Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          pQfxZ3YUYwuNSZAy1+pR21ZJ2FkwRGbsFn5KvTcsV34=
Subject key identifier:   50:4C:D5:B8:4E:99:A6:3C:CE:22:A8:88:78:E5:F3:8B:6E:8B:A7:AE
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0AB5
Signing time:             Wed 04 Jun 2025 19:28:05 +0000
Manifest this update:     Wed 04 Jun 2025 19:28:03 +0000
Manifest next update:     Wed 11 Jun 2025 19:28:03 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: IZr0AT4CML1T3l2gZI17u251kQjlJWZf4/oKiN0/KRI=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 3+4YIvZgcCdVrPM39eq8U0b37BVdz2kxEm0TdnodkbE=)
                          3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: z2Amob3XsDPHZrT5Wf5AplgGB0ayushklt2PBfRRMGk=)
                          4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b8sKlJgxC+LgU3RKdElF+rtjQy5KxRCgzXpaFbzf9q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 19:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Jun  4 19:28:03 2025 GMT
            Not After : Jun 11 19:28:03 2025 GMT
        Subject: CN=68409e44-dcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:d8:a4:70:46:b3:39:32:49:b2:fd:f4:a7:
                    09:e5:45:a7:57:97:ea:1a:64:0b:30:eb:3f:20:66:
                    c8:d4:a9:55:3a:a5:10:61:f3:ea:05:cc:1a:3e:39:
                    4d:0f:41:bb:98:d5:b7:c8:2f:f2:32:7a:ad:42:bb:
                    c4:c9:ad:ae:ea:42:0c:90:8f:67:06:60:7d:f5:b4:
                    0e:ef:5f:a2:49:58:3b:4c:bf:0c:19:5e:42:94:7b:
                    3f:58:cf:24:9c:e5:d7:b2:38:c8:f6:0e:dd:8d:44:
                    04:db:48:ee:87:ba:fe:da:91:13:de:0a:73:29:f5:
                    29:4b:fd:ff:7f:a3:3f:61:93:3b:4b:cb:6e:db:67:
                    a9:b4:64:e5:ba:db:f6:1d:db:dd:b3:da:35:be:93:
                    a4:a4:8c:0f:47:bf:06:bf:a4:2e:87:d2:71:9e:71:
                    ff:8f:85:50:2b:77:58:8a:89:97:30:ec:85:c1:5d:
                    bb:c7:2d:e0:d9:a7:63:e4:7a:bf:b9:5f:3e:e6:cc:
                    ea:bd:e6:e0:cb:f3:a3:55:c0:15:0d:55:20:e1:1b:
                    9f:b9:22:4b:e4:25:37:54:b0:ef:17:6b:79:a7:f9:
                    75:1c:69:f5:5d:38:03:b6:ab:09:66:6b:6e:1f:53:
                    e6:80:6e:65:66:c4:9b:23:db:c3:2f:a0:95:57:73:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:D5:B8:4E:99:A6:3C:CE:22:A8:88:78:E5:F3:8B:6E:8B:A7:AE
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:7a:da:6c:d6:b4:6f:87:a8:0a:6b:94:49:3a:25:bb:11:
         7f:ef:bd:08:a4:b0:94:9f:ad:0d:2a:d0:88:db:83:c4:47:36:
         09:47:f4:a8:7d:d3:db:d5:67:b0:35:13:13:d5:ca:0f:0e:98:
         ad:e3:17:99:be:17:3e:f4:e9:7d:9b:28:81:47:75:88:86:28:
         87:3e:24:6c:65:7c:77:c8:84:bd:17:81:41:79:0b:81:63:0f:
         da:8e:f2:93:97:9b:7c:89:0b:cd:45:eb:80:48:84:d8:67:36:
         5f:18:bb:e3:7b:f6:42:e8:49:92:e4:63:07:f3:75:9b:c6:f1:
         c4:a3:f4:30:7d:64:43:4b:8c:b0:97:92:b5:42:1f:2d:2c:aa:
         6a:9c:d0:c3:04:1c:48:cd:58:a8:be:8e:74:5a:7f:bc:61:4e:
         bb:d0:36:52:c5:cb:1c:61:a2:d7:db:e4:93:f8:23:05:69:9e:
         38:ab:58:77:43:32:84:5e:a7:f9:bf:6b:c7:9f:d4:34:ec:ec:
         93:1b:36:a8:82:f9:ab:fe:44:e3:d4:80:bb:9b:df:be:99:05:
         27:e7:8b:8c:03:5d:56:f2:41:dd:0b:cf:c6:34:87:7e:b2:96:
         6e:43:eb:23:7e:73:f0:25:1e:d0:a4:ac:d5:7c:f1:5d:ed:27:
         c0:f6:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:19 2025 by rpki-client