Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          nUb71KB9Rcz/gLgBLmnKvujMRLvQaFBYR0aVHanA+/c=
Subject key identifier:   FA:E0:B6:FA:0C:06:21:62:48:24:74:AF:9A:17:55:C1:07:B6:A0:6E
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0BE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          147E
Signing time:             Mon 30 Jun 2025 18:57:16 +0000
Manifest this update:     Mon 30 Jun 2025 18:57:15 +0000
Manifest next update:     Mon 07 Jul 2025 18:57:15 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: 5fHed0J8m8udTC+/YJWR60KgM2unF5mGdVsetv4X+Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 18:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3048 (0xbe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Jun 30 18:57:15 2025 GMT
            Not After : Jul  7 18:57:15 2025 GMT
        Subject: CN=6862de0b-2707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c8:2e:99:39:7a:ed:17:eb:e9:e5:53:d8:81:
                    c0:76:ef:67:db:4d:4f:1e:93:7b:62:9c:c0:71:c8:
                    fe:f0:39:36:8f:42:07:f7:f6:09:df:fb:cd:f9:44:
                    cd:4c:f0:70:95:2b:45:79:1b:d0:7d:7f:dd:6e:43:
                    85:c8:7c:df:e6:d4:62:be:54:dc:b6:53:19:a3:cf:
                    22:56:76:f0:47:fd:da:04:02:62:1c:2f:f2:29:bc:
                    7c:38:ed:6b:b2:5f:59:e2:34:30:da:4c:27:7f:d1:
                    4c:90:ea:b6:8e:7c:56:3e:ec:15:1e:09:2a:2a:11:
                    36:f2:c0:13:a0:a6:8a:30:d0:7e:f7:dd:8d:9e:d7:
                    98:f7:c5:1c:13:4b:a0:d1:52:15:42:f3:d6:26:ba:
                    42:37:a0:5d:33:4f:fc:eb:d7:22:a0:36:1f:9a:ce:
                    ea:d6:03:f9:6b:d5:fd:4f:73:82:c1:fb:87:2e:e1:
                    82:d8:ff:62:81:9a:75:d3:18:ff:09:fa:66:32:0d:
                    bd:e6:a8:cf:ee:55:44:d6:49:c1:da:16:c4:8c:91:
                    47:2d:87:4a:50:ce:74:7f:46:e9:a1:ab:38:fb:9b:
                    6b:7e:12:07:fa:ad:95:84:05:7c:94:c1:2b:b0:02:
                    c7:0c:0c:72:28:a3:74:4e:30:d8:15:44:eb:d2:e7:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E0:B6:FA:0C:06:21:62:48:24:74:AF:9A:17:55:C1:07:B6:A0:6E
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7c:2e:25:32:6a:66:23:4e:80:f7:f7:1e:69:c6:8a:db:3f:
         b8:dd:cb:93:02:2f:83:14:6c:30:da:2a:41:2b:90:68:f8:1d:
         8b:95:9a:31:09:19:51:59:b1:c3:2a:2c:8e:14:4a:80:d1:0f:
         42:e3:d4:e9:ef:5a:ed:d2:55:84:22:c7:ad:aa:c7:31:25:6a:
         16:7b:a5:e3:24:a0:cf:9b:1f:e1:14:a8:8a:49:6c:95:37:59:
         51:ca:45:09:be:75:71:36:66:2b:a2:f0:e0:d1:9a:f6:bf:a1:
         d2:59:8a:de:3d:2d:5a:8e:f0:aa:69:90:c4:a3:c8:e4:6e:22:
         0f:81:f9:99:8c:26:6d:78:7c:7e:f5:a4:fb:c2:64:3b:ce:9d:
         73:42:cf:ba:2b:98:ac:e6:b4:60:a7:dc:4e:d1:46:20:7a:ef:
         5c:c1:b0:a7:aa:b5:f5:8a:82:13:9d:d9:be:ee:a6:11:d9:46:
         af:58:43:cd:27:4a:82:85:8b:11:cb:a8:7f:48:46:cf:27:4d:
         87:da:1d:19:cd:e4:74:c3:82:bb:22:e5:96:5c:b5:39:c0:32:
         23:ec:cb:c5:57:cf:88:d7:1a:47:0a:40:50:54:66:00:39:09:
         62:e2:d6:38:9a:d7:f0:6e:4e:56:54:7d:9e:e7:1d:27:a3:8d:
         44:32:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:29:01 2025 by rpki-client