Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File:                     _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier:          Jq2Mi6MhDC7LaTa6i5QGr+Ubi0tzYTGikXUuW7H5hBk=
Subject key identifier:   05:94:83:E0:4C:C0:62:26:14:C9:81:91:E7:7B:2E:4C:25:DF:48:47
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number:          04FA
Signing time:             Thu 12 Jun 2025 23:16:33 +0000
Manifest this update:     Thu 12 Jun 2025 23:16:33 +0000
Manifest next update:     Thu 19 Jun 2025 23:16:33 +0000
Files and hashes:         1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: gPofRMfrd1daZxIem6jtX38KAfhSPQzp28fJ56PnHlM=)
                          2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jun 12 23:16:33 2025 GMT
            Not After : Jun 19 23:16:33 2025 GMT
        Subject: CN=684b5fd1-6366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:df:f2:f9:17:14:ff:a1:e7:c6:fc:24:53:
                    57:71:df:01:8b:36:f4:8a:e7:7f:e7:40:fe:ec:f8:
                    62:07:7e:f1:33:72:f7:20:c5:5e:99:78:60:87:64:
                    0d:8d:46:cb:97:e4:58:06:47:7a:02:42:d6:68:2c:
                    3f:89:d7:d1:b2:82:d8:3d:0e:0e:15:f3:9a:7f:b2:
                    d4:df:7b:c5:53:7f:88:cb:31:32:1c:8d:b6:50:ec:
                    1d:de:0a:27:08:12:1a:1a:21:48:e1:d0:2f:35:f2:
                    65:68:cf:ce:c6:62:45:2a:ee:2a:f8:68:3c:2b:7f:
                    21:04:62:4c:b0:52:45:fc:e5:e1:9e:49:a0:77:90:
                    4c:65:34:ad:76:93:d5:c6:93:f5:1b:bc:1b:67:1e:
                    7d:47:8a:ea:3a:bf:d6:0f:33:62:a2:67:a3:d5:ee:
                    c0:76:32:37:bc:e7:d1:94:4c:fc:cf:1f:51:12:b0:
                    ea:bb:f8:f0:92:3f:de:c7:e5:ff:21:37:68:25:83:
                    b5:d3:11:f4:d3:9f:6e:81:0f:85:dc:15:a9:0c:cc:
                    90:04:7e:ee:d1:29:a8:06:a6:c6:a8:0a:41:72:a4:
                    86:87:4d:c8:d8:97:3f:72:c9:ca:95:e7:a1:0d:c3:
                    ab:9f:86:f8:ca:f4:aa:cc:f8:7b:3d:d9:5b:02:36:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:83:E0:4C:C0:62:26:14:C9:81:91:E7:7B:2E:4C:25:DF:48:47
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:bd:10:8e:78:fd:90:46:51:35:55:9a:44:6e:c8:dd:83:
         b9:d6:d0:bd:56:ca:52:cf:c9:37:d9:4f:37:c8:c0:a1:cc:89:
         83:a9:70:32:05:39:a9:8f:65:cc:a3:54:5a:83:15:f3:63:87:
         f0:a5:17:4c:e3:41:97:e4:e5:0b:c2:56:87:88:4d:78:e0:59:
         8a:18:2b:7b:fc:80:1a:14:4f:67:fa:1f:ad:b3:5b:6b:75:7d:
         2b:11:d0:6d:10:36:26:8f:d8:52:67:ef:af:55:81:45:58:58:
         20:6c:2a:ab:7a:f4:7e:e6:61:cd:18:a1:b5:bd:e7:3b:4f:e0:
         2e:9b:47:10:1b:e3:f7:4a:c7:1d:39:99:1b:66:10:bb:8e:94:
         96:30:3b:43:79:c4:3d:71:50:f6:70:89:cf:54:da:50:52:ac:
         e8:c3:ff:ee:ff:57:f9:b0:ee:65:dc:c3:f3:d0:84:1c:a2:57:
         97:4d:2c:c9:a3:b6:1a:d5:fa:6b:96:b4:b7:7a:1a:bc:b7:a9:
         6d:55:82:bb:ae:30:e4:d1:91:e1:fd:e0:39:bf:11:4f:f2:bb:
         ba:37:58:5e:19:5a:de:45:a7:6d:b6:0f:67:6d:b6:b6:18:32:
         a6:70:68:69:98:ac:05:6b:a2:f9:fc:1a:d2:aa:1c:42:b5:a1:
         3b:45:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:40:21 2025 by rpki-client