Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          naQMgyfZYr8YwuGBybBJ2fVfw3BCSWOJ5fM1yMRaWnQ=
Subject key identifier:   F8:83:D6:D3:74:3F:05:BF:7D:96:46:50:40:EC:DB:C0:0C:31:FE:6D
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       1006
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          0FD4
Signing time:             Fri 06 Jun 2025 17:33:55 +0000
Manifest this update:     Fri 06 Jun 2025 17:33:55 +0000
Manifest next update:     Fri 13 Jun 2025 17:33:55 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: cJGFME0MYiqzOJcCtDN/2maWl49tbxGbkNdcmozSUdE=)
                          2: AA2BE0CC359B11F08F8F7E4AC4F9AE02.roa (hash: cZwW8tsmFD2xtwPfekSh582VRbEv6Jvu1sqyXeWPy+U=)
                          3: CF949C10359A11F0AFFF2848C4F9AE02.roa (hash: cIB0S20gV/ZhV77XZTzfCkZr/IsCbhpCdfiUC7S/47s=)
                          4: 57128B16347911F0B5AFA587C4F9AE02.roa (hash: WKrNLnQSQf3mdrreiH8iEoIheF7qvuIgUI+Ro9y3tro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 17:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4102 (0x1006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Jun  6 17:33:55 2025 GMT
            Not After : Jun 13 17:33:55 2025 GMT
        Subject: CN=68432683-fc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:83:35:5a:b9:48:56:8c:6e:ec:dc:e4:94:
                    9a:a6:74:c6:3f:65:95:b0:e4:57:ae:42:da:54:fa:
                    5d:b8:64:40:da:fe:1f:f1:1c:5b:e5:eb:57:78:8b:
                    19:00:33:7c:88:b7:78:92:b4:f6:d0:a5:18:89:63:
                    5b:54:00:2f:88:21:de:9f:f7:d8:93:49:54:a1:2b:
                    98:71:b4:7a:29:1c:13:ce:af:8b:06:b5:49:a7:d0:
                    a4:46:46:1e:c0:39:39:77:c5:2d:41:01:4c:01:fe:
                    e7:39:da:a3:6c:a2:14:e3:5c:75:42:bb:7c:d0:67:
                    ad:2b:ee:f1:65:ff:ea:c5:2b:ec:d0:21:1b:f3:f3:
                    df:99:59:33:76:b3:f3:4d:1f:f0:50:a5:61:6c:e8:
                    f7:db:6f:64:ad:a9:b0:8b:81:91:54:2c:74:c1:ae:
                    83:01:33:ce:ff:bc:bc:0d:45:37:11:c0:85:ff:84:
                    d6:e5:63:ce:05:cf:c6:4b:5a:c6:48:e2:16:e9:e1:
                    75:81:ce:b7:95:f1:a6:fd:5d:44:50:2e:92:57:62:
                    c1:3b:dd:63:58:de:7e:4c:1a:d4:2e:7e:c7:02:4e:
                    03:a1:9c:f9:6b:cb:f6:e4:b3:5a:95:51:68:c8:85:
                    a5:21:d4:7f:ea:90:b2:ed:2f:6c:3a:fc:5f:b5:3b:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:D6:D3:74:3F:05:BF:7D:96:46:50:40:EC:DB:C0:0C:31:FE:6D
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:7e:42:be:fd:1d:f2:45:9b:7b:73:a7:65:39:0c:58:ff:
         dc:3c:63:d5:70:44:70:ef:72:36:49:3b:78:3f:e1:47:86:e1:
         cb:1a:8c:ad:58:df:a7:9a:95:66:0a:87:0b:72:f2:c6:06:b3:
         08:43:c8:11:c2:67:12:71:52:4a:22:a8:22:a2:5b:d6:cd:f5:
         df:ae:af:ea:ce:c3:61:eb:58:e9:0f:53:ff:e7:3e:03:33:88:
         03:8c:57:52:00:cc:ff:33:c5:05:ec:cc:ce:80:5e:43:59:f8:
         60:2e:d3:9f:06:5f:32:00:fc:3b:54:5d:fe:98:78:1c:15:3f:
         ff:e6:2b:27:14:75:25:dd:3d:f4:30:93:8a:8f:24:d5:de:62:
         35:b1:ba:7c:ab:77:d4:22:dc:19:46:16:2d:f3:45:7b:ae:2a:
         43:7b:0d:2d:e8:e7:60:7a:08:92:05:d2:ef:ef:96:53:e4:a7:
         d6:88:aa:dd:68:ee:68:f3:08:d6:74:8a:23:2c:fc:bc:25:95:
         d6:d3:19:a1:a9:9f:07:72:6a:9d:44:6e:5b:f5:4f:73:a9:aa:
         ae:b4:47:18:01:8e:a6:f1:d7:ff:3d:c2:9d:b7:b5:89:33:0e:
         6c:28:8b:9d:e4:b1:2f:8e:62:af:2c:5c:22:f3:92:71:fe:18:
         19:8b:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:36:21 2025 by rpki-client