Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File:                     n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier:          WM4uic7hNJZ5PeKW2qLstJJJIk11VtdNlyPB177sM7w=
Subject key identifier:   BF:38:BB:77:24:6E:BD:1A:1E:DB:56:B6:9B:86:4A:BE:4E:C4:3D:10
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number:          3F
Signing time:             Sun 29 Jun 2025 06:31:33 +0000
Manifest this update:     Sun 29 Jun 2025 06:31:33 +0000
Manifest next update:     Sun 06 Jul 2025 06:31:33 +0000
Files and hashes:         1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: +AmuhwVUocI9OLqiMVqUK85G+U6+pz01jWx8CkkVAbU=)
                          2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=)
                          3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 06:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Jun 29 06:31:33 2025 GMT
            Not After : Jul  6 06:31:33 2025 GMT
        Subject: CN=6860ddc5-f099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:d2:cb:78:73:91:84:0b:88:87:17:b4:ab:
                    4c:af:27:38:39:ff:c5:a6:34:31:81:df:5a:b0:9d:
                    12:d4:32:0f:b2:ef:c0:97:04:1b:e1:5a:13:0c:7d:
                    39:b3:ec:d4:e2:a2:38:bb:94:86:0e:d1:32:75:47:
                    0e:b6:81:72:bd:c7:66:78:91:46:b4:01:a1:25:3e:
                    79:1c:81:2b:29:a2:83:ec:e5:88:67:6b:22:9a:c5:
                    8e:16:ec:e3:0a:53:5f:5e:50:f8:84:dc:fa:6f:2c:
                    32:25:80:2e:16:18:f9:90:f2:f0:cd:f8:24:cd:94:
                    c6:67:40:28:07:c4:0a:be:61:e0:e6:7d:26:86:68:
                    64:30:33:ce:f9:ef:21:6b:be:e5:86:d4:32:6e:b2:
                    a3:70:70:1c:75:16:20:c3:b5:5a:25:46:d8:63:ae:
                    c6:6b:13:ce:08:b5:39:ac:42:30:94:ef:e3:a1:02:
                    35:29:eb:b0:52:14:83:c4:62:7f:dd:04:c7:cb:fb:
                    d9:27:02:b8:fd:e2:87:ea:a0:dd:de:16:00:74:c3:
                    ec:cd:af:14:6b:97:7b:f0:18:90:87:d7:00:7b:30:
                    a4:32:34:41:cb:fd:91:08:8a:2b:37:60:0f:20:38:
                    c7:ec:34:7c:8d:af:cc:27:12:ba:94:f9:97:ec:d9:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:BB:77:24:6E:BD:1A:1E:DB:56:B6:9B:86:4A:BE:4E:C4:3D:10
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:85:05:fc:9c:cb:fb:74:8e:bf:7e:2c:b7:99:ad:ac:7d:9b:
         3c:78:d3:66:49:51:2e:14:b9:03:bf:e6:3b:6d:21:81:7d:b3:
         62:bd:2b:88:d9:97:6a:96:2e:a6:9e:ba:ee:78:d6:68:74:d2:
         0d:5a:8e:d5:81:7d:84:4d:93:ad:a6:cf:7c:40:85:c5:d8:e3:
         92:ec:32:22:58:21:e0:bc:9f:31:34:5e:17:2c:48:cb:af:c9:
         cd:38:3c:01:e8:54:fa:c2:13:9f:dc:a8:b9:3e:f2:08:4d:cc:
         ff:50:e5:5d:61:59:eb:c1:5f:7d:0f:86:0f:a3:69:68:61:a3:
         74:bc:6b:6f:27:ff:a5:e1:30:0c:b7:18:a5:0e:35:2c:5d:6d:
         9c:88:1c:83:cf:67:25:37:84:59:55:13:41:6c:ba:47:05:bd:
         78:bd:23:95:ba:2c:fd:18:8d:91:be:13:50:e8:6b:1d:54:90:
         56:5a:76:fd:01:ee:d0:ed:13:fc:4a:cd:76:e8:5a:3c:3f:4b:
         ae:8b:e5:9b:75:68:f4:be:49:78:da:23:75:8c:cf:d9:d1:a5:
         42:61:2f:b5:58:24:f6:40:b7:44:8c:a2:92:e9:70:4b:00:eb:
         8a:08:31:26:f6:83:cb:f7:55:05:72:0f:49:9c:9e:41:18:05:
         df:7e:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:33:04 2025 by rpki-client