Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
File:                     rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json)
Hash identifier:          3cvCVj+xkimGR3dqxLgShSk9mMulKGO6I/PSSzoYg5w=
Subject key identifier:   B3:EB:04:03:0E:23:9F:7F:0C:6A:16:58:F7:3E:0A:78:E9:CD:7A:6A
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Certificate issuer:       /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial:       0C72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
Manifest number:          0C67
Signing time:             Sun 08 Jun 2025 18:09:54 +0000
Manifest this update:     Sun 08 Jun 2025 18:09:54 +0000
Manifest next update:     Sun 15 Jun 2025 18:09:54 +0000
Files and hashes:         1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: YT3+BpWPBDZznCP/xIiEIGyatXd00Eq08WU9F+jwbWc=)
                          2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: wMSrEY4jFMgUk7xS4t418ohJ7Tj1+1Jik/P+Kog8XB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
                          rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
        Validity
            Not Before: Jun  8 18:09:54 2025 GMT
            Not After : Jun 15 18:09:54 2025 GMT
        Subject: CN=6845d1f2-3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:2f:d1:27:cf:08:bd:7c:c3:4b:d4:4c:ee:
                    39:85:f4:e9:97:12:79:88:2f:f6:e2:29:65:5e:fd:
                    ae:ac:ee:94:5e:4a:ec:d7:ce:18:b1:4b:7b:cf:48:
                    0e:1b:d8:24:a3:3a:aa:87:48:e8:81:2b:be:20:ae:
                    4b:f3:57:09:e4:65:5b:f7:06:ea:c4:4f:bb:f4:bf:
                    96:56:98:44:cc:f4:ba:7b:62:11:8d:66:5f:0e:69:
                    f9:ee:8d:8f:14:38:61:c9:ac:a2:23:3c:86:90:d2:
                    42:ba:3f:39:be:35:d4:a3:89:b1:83:cd:9c:40:6c:
                    09:2f:dd:0a:65:c0:fe:44:2b:5e:3a:1f:fa:81:77:
                    88:67:6a:ec:e4:7e:8f:be:48:a5:71:47:3d:a9:74:
                    83:50:63:f0:88:de:d4:4a:e1:e8:99:35:54:59:c9:
                    6b:89:dc:35:e2:2e:72:68:b1:db:ba:f7:e3:a8:0f:
                    bf:00:32:dc:27:80:7d:a7:b2:b4:cf:36:7a:3f:56:
                    16:b0:77:aa:e4:47:6a:8a:b0:a9:58:2d:80:ab:b6:
                    bb:ed:62:32:96:66:4d:93:9b:f6:3d:ef:bd:71:1a:
                    52:55:49:68:50:52:7d:66:f7:a5:50:84:6f:fc:96:
                    4f:b9:e3:a1:5e:46:89:9d:f0:d6:7a:f6:e0:ff:28:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:04:03:0E:23:9F:7F:0C:6A:16:58:F7:3E:0A:78:E9:CD:7A:6A
            X509v3 Authority Key Identifier:
                keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:20:c5:8f:66:22:2d:34:61:f2:cc:88:a9:f3:d1:87:50:
         47:44:78:c2:a6:fd:3a:31:d1:c4:4b:dc:38:bf:89:fc:af:34:
         51:8d:9c:7a:c5:5c:41:74:32:fa:7e:eb:1a:c6:9d:9a:15:5b:
         74:91:6f:dd:29:04:0d:6b:9f:44:15:6e:d9:c3:13:f7:bf:94:
         ab:c8:21:29:97:5e:4b:50:2b:89:95:76:01:f2:34:70:a3:3d:
         c8:22:73:4c:7e:98:96:93:3e:9a:85:af:ba:22:c2:31:18:08:
         e4:27:4d:d4:e6:e3:6b:3f:e2:29:57:b0:1e:2f:04:96:61:01:
         3b:ae:2e:c0:08:d1:ef:21:be:03:9e:cc:87:82:5a:ec:ec:6f:
         3e:5c:e6:55:fb:09:3d:e7:ae:29:88:e6:ba:97:79:a5:a1:e0:
         20:9a:0d:10:01:84:ec:c5:f2:25:6a:5b:37:64:79:19:ff:10:
         20:fc:7b:dc:d4:61:23:6c:de:cd:c9:83:4c:9a:7e:b2:42:3d:
         a4:19:92:9e:35:98:36:7b:a5:a3:4f:d7:92:5d:21:c9:96:8b:
         97:2c:4b:4e:c3:ad:9c:f4:7a:e9:be:23:4a:03:b7:cc:42:a2:
         b0:03:31:1c:fb:bc:c2:68:48:bc:bf:1d:80:84:7f:67:fd:10:
         ef:93:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:04:56 2025 by rpki-client