Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File:                     45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier:          6TZ57YtQ3gZiX1nbF0wwV4mE+QMwjF46DXqr1TkEuQE=
Subject key identifier:   7B:32:8E:05:92:07:23:65:C1:F3:0C:E6:F1:88:B3:AA:56:36:E3:05
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       34BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number:          34AB
Signing time:             Sat 26 Jul 2025 15:12:41 +0000
Manifest this update:     Sat 26 Jul 2025 15:12:41 +0000
Manifest next update:     Sat 02 Aug 2025 15:12:41 +0000
Files and hashes:         1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: JHx04QtOBqDv0PQe/h4oDvNfPfyRkP3scj+02DJoFE0=)
                          2: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: cqg+DSKnyJEQ2eZBDWRlzFwbq68PCAP4lP7BZ9uGoSY=)
                          3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 48skWMAdj9drhHu2eh7bahmOkoZkfvFChpuIgM6+7w8=)
                          4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: wZnaCk/gJYbevnAK1yVFsEKeXrhTNDea/rw+miTZiyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 02 Aug 2025 15:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13503 (0x34bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Jul 26 15:12:41 2025 GMT
            Not After : Aug  2 15:12:41 2025 GMT
        Subject: CN=6884f069-f429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:24:7f:0b:c8:da:44:07:0a:56:39:c9:c1:
                    c4:5a:50:ac:c5:e3:27:30:07:72:27:3a:c9:9b:da:
                    4a:92:c7:45:0c:71:9a:bc:a4:40:b0:58:a2:6e:55:
                    82:d7:fd:27:25:4e:1a:e8:92:a0:f3:3c:d1:7b:7b:
                    2a:ca:44:63:b6:32:b3:bb:b1:e3:a4:d4:89:24:66:
                    e1:39:55:6f:4b:7e:ff:dd:08:6d:c2:9c:28:c4:db:
                    0d:8c:30:66:50:15:f1:03:c7:e6:de:8e:ce:13:7c:
                    5e:2c:7d:7f:4b:7f:1f:b1:d3:0c:16:94:d2:77:50:
                    18:65:2f:6f:d8:14:92:75:b0:16:f9:b9:85:1f:f4:
                    8e:e5:17:6e:42:d2:e1:e8:fa:cd:90:e9:14:57:04:
                    87:23:fb:01:29:35:42:78:17:30:ad:16:a7:c1:48:
                    d9:96:66:17:ac:db:19:72:d4:6f:71:c3:29:e6:b7:
                    6d:a3:61:77:e4:1e:12:07:1e:8d:3b:c0:d1:5e:0e:
                    5d:2f:10:84:8a:44:89:f6:36:8f:c6:90:82:83:0c:
                    41:7d:af:f1:73:3c:59:0c:8a:21:bc:6a:88:f0:1e:
                    9c:ae:90:40:8f:2b:99:1f:c9:63:a7:ea:4d:14:69:
                    5d:37:23:55:c4:94:1d:c6:79:f5:84:72:2f:65:1a:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:8E:05:92:07:23:65:C1:F3:0C:E6:F1:88:B3:AA:56:36:E3:05
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:84:9d:26:10:07:ac:e9:03:e7:74:aa:38:d0:c6:9b:ba:
         34:f6:4e:a0:2d:2a:ec:d8:db:79:61:c7:48:64:7c:54:b1:41:
         e4:a9:3b:82:19:c8:c0:32:e4:2e:a0:3a:38:74:b4:5b:2d:c9:
         d4:aa:2f:28:d0:e0:4a:68:6a:35:ee:3b:8f:45:c7:96:b7:50:
         46:77:ae:30:8e:b6:9b:73:dd:98:44:75:50:98:ab:66:92:6d:
         07:c8:d6:cf:31:c7:3e:23:98:16:6b:b1:1d:23:8b:17:28:9f:
         a6:04:55:36:88:22:65:3a:3a:d8:95:b4:91:8d:f7:a5:86:b8:
         df:b0:73:2c:bf:91:74:50:d8:43:5b:68:09:0a:d0:09:0b:90:
         82:ee:81:be:76:7f:a3:08:5d:3a:25:0c:ec:05:8c:be:fc:52:
         e2:54:42:cb:82:b9:32:ee:53:7d:99:c0:a3:24:ce:c2:1c:4c:
         42:34:f7:32:27:82:8f:31:8a:33:af:8a:f2:c8:26:28:6f:17:
         c6:9e:ce:d8:c7:bb:59:81:a1:07:66:89:30:f8:51:d7:64:8e:
         66:64:40:dd:36:b5:6d:b1:66:72:2f:c8:d2:f3:9f:1c:f4:0f:
         a4:b4:7a:67:75:c7:88:7a:0e:72:c0:87:08:0e:df:1d:f7:ae:
         52:c8:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:38:17 2025 by rpki-client