Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File:                     0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier:          qOk5QmZVaVWz/0qmXvyvqXQEclxtqDin1uTTxuCc5yg=
Subject key identifier:   68:88:8B:EE:61:1C:04:2D:96:39:5B:D6:71:80:16:BD:CA:B6:D7:5F
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer:       /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial:       06CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number:          06C6
Signing time:             Fri 30 May 2025 22:17:49 +0000
Manifest this update:     Fri 30 May 2025 22:17:48 +0000
Manifest next update:     Fri 06 Jun 2025 22:17:48 +0000
Files and hashes:         1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: 1xsVp+IwwWSAumbRjXa+aAAdDd9eqIdr9m6lZSisAOA=)
                          2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: 8i4ad6LrRcxPKcbznzNvi2BM6i3jnmiOquYCkcN8Y1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
                          rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
        Validity
            Not Before: May 30 22:17:48 2025 GMT
            Not After : Jun  6 22:17:48 2025 GMT
        Subject: CN=683a2e8d-9dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:b7:ad:46:1e:56:4c:10:c1:8c:b2:cb:42:
                    e8:19:6d:dd:25:12:65:35:37:30:a9:ae:c7:e1:6f:
                    dd:7a:1b:72:ad:8d:9e:83:2d:21:21:72:35:49:c0:
                    5b:7a:1b:5e:de:38:84:fb:88:2f:18:3b:59:a8:c4:
                    d1:e8:94:fc:05:04:bc:cc:df:7b:5a:5d:02:dd:98:
                    34:24:95:3a:21:04:7c:2d:e5:9c:93:5a:7b:9c:b1:
                    d7:ea:d4:ee:35:78:1b:63:ea:22:79:f2:fc:4b:cb:
                    88:55:65:3e:c6:6b:79:27:f9:6e:cb:1e:1c:43:1e:
                    6f:37:17:2f:c5:df:52:10:3e:39:f5:57:b9:8c:a2:
                    f4:de:b8:72:20:71:aa:9c:5f:4a:aa:1f:4d:08:d7:
                    26:96:76:cc:a2:c5:af:ac:43:07:fa:95:9f:53:d9:
                    be:6a:7a:ef:f2:1d:92:10:a9:e8:65:49:3d:d8:cd:
                    90:de:6b:38:aa:39:6b:98:a3:ac:8f:c3:5f:8a:16:
                    ce:7f:9d:7a:59:a5:68:e5:71:19:06:36:4e:d1:18:
                    83:7f:42:95:01:fd:c8:35:40:37:60:e6:99:c9:30:
                    97:05:b4:54:d3:ef:6c:74:77:ac:6e:70:a2:eb:e7:
                    cf:ae:c0:0b:97:08:30:5f:65:48:a8:cc:91:08:4a:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:8B:EE:61:1C:04:2D:96:39:5B:D6:71:80:16:BD:CA:B6:D7:5F
            X509v3 Authority Key Identifier:
                keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:91:2a:e3:a7:78:19:c6:3f:43:fe:5c:5f:16:8c:05:21:
         fd:f6:64:9d:82:a7:33:33:9a:76:1e:82:de:bb:4c:ea:e2:c5:
         53:0b:f7:51:76:2c:1e:9a:e1:59:ad:f5:e5:32:e3:a4:e4:f8:
         51:24:fa:33:a4:11:d2:e3:a1:2a:b7:2c:fa:1d:6b:c7:d1:45:
         7e:3b:8c:47:c2:ba:d0:1c:17:d5:3e:67:47:86:df:4a:2e:d4:
         d4:45:e2:7d:7f:c5:73:5f:77:15:28:e8:1f:1f:b0:12:d7:68:
         bb:3c:07:1c:ef:1c:79:67:c9:f7:46:7d:d5:cf:49:e3:59:34:
         1a:56:0b:01:7f:44:06:38:26:15:15:bf:4d:8d:9c:22:83:10:
         ff:22:2d:45:65:1b:d5:30:a9:b4:41:41:bb:23:83:86:4b:46:
         1b:91:0c:90:1a:3c:1a:c6:32:f7:57:a8:7e:61:a2:2d:f9:61:
         ac:39:59:93:c3:29:d6:92:ad:f8:bd:ed:83:51:3b:e3:6d:e0:
         22:54:b2:c4:b1:e7:50:b2:ac:e8:bc:87:0b:40:25:30:19:09:
         85:7f:d1:a6:d4:72:66:e3:af:6e:4e:74:b7:67:59:14:ee:d1:
         c8:f7:8c:0a:20:75:89:a7:e8:47:49:85:86:21:13:1d:90:0d:
         e4:10:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:40:58 2025 by rpki-client