Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          UMOHkHmT1SeSSktuBW5prLQ9iQ9DgxZipK05/TIx5jI=
Subject key identifier:   DC:E4:57:1A:4D:95:86:AE:8C:9C:21:E0:35:8F:F0:A4:61:50:FA:46
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       02AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          029C
Signing time:             Sat 31 May 2025 01:45:53 +0000
Manifest this update:     Sat 31 May 2025 01:45:53 +0000
Manifest next update:     Sat 07 Jun 2025 01:45:53 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: eaK/crlkV1R2CqAoGUgM6GA1/boF6BFXezW5O20Z4dw=)
                          2: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=)
                          3: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=)
                          4: C0E4A11270EF11EFA9113E35C4F9AE02.roa (hash: k2jDGgw0hTyDnG6jZ/sprB9v2BeaWDhxyzOEdYPYfHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: May 31 01:45:53 2025 GMT
            Not After : Jun  7 01:45:53 2025 GMT
        Subject: CN=683a5f51-8c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:b5:d3:7c:ad:73:92:93:7f:82:4b:ff:94:
                    59:27:31:72:fb:87:f0:b2:1e:fe:3d:82:75:72:63:
                    e7:16:60:25:44:1a:af:d1:db:59:7a:c1:50:b9:9e:
                    6f:61:29:b5:7b:fc:4e:cb:39:cd:6f:ea:ac:92:16:
                    d7:3a:85:e8:78:a1:84:75:27:7b:aa:77:20:90:eb:
                    98:74:d4:eb:42:c4:b3:77:78:55:62:0b:3f:31:0e:
                    25:3d:60:72:d6:68:ce:20:ee:e2:c2:a6:04:ee:82:
                    8e:4b:b4:ce:ef:f1:1d:b6:83:ea:b5:19:1b:7c:87:
                    ff:8f:a5:d5:28:c5:7b:9f:1d:4c:1f:09:82:ea:16:
                    0c:4b:6c:97:b5:82:61:31:59:52:58:1b:e9:df:47:
                    ed:d1:cd:3b:ef:50:14:2f:8f:5c:4a:ff:52:03:45:
                    9c:42:01:8b:37:f7:8f:cb:4e:fe:60:89:15:24:66:
                    e5:0c:75:78:29:7d:1c:1b:55:4a:09:8e:52:e9:03:
                    0c:ed:a1:9e:09:2e:5b:4c:f8:82:60:08:9c:da:7a:
                    50:52:7a:6b:27:cb:89:6a:54:3a:43:a1:4c:48:6c:
                    6e:fb:54:c0:19:97:18:cc:ea:76:9b:93:50:d2:21:
                    df:d8:08:08:45:db:07:9b:ae:a0:4a:c7:56:af:fc:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:57:1A:4D:95:86:AE:8C:9C:21:E0:35:8F:F0:A4:61:50:FA:46
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:d2:fb:44:f8:fa:93:76:92:87:8d:93:35:a3:38:eb:a5:
         2b:3f:50:b7:46:fb:7b:7f:ff:bb:a4:c9:ea:77:b1:51:ac:6f:
         15:fc:2a:62:6c:35:e7:16:a7:ca:16:b5:c9:43:83:91:46:9a:
         1e:4d:1a:c0:e2:5b:fc:ea:9f:23:eb:4d:c6:3e:c7:f0:71:3d:
         a4:68:4f:28:05:19:43:40:1a:a7:2f:c6:45:60:96:78:bc:40:
         18:21:62:09:4d:35:e2:ec:c3:69:cf:40:9b:d2:02:18:57:a0:
         ea:80:69:8c:bc:ac:24:66:2a:ae:02:a2:4a:b5:a5:e3:7f:51:
         48:ad:81:87:65:00:63:41:2a:a5:50:4e:90:50:0f:2b:89:0f:
         9e:6e:d8:6f:d9:8e:03:5c:a8:69:7a:8c:a8:73:13:ae:83:fc:
         2e:f9:71:95:0e:78:25:00:61:c2:57:6a:f5:31:27:be:29:13:
         95:33:31:6d:80:8c:c5:23:e2:98:fb:6c:42:05:b7:7e:61:e6:
         8c:d5:05:a5:f6:6e:7a:0e:29:5d:0a:61:9c:ae:9c:6d:f5:43:
         e5:eb:5c:9d:89:7e:0d:37:dd:c3:22:db:55:72:ed:42:b8:79:
         bc:68:03:d0:8e:d3:b4:e3:3d:e7:90:4b:80:53:e2:b7:07:74:
         c1:be:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:32:18 2025 by rpki-client