Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File:                     _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier:          TRrvNc/xWzjbA7fVH4J2DutQ0njL009u6xA7w1kpufQ=
Subject key identifier:   34:38:4D:24:0D:5B:07:32:0A:97:99:4A:25:04:76:80:E4:1D:6E:A2
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number:          04F8
Signing time:             Sun 08 Jun 2025 23:17:42 +0000
Manifest this update:     Sun 08 Jun 2025 23:17:41 +0000
Manifest next update:     Sun 15 Jun 2025 23:17:41 +0000
Files and hashes:         1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: vlEhK7JiuRJqh+xPDs3xJupM007v/b3oLHXMndqWfWk=)
                          2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 23:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Jun  8 23:17:41 2025 GMT
            Not After : Jun 15 23:17:41 2025 GMT
        Subject: CN=68461a15-cca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:6a:91:4c:20:d4:29:d1:df:e2:b1:90:9f:
                    f7:c3:99:54:ed:13:dd:a2:01:9d:cf:f9:57:20:6d:
                    00:fa:45:d9:88:66:e8:92:34:5c:cf:c6:4a:de:ed:
                    d2:44:29:b9:ec:ac:9b:3a:24:55:04:71:81:20:57:
                    ce:07:bb:51:df:54:5f:e0:81:e5:17:90:67:98:df:
                    51:3d:5c:46:a0:c4:bb:e8:cc:f7:73:e2:d6:ee:48:
                    f9:9b:de:ec:ee:26:bb:52:92:60:c4:62:c6:38:c2:
                    4c:c3:ab:64:31:f5:29:22:44:21:1c:f0:fc:b5:c2:
                    f2:65:be:e2:8d:06:2f:ca:f9:65:5f:cf:94:ae:8f:
                    17:5b:d5:c6:00:43:73:4b:1c:c8:ad:c7:fe:0b:8f:
                    82:fc:b9:56:57:26:4c:7e:a3:0a:af:41:72:6d:13:
                    1c:f3:6d:15:02:c2:fc:6f:db:3a:6e:4d:63:2f:e9:
                    4c:aa:3d:a2:63:76:6d:c8:38:0d:ae:25:34:81:bd:
                    b6:58:e2:e0:a3:f1:7c:b3:a6:19:43:e7:76:c6:2e:
                    10:a4:23:88:22:12:2e:05:1f:f8:3b:be:05:db:ad:
                    9b:f7:26:8f:e1:ef:9b:0f:ff:0d:a5:5b:b4:16:64:
                    ee:91:dc:41:2f:7a:5b:3f:fc:36:31:46:61:d2:d8:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:38:4D:24:0D:5B:07:32:0A:97:99:4A:25:04:76:80:E4:1D:6E:A2
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:83:af:d0:96:1c:14:18:2f:90:ce:c0:0b:5f:2e:dc:53:
         8d:1f:58:99:06:74:2d:9a:35:54:1b:87:51:cc:f9:5f:b5:b3:
         7a:d1:a5:95:6c:24:ab:c9:3a:59:30:1a:68:20:83:70:59:51:
         53:fc:c6:11:4f:9d:9b:dd:f9:90:e9:0c:01:81:f4:d7:2e:05:
         36:06:05:69:67:23:9f:37:25:72:fb:02:61:2f:b3:e9:8b:d8:
         64:61:f5:d1:76:7b:48:63:d8:e3:ad:90:77:16:90:b6:90:d4:
         54:06:0f:bb:46:3e:a2:bf:18:cc:f6:1f:3c:49:91:79:ac:b7:
         78:02:8d:68:a3:0f:b7:b3:1e:c0:2b:10:82:01:0d:d3:0d:a9:
         f0:76:a0:de:1c:ae:57:34:d2:98:f1:9d:0a:0a:74:bc:99:0c:
         ed:73:c3:bb:0b:38:e0:4b:8b:3e:4f:d5:e6:a9:ba:3c:a3:c2:
         a4:2b:b2:3d:da:95:24:b8:42:9a:f5:33:49:1a:e6:b3:60:59:
         a7:c5:9d:79:d0:45:0d:03:86:db:c8:ae:47:ca:8a:ed:5e:53:
         8c:84:c5:71:1b:3f:85:55:89:3e:b2:52:fe:89:17:57:74:13:
         2e:a5:67:54:5f:b0:c8:71:ce:7c:bf:1d:4f:3c:3a:b2:bd:5d:
         70:d8:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:07:10 2025 by rpki-client