Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          EZ+sIiHw3KfJZ8tlcbSGHpUD8Mn3pKNPqu5Y0Kc7h8k=
Subject key identifier:   C4:87:F8:13:F3:E0:95:CB:60:93:64:8D:76:91:B4:89:AB:62:9E:31
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          01C0
Signing time:             Fri 13 Jun 2025 02:09:00 +0000
Manifest this update:     Fri 13 Jun 2025 02:08:59 +0000
Manifest next update:     Fri 20 Jun 2025 02:08:59 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: BaH30NS9y1UvLJ0bhCp1gLYhR9leLq0KrToALuBCiAE=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Jun 13 02:08:59 2025 GMT
            Not After : Jun 20 02:08:59 2025 GMT
        Subject: CN=684b883c-fa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:53:ee:c8:43:2a:24:0e:58:8b:29:8a:44:22:
                    03:b1:7b:5d:d2:99:26:53:32:cd:b6:d0:2e:f1:ed:
                    bc:78:ec:2c:3a:41:fd:a9:66:9b:63:f3:79:0f:61:
                    e7:67:14:87:24:eb:87:92:13:42:ff:e2:0d:84:8f:
                    52:de:84:70:d2:a1:94:3a:ee:58:f2:61:13:da:b4:
                    47:12:a3:1f:41:ad:0c:03:70:b1:51:ca:fe:8f:64:
                    44:71:a2:e3:65:a8:a5:9a:1f:e4:c1:0a:cb:76:b4:
                    2c:22:df:d1:c5:26:8d:f4:f4:7d:47:8e:70:88:e2:
                    3d:dd:53:fc:86:20:6d:09:53:d1:7e:b8:7b:39:fa:
                    cb:00:b3:11:ee:c6:5f:6e:2e:dc:87:4c:9e:af:ab:
                    a7:7f:94:4c:a9:ec:92:e0:c4:f9:b8:b4:23:4f:d6:
                    af:e3:63:25:66:1d:45:8c:3a:d4:d6:bf:88:a0:a7:
                    d9:d9:ca:d0:09:9a:8e:98:45:c4:3e:d0:82:3d:e6:
                    86:2c:50:a4:d6:cb:95:64:dd:e5:ae:40:92:0a:56:
                    c0:82:eb:30:65:17:3b:7e:5c:72:75:77:80:07:c5:
                    b3:2f:c7:c5:c9:16:b3:3f:a9:ca:a8:cd:21:d6:39:
                    40:14:bf:38:5e:47:63:dc:d4:88:c5:c6:c8:a1:9d:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:F8:13:F3:E0:95:CB:60:93:64:8D:76:91:B4:89:AB:62:9E:31
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:60:ea:98:c4:3c:5b:a0:42:80:b4:21:20:0a:d9:b4:cb:
         b9:f3:59:90:30:7e:ea:a6:62:37:37:e3:90:85:61:c6:3c:e4:
         e4:71:6d:5e:92:27:ed:66:ab:7a:7d:73:af:d3:fd:71:84:a4:
         65:3f:e8:f2:97:56:18:be:f9:2f:d2:5b:26:5a:eb:e2:76:34:
         16:58:d1:c6:fc:47:6a:a6:7b:50:01:78:49:1c:69:ec:3d:1e:
         3d:d4:22:7e:7b:68:af:c7:56:a7:0b:7f:ae:41:c2:9d:36:16:
         37:24:9a:26:2d:a1:84:58:33:87:52:55:a9:4b:cf:76:6f:45:
         6f:77:c6:f3:cb:87:7c:92:78:0e:91:f0:e1:7a:9f:56:e3:9a:
         93:3b:fe:81:9a:65:8f:58:a0:fa:c0:97:79:c0:40:08:1e:e3:
         4b:17:22:ee:fd:cc:c1:d7:61:37:3f:aa:ee:68:37:c6:e9:08:
         33:e2:28:29:9c:69:e4:c2:ca:a9:bf:30:dd:8f:32:47:e1:fa:
         4e:2c:39:16:46:44:9b:2b:c0:b2:3e:bf:62:66:12:68:91:62:
         84:2b:b2:63:a9:83:de:e6:ff:38:29:f7:dd:ec:b4:a2:a6:17:
         7a:94:f2:fc:f1:fb:35:31:4c:d1:c1:f9:66:00:61:fe:44:2b:
         b0:50:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:49:57 2025 by rpki-client