Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File:                     8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier:          yfQGmCo5dIer0O0Xy/c+hb6Kpgl2mXrAXT3zOXROwTg=
Subject key identifier:   80:EF:D1:E6:9C:3B:1D:BC:B4:CB:EC:6B:DD:27:8A:59:72:67:8C:75
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       09C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number:          09BD
Signing time:             Fri 06 Jun 2025 20:02:13 +0000
Manifest this update:     Fri 06 Jun 2025 20:02:12 +0000
Manifest next update:     Fri 13 Jun 2025 20:02:12 +0000
Files and hashes:         1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: DkF6stirXdlLXvAhiWVK0fT49LWNpbyJIcICZ3fWIuE=)
                          2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
                          rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 20:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499 (0x9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Jun  6 20:02:12 2025 GMT
            Not After : Jun 13 20:02:12 2025 GMT
        Subject: CN=68434945-c331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:23:7c:f3:85:1f:50:c4:6e:87:b5:12:76:d5:
                    3d:9c:ac:39:2e:4f:01:5f:eb:af:2e:9e:22:57:be:
                    3d:2f:28:a1:39:45:3b:02:7d:9c:79:8b:58:72:08:
                    29:a8:df:8f:9d:35:9c:d5:e9:7c:c1:c3:0d:4d:90:
                    35:36:c1:a2:12:84:36:86:18:3f:49:2e:c8:ec:8e:
                    b6:58:7b:1d:9e:80:1b:64:b8:c2:2b:d2:89:6e:77:
                    7e:b1:6a:19:d7:bf:b8:36:0d:6f:98:e9:da:7d:a6:
                    a9:9d:13:e1:90:d4:8a:b2:88:39:fe:76:bf:43:ca:
                    12:69:58:69:68:00:8e:4a:36:aa:9a:b3:f3:6b:d5:
                    2f:68:b7:98:fe:ce:de:5f:58:74:1b:80:b0:77:ec:
                    e6:a4:bf:39:d3:31:7a:fe:a6:55:4c:07:fb:55:f5:
                    8b:ab:e0:7b:1a:f1:ac:7d:72:c1:5e:34:e9:0f:5f:
                    c5:22:18:dc:5e:7a:4c:e0:18:0c:fe:3a:fd:e5:c7:
                    85:52:dd:b3:3f:47:54:ba:74:b8:f9:30:a5:f0:b3:
                    4a:0d:4d:cf:07:c3:6d:3b:fe:3b:7c:a7:7e:24:42:
                    68:51:ad:7f:68:ed:c8:e2:b2:e2:bd:0b:a9:5b:fe:
                    78:9d:a9:3d:87:fb:37:0c:f6:ec:b6:2f:d1:05:c8:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:D1:E6:9C:3B:1D:BC:B4:CB:EC:6B:DD:27:8A:59:72:67:8C:75
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a9:4d:23:f9:70:ad:ee:e0:da:e8:f5:84:16:c6:e4:74:af:
         40:58:fe:bb:4e:2d:b4:2c:96:ee:5e:c9:2a:44:d9:10:48:34:
         f6:4a:a2:1f:32:db:64:82:15:be:29:2e:67:ff:7a:bb:a1:5e:
         28:9d:61:67:e7:50:1f:dd:5a:da:05:fe:7b:64:7c:b8:98:9a:
         62:a0:b5:22:39:cf:8e:f5:70:5f:1e:ce:50:25:88:f9:91:2c:
         c2:d4:6e:cf:5e:df:34:3f:35:8d:7e:55:e8:99:78:f6:c7:cf:
         8e:55:b2:a1:e0:e4:ed:3e:56:9c:af:e7:8c:37:ba:19:6e:db:
         87:1e:83:d6:0a:b6:e9:95:d9:8e:44:a7:fa:8e:bd:a6:c7:f3:
         68:39:7b:39:47:81:38:06:77:0a:63:7c:5a:44:10:45:f1:f7:
         18:f0:b8:2c:b8:f3:0f:15:ba:9b:62:e3:74:10:c9:67:2e:4c:
         1c:e1:aa:b1:ce:b1:82:90:c0:cd:e9:44:c3:15:76:0b:e0:02:
         04:4b:48:79:2e:9f:ac:fc:50:18:41:54:d5:b1:4a:69:02:e2:
         21:b5:6a:18:30:d9:5d:ef:97:ca:14:32:b3:e0:0d:73:6b:bc:
         0d:9e:07:5f:05:1b:27:c9:c6:f1:17:21:61:62:76:c9:87:b8:
         fd:37:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:00:29 2025 by rpki-client