Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
File:                     -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json)
Hash identifier:          DmVtN+I8dDQsM7Zw/qsCqjEUscQ7TWYfGAHFXcU+Wgk=
Subject key identifier:   99:61:20:DE:2C:5C:F7:C1:56:5E:BA:AC:70:30:C8:AB:6E:AC:21:5C
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
Manifest number:          060F
Signing time:             Fri 30 May 2025 23:04:38 +0000
Manifest this update:     Fri 30 May 2025 23:04:37 +0000
Manifest next update:     Fri 06 Jun 2025 23:04:37 +0000
Files and hashes:         1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: hxBACYz/DcNdKjkhYNWrYZtiy4OUhXyDgT9WfHbe9qw=)
                          2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=)
                          3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
                          rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: May 30 23:04:37 2025 GMT
            Not After : Jun  6 23:04:37 2025 GMT
        Subject: CN=683a3985-b22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:a3:d8:19:bf:b1:bd:46:dd:e1:30:b2:05:
                    85:8d:35:56:6d:5f:47:92:8a:f0:35:2e:4a:6a:7b:
                    55:2b:7a:25:45:d5:9e:5d:c7:e6:5d:70:fb:04:7b:
                    b7:6f:2d:32:7b:e2:08:06:17:bc:11:00:a1:67:1c:
                    2f:f1:86:52:af:8e:f5:7d:16:3b:6e:1b:7c:25:a2:
                    da:0f:de:ad:b6:c9:7a:da:3e:05:29:d4:81:f8:ab:
                    34:7f:fe:ab:e3:8d:d9:f1:38:80:c6:37:46:ca:56:
                    bc:e3:59:fb:b4:a5:7e:b1:e8:ee:13:62:af:89:98:
                    94:90:d5:f1:b1:5d:49:3f:a3:6c:e1:c8:2d:0c:fb:
                    50:e6:2f:08:96:23:86:27:9d:ee:66:0d:31:44:1b:
                    7d:c5:74:b6:53:15:8b:1f:6b:02:46:39:0f:40:4b:
                    6b:4e:24:da:2b:63:00:57:1f:79:5a:cb:82:e3:c0:
                    ea:d9:f9:07:41:05:26:69:b5:7d:0f:85:62:cb:22:
                    d3:58:a0:ae:31:f2:5a:bf:ae:6d:ef:34:8c:9b:56:
                    06:07:38:90:15:f8:fc:27:ef:2a:a0:66:8e:35:9c:
                    db:3b:18:a3:5a:00:05:78:9e:20:17:00:d4:6d:54:
                    00:cd:73:42:b0:f1:19:f5:27:a4:97:01:74:39:bd:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:20:DE:2C:5C:F7:C1:56:5E:BA:AC:70:30:C8:AB:6E:AC:21:5C
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:b1:95:c6:ea:6d:56:a1:6c:51:90:80:65:cf:67:fc:46:
         13:4a:b8:5b:ed:d6:96:ad:d2:d9:a4:5e:9a:fb:06:2c:e8:fb:
         97:99:1a:2a:5b:a1:22:20:55:ac:62:86:45:a9:cb:31:8a:c0:
         86:20:67:cd:52:82:de:00:4f:ef:8b:74:ba:a9:00:28:9e:e7:
         79:13:e8:f8:ea:7c:86:e5:92:51:79:c9:23:0a:a8:35:85:36:
         54:49:2b:28:f5:ec:21:e2:0d:9d:2a:49:e1:93:3c:25:83:e0:
         e1:06:5b:8d:1b:6f:20:60:db:a9:1e:3c:92:86:40:00:80:af:
         b8:09:ff:dd:f6:86:10:42:8d:ab:0a:36:60:21:e1:a4:fc:da:
         dd:32:9b:c8:83:ad:60:02:04:39:5a:e7:13:69:65:ed:b1:b6:
         f5:60:d1:c6:94:37:cb:3a:f6:27:b0:eb:08:ce:c0:1b:e0:98:
         13:e8:b0:8e:2f:76:52:fb:2e:a2:ed:b8:62:81:60:f1:c7:18:
         91:3e:91:f2:29:8d:90:6d:8f:df:8b:ab:dc:9b:20:58:18:f8:
         d6:26:c6:90:69:ba:d0:4e:cd:29:b9:44:88:f5:24:f0:d3:e8:
         f9:34:90:9b:6a:f0:dd:8d:1f:b2:e9:70:9d:b4:4c:1e:17:bd:
         7c:39:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:59:29 2025 by rpki-client