Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File:                     4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier:          +oKC8iiOn1r0fTj59DdlBtBa7B6Uh+ECpbpYy1Ze7MI=
Subject key identifier:   79:FC:0A:12:E0:E5:30:0D:AE:9D:2E:61:B4:E4:27:9D:E3:15:CF:A7
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer:       /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number:          017E
Signing time:             Sat 07 Jun 2025 03:15:27 +0000
Manifest this update:     Sat 07 Jun 2025 03:15:27 +0000
Manifest next update:     Sat 14 Jun 2025 03:15:27 +0000
Files and hashes:         1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: vDuIi1RUNdgHrg1+oC/Fv1HUxapHk4cglJnkuIPgKTU=)
                          2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
                          rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 03:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
        Validity
            Not Before: Jun  7 03:15:27 2025 GMT
            Not After : Jun 14 03:15:27 2025 GMT
        Subject: CN=6843aecf-43b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:ea:2c:1f:a1:f4:80:21:66:db:38:f6:60:
                    98:7c:64:0d:a5:f4:6a:0e:3a:b9:13:08:92:15:d2:
                    d4:e4:e7:51:b2:ce:fd:e7:8e:96:6d:11:aa:0b:eb:
                    fa:d9:f2:9e:05:eb:84:94:ef:92:17:cd:32:93:b3:
                    cb:ae:9e:48:9e:10:fb:15:3e:2d:31:db:ff:74:43:
                    b4:5d:5c:ca:6a:b5:97:c8:5e:cd:a3:1a:b4:dc:0e:
                    d1:cf:bc:e8:84:9d:44:ea:93:32:ad:c5:b3:24:ea:
                    b1:13:df:4d:9c:f9:7b:c8:13:2a:51:16:b6:de:4a:
                    ea:e1:9e:6f:b9:db:a1:06:4a:b7:8c:80:6f:b4:5c:
                    bd:f3:39:36:fd:1a:65:1b:3e:8a:eb:4b:cb:76:62:
                    34:80:8a:aa:0f:c4:ab:5b:41:33:51:60:09:18:f0:
                    33:2b:cb:9d:05:92:7e:4e:c7:27:ee:55:19:b9:af:
                    39:98:0b:73:89:a6:77:1e:fa:dd:0d:df:05:4f:67:
                    d3:96:d5:b3:02:08:b5:be:e4:e4:fb:cf:e2:7a:64:
                    cf:6a:f2:31:65:70:a5:bc:de:9a:e1:88:11:c5:27:
                    58:ff:49:62:e5:da:2a:da:8b:be:bb:71:82:b3:80:
                    02:ad:ad:e1:e9:7d:e9:4d:66:ca:8a:7d:78:1e:60:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:0A:12:E0:E5:30:0D:AE:9D:2E:61:B4:E4:27:9D:E3:15:CF:A7
            X509v3 Authority Key Identifier:
                keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:22:4f:a8:da:24:d1:48:e7:da:0f:30:63:65:89:c6:af:38:
         b7:91:ef:6d:a7:b4:06:ed:0b:01:48:9f:af:e2:76:2a:02:34:
         8e:78:77:ef:4b:db:f3:ba:8a:72:52:78:a5:92:af:46:7c:34:
         18:d2:21:c6:c0:d7:66:c5:25:83:81:34:66:76:bb:e5:31:e6:
         46:cd:a9:f9:50:9d:77:2e:66:50:66:89:e2:df:fd:9a:ba:5c:
         b3:83:9f:c2:01:32:3c:c2:cd:d6:3d:45:c7:43:b3:7c:a6:16:
         3a:ea:a1:41:43:07:82:20:e5:72:93:d3:b8:25:97:39:83:29:
         bf:36:07:84:e4:f8:0a:b4:ff:a7:4e:e1:c2:98:b3:c4:87:61:
         97:a6:4a:5a:c5:4c:13:5e:76:ce:46:92:3f:7e:1d:04:65:7d:
         5a:e1:c3:88:61:cd:ea:61:9d:58:ed:6c:c0:f6:1d:55:33:ee:
         1f:84:5d:a1:c5:12:2c:34:50:7e:d4:da:9f:52:01:7c:8b:31:
         a3:5b:ca:5c:a6:10:8d:30:dd:ed:67:45:32:77:28:78:5a:cc:
         2e:25:a1:74:b1:5e:28:7b:be:52:8b:7c:6e:cd:bb:0e:e7:18:
         c4:3c:99:c7:d8:de:f0:74:6f:2a:4f:14:a2:39:36:5c:35:86:
         9a:90:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:32:18 2025 by rpki-client