Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
File:                     nte69j9VTx_qVw4Zuvae3tDZ5L4.mft (raw, json)
Hash identifier:          6+SZ/86ogsYRqs71b1I1BeV8VU/LSh+TqhXtUMvOrKM=
Subject key identifier:   5F:F3:54:46:19:CB:32:31:FF:05:D4:11:F9:8E:69:24:9E:A0:B0:58
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Certificate issuer:       /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial:       0B6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
Manifest number:          0B66
Signing time:             Fri 30 May 2025 19:16:44 +0000
Manifest this update:     Fri 30 May 2025 19:16:43 +0000
Manifest next update:     Fri 06 Jun 2025 19:16:43 +0000
Files and hashes:         1: nte69j9VTx_qVw4Zuvae3tDZ5L4.crl (hash: ZiiAmnTz621xa+hM2s+7F/PBz9n5aRoujtq412gVrmY=)
                          2: 97285ACA5BB111EEB6671243C4F9AE02.roa (hash: gE/MQo8ZrPv9XHP+3Vj9mSrbyCLukXMXn37+Yd+YKik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl
                          rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2926 (0xb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913383A, serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
        Validity
            Not Before: May 30 19:16:43 2025 GMT
            Not After : Jun  6 19:16:43 2025 GMT
        Subject: CN=683a041c-28af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:77:c4:4e:7b:7d:ab:3c:03:7a:24:ba:92:
                    1a:31:e1:2b:5f:3a:c5:7e:c8:31:95:fd:f3:b6:92:
                    8c:6d:b8:8d:36:cc:c6:71:1f:6a:bf:cd:ba:11:c1:
                    ea:82:47:54:8a:65:88:c6:d6:0c:83:e2:f5:9d:71:
                    bd:59:ba:55:2e:e7:6c:7f:35:b9:5f:17:d0:a4:52:
                    24:43:46:92:25:e9:ad:f3:71:ef:9c:91:6d:2c:17:
                    d5:10:6f:dc:a0:5d:4c:a7:e5:bb:fc:e7:d0:6f:fb:
                    07:3c:fe:4b:60:17:e9:96:9f:07:85:2d:a8:74:a4:
                    05:60:68:ee:5a:11:9a:97:8b:0c:7c:bc:d9:90:dd:
                    bb:c4:c8:82:87:fe:d7:64:b8:d1:b1:1e:45:1b:0b:
                    76:04:60:d5:67:d4:73:e6:99:47:94:fb:ba:98:90:
                    26:c2:5c:f9:fc:2a:e8:38:b8:e6:37:71:12:50:80:
                    72:ba:30:67:75:69:e7:d9:51:24:c2:3a:71:ab:4f:
                    a3:fd:60:a7:3a:46:8e:4e:6d:7b:24:ec:b3:de:c7:
                    01:4a:bf:8d:f9:5f:1e:1d:df:84:05:7b:46:fd:d1:
                    e6:9c:a1:ff:94:36:8b:50:e8:da:3e:2d:d5:bd:fb:
                    1f:c4:86:db:ac:a6:1d:1a:a0:33:d5:a9:b4:9d:3b:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:54:46:19:CB:32:31:FF:05:D4:11:F9:8E:69:24:9E:A0:B0:58
            X509v3 Authority Key Identifier:
                keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:48:87:4f:58:5e:5c:12:47:9b:3f:d9:a5:c6:ae:12:63:7a:
         69:0c:3e:d4:94:6a:2c:f8:53:43:49:91:be:97:78:52:69:45:
         ba:ab:ed:45:fb:16:95:e6:ed:ca:87:b2:55:a5:e6:1a:41:98:
         c4:84:2e:77:99:fc:13:70:ac:ed:38:b2:51:b5:c2:e4:c1:5f:
         b8:15:44:b1:5a:c5:15:0a:a8:62:0f:be:17:5c:56:a7:22:5c:
         d6:c9:ad:4d:5e:d3:fa:72:4a:01:78:32:bc:e8:69:75:a7:6a:
         9b:a7:2e:7c:82:3b:7f:48:ba:f6:4b:e4:da:65:0e:a6:b0:d7:
         8c:6a:7a:ee:83:f4:b0:22:52:25:43:1a:ad:bd:72:ff:06:21:
         4c:01:7b:1b:0a:b9:a1:97:ee:75:fb:12:69:dc:b0:af:15:36:
         3e:03:e3:55:36:9d:9c:c5:ec:76:00:8a:2e:9c:29:12:58:2b:
         ea:e0:2e:65:23:d9:d4:73:62:c7:6b:2b:db:8f:d4:f7:ce:87:
         ad:a3:45:29:a2:6b:c9:c7:9d:0a:35:e2:be:7b:31:38:d2:28:
         11:a4:1a:bb:43:bd:19:77:f3:51:14:bb:74:0b:3f:d8:96:0c:
         b1:d3:9f:be:cc:fe:dc:96:14:ed:4f:8f:2a:2b:1d:3a:f9:d3:
         d3:56:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:35:08 2025 by rpki-client