025 22:52:47 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: 1IsFxJUQLgS+jTphh22Oc0gT86oy+WH9HACojVQYuC4=)
                          2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: Jul  4 22:52:47 2025 GMT
            Not After : Jul 11 22:52:47 2025 GMT
        Subject: CN=68685b3f-516a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:34:3b:d5:64:31:5d:4c:59:fd:80:fc:fa:
                    fa:27:f2:11:d4:6b:b0:87:25:83:04:d1:1a:18:22:
                    2e:21:e0:98:d6:ba:99:72:3d:f0:ea:0b:85:db:c7:
                    64:49:1f:10:3b:69:15:34:db:ac:95:12:87:c2:30:
                    c7:9f:0c:9a:60:cc:db:72:5a:5c:f5:d7:cf:f9:5f:
                    3e:36:ef:a9:c5:b1:5e:d6:18:bb:ff:1a:03:8b:49:
                    02:f7:04:a0:16:97:e0:55:ad:b3:bc:2c:dc:03:bb:
                    4b:26:a5:a2:c1:ac:c2:1c:51:d7:ca:3f:c3:69:bc:
                    6d:7f:cc:dd:54:4b:bf:b4:21:4c:92:8a:b7:e8:0e:
                    b2:4b:7b:1b:c8:db:6a:30:0a:6a:78:8f:4c:28:b8:
                    75:56:d0:ec:21:ee:ee:b2:db:46:91:22:be:ce:cb:
                    5a:6c:3f:ee:bc:d2:c2:2f:87:54:ae:c0:49:11:83:
                    61:79:60:9c:4d:e9:a3:e0:c7:12:8d:c9:10:db:c6:
                    00:89:15:23:50:13:56:60:82:31:83:80:f0:d8:80:
                    58:44:76:08:bb:10:70:44:bc:1b:cb:0e:e8:79:b0:
                    f4:59:6a:74:97:bf:2a:0c:77:62:43:04:09:ac:c8:
                    bd:2c:ca:27:01:c4:a5:21:5c:bc:fd:46:38:77:89:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:16:12:CD:4B:A2:DC:C8:55:85:40:C7:B7:BD:CF:BA:F4:36:DE
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:aa:34:f9:26:8a:d3:dc:45:38:d1:74:77:a8:6a:88:5a:
         07:bb:3d:6a:e1:d1:d1:25:26:8a:82:3c:b8:82:db:83:8b:d9:
         1d:85:28:5d:c8:cb:57:46:6d:11:1c:66:45:dd:de:09:05:fb:
         c0:70:99:65:5c:32:15:1f:3f:30:84:73:3f:c5:cd:30:3a:3b:
         f7:aa:14:68:93:8e:76:c2:05:96:b2:61:9e:38:ec:d7:21:e4:
         b4:72:3b:3a:57:b2:55:9b:6e:67:64:90:c7:dd:06:81:40:fd:
         dd:55:84:ec:cb:cd:2d:cd:f0:92:d7:38:fa:d4:d8:9a:38:21:
         73:d4:8f:1a:a3:77:1a:97:9d:d4:b4:65:b5:ac:b2:cd:a0:b6:
         0a:8a:15:44:f5:d7:ac:19:ff:b2:c1:01:e1:cd:c6:05:a8:7c:
         47:fa:a3:a3:37:d2:c9:55:67:5e:dc:bc:a5:57:0c:99:95:dc:
         81:2b:bc:73:9b:44:34:d2:e2:52:2a:18:00:52:23:9f:2d:6e:
         37:71:a5:a5:dd:52:f5:e2:b0:d3:d7:e8:e2:3d:c2:f4:0f:50:
         aa:e8:af:dc:34:01:96:fb:66:5f:e6:29:b2:19:ab:46:cf:c7:
         c6:be:d4:5c:35:a9:b3:fe:0c:bc:f3:2c:17:e8:98:0d:b7:00:
         ab:b0:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 19:02:02 2025 by rpki-client