Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File:                     f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier:          2Io5P9VjmS4BdVSqpdNq60ikNM8wvFwY2NWpQQH3+sA=
Subject key identifier:   A2:D3:C9:0F:93:1B:3B:83:A0:1E:D9:1A:F1:E4:B2:4F:33:3E:11:1A
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer:       /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial:       05C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number:          05B7
Signing time:             Mon 02 Jun 2025 23:23:53 +0000
Manifest this update:     Mon 02 Jun 2025 23:23:53 +0000
Manifest next update:     Mon 09 Jun 2025 23:23:53 +0000
Files and hashes:         1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: XCUv6iqW4K1nTGJXL6k8G+02mLTFFGwBdtVrWbenrnc=)
                          2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: YFp3J2bTm7IKBT6KELum1J+LO46Vc2l/xmTiNrhkS6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
        Validity
            Not Before: Jun  2 23:23:53 2025 GMT
            Not After : Jun  9 23:23:53 2025 GMT
        Subject: CN=683e3289-9083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:7f:a8:e4:8c:07:9b:09:4d:7f:ff:bc:36:
                    8e:f8:27:01:f2:d8:59:da:c9:64:2c:9d:21:bc:65:
                    a6:e3:0b:50:63:0a:a2:9c:d7:ac:fa:28:18:08:34:
                    a4:63:48:af:fc:61:d0:64:2f:e4:c6:87:2e:52:9f:
                    38:cd:49:b4:3b:8e:59:66:23:38:a5:46:7e:7c:97:
                    fb:8b:9e:39:39:04:81:7e:83:83:5b:75:db:89:ec:
                    0e:50:40:7f:41:df:22:26:8c:b9:99:75:5f:6c:64:
                    96:0d:b2:2c:a5:1e:0b:68:b3:3a:c4:45:c2:f9:9d:
                    e9:a9:ed:3e:12:d6:cc:b3:8f:5a:37:ee:67:92:53:
                    b7:5c:11:b1:72:20:22:60:12:e4:78:d0:8a:3d:81:
                    67:e6:8d:95:c0:01:d1:32:c6:d0:c1:2e:79:27:bd:
                    a7:f4:14:bd:93:84:15:bd:96:24:e4:cb:8d:e4:34:
                    9f:0b:94:0a:5f:92:cd:c0:ab:f1:58:8a:7f:9d:6e:
                    2f:6e:d3:c1:2f:6a:e5:ba:34:b0:d5:23:3f:94:c2:
                    04:15:f4:ef:aa:05:b6:6b:e2:c3:67:d3:4e:8b:a1:
                    05:4c:a8:5c:ab:28:97:fe:6f:c5:be:75:70:b2:f9:
                    ab:e8:81:05:0f:f6:93:4f:72:4b:98:1a:5d:17:b5:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:C9:0F:93:1B:3B:83:A0:1E:D9:1A:F1:E4:B2:4F:33:3E:11:1A
            X509v3 Authority Key Identifier:
                keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:2e:c4:3b:f7:b7:9e:bc:2e:ff:4b:2f:35:64:50:55:36:
         6d:c3:b3:93:36:00:ea:70:2e:69:97:2e:fa:1e:da:72:24:d7:
         2d:55:86:22:99:bf:8a:ab:b3:cb:af:5e:ed:93:b1:cc:19:92:
         21:2c:f3:5c:fa:95:18:a7:fe:fe:53:63:15:55:24:36:8d:34:
         5a:ab:5a:a7:f6:fa:f0:4d:c8:d1:a5:26:24:22:a2:da:0f:aa:
         7b:97:c5:b6:d2:4a:9e:a2:86:72:b7:28:64:55:f4:dc:de:e5:
         34:a0:ab:f3:32:d9:b1:c7:02:4d:c5:bf:ec:03:84:be:da:8f:
         6d:c5:c7:aa:92:4d:b6:5e:f2:3c:f2:1c:3a:f7:d4:2e:af:14:
         e4:76:c1:ef:00:c8:b4:fe:02:cf:4c:5c:5f:e8:6f:72:7a:2f:
         9e:1a:b6:27:42:c2:b1:b4:1e:28:4b:ee:d8:21:e2:3c:5a:63:
         66:b2:67:69:27:33:49:19:e4:7a:a0:8c:7b:2a:a0:b7:52:1a:
         eb:c7:b7:0d:d6:d1:f6:00:36:65:ba:77:fe:de:9c:42:7c:ee:
         c2:3c:6c:e7:0f:a8:ac:08:2a:4f:ce:bd:f3:6e:b1:2c:97:9d:
         0f:35:17:b3:08:ee:d6:71:26:53:d2:94:9c:96:a9:c8:e3:d2:
         09:9e:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 14:18:02 2025 by rpki-client