Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File:                     o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier:          m/xrFowr8SrCPwstQ6bbU1OsY9WF/h9UxLORWA4HtNc=
Subject key identifier:   DA:3B:1D:50:D0:13:9E:63:DE:3C:D8:7D:73:A2:CD:B9:3B:BB:E4:A4
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number:          03F9
Signing time:             Sat 31 May 2025 00:39:35 +0000
Manifest this update:     Sat 31 May 2025 00:39:34 +0000
Manifest next update:     Sat 07 Jun 2025 00:39:34 +0000
Files and hashes:         1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: Uw59iqXLouOLX/Ge+vQro8I/XUFnQ1/aFFXRTW/6Utw=)
                          2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: May 31 00:39:34 2025 GMT
            Not After : Jun  7 00:39:34 2025 GMT
        Subject: CN=683a4fc7-6e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:6b:cc:38:8e:53:f6:f8:aa:8f:81:23:b9:
                    dd:78:67:d2:2b:2a:02:4b:57:8a:c0:43:ad:2e:58:
                    3b:44:06:fb:ee:0e:44:12:61:11:ba:e3:a2:fe:91:
                    89:0b:c6:46:aa:b6:84:c2:d9:c2:f4:ad:ba:8d:36:
                    37:43:45:3d:c2:0a:c5:46:29:a8:3f:2f:36:46:61:
                    57:07:7d:56:9d:93:c7:fd:21:56:05:72:16:79:ea:
                    93:07:31:de:57:6b:0b:f3:98:20:cd:40:38:48:45:
                    a3:84:21:a8:69:d7:20:27:a3:bc:8c:87:f6:c1:c2:
                    0c:e6:7b:09:8d:56:e8:40:e2:11:fe:be:09:1a:ad:
                    9f:8d:d3:26:47:8d:9b:8a:5d:a5:94:29:5c:10:07:
                    3a:ea:9e:46:ae:e6:93:f9:a1:d5:c3:a7:8b:17:48:
                    e0:e7:39:66:e1:c3:9b:82:9c:9a:ec:a4:25:1a:b9:
                    61:5f:29:41:6b:40:59:31:d6:fe:5f:ba:21:86:50:
                    b5:44:ee:64:52:6f:60:76:c7:5d:ef:27:90:ae:c6:
                    3e:1b:6d:c1:23:94:ca:1f:19:78:9a:5c:28:fd:de:
                    27:a4:4f:bd:ea:66:be:cc:c7:b6:2a:5e:4e:2a:8b:
                    ca:57:d9:6d:b2:8f:61:df:e8:61:1e:a6:36:9d:b1:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3B:1D:50:D0:13:9E:63:DE:3C:D8:7D:73:A2:CD:B9:3B:BB:E4:A4
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:1d:3e:a7:69:bc:c4:86:13:78:17:7c:eb:52:cb:41:3c:
         68:bd:87:97:c0:ba:78:ba:83:fa:e8:26:a0:04:96:ce:85:b8:
         ca:1e:62:e0:e2:bb:cb:42:cb:e8:85:52:19:57:c4:35:eb:f8:
         c6:92:ae:01:71:d4:91:13:ef:7b:3e:c3:73:86:e1:2d:21:94:
         cd:3d:d0:cc:18:e4:6c:1a:26:37:0a:68:e7:49:b7:dd:22:0b:
         1d:ed:9b:06:2f:3a:02:85:40:81:f3:11:aa:a3:94:bb:26:7e:
         5b:71:83:60:69:af:44:12:7f:be:ab:b2:c9:8e:ab:ce:c6:4b:
         97:ea:60:46:3b:af:50:02:36:d5:00:32:24:bf:4c:3a:50:2e:
         a6:ab:98:37:3a:1d:07:b6:d4:43:93:23:30:c5:83:cb:28:db:
         f1:1d:da:64:c3:1f:c5:95:58:4d:c1:6c:bd:d0:4e:84:6b:98:
         8b:6f:cc:29:59:1a:1c:38:e1:dc:65:27:af:48:1d:09:a9:1e:
         18:42:0c:05:ee:3a:ac:35:e4:cd:f8:68:3f:31:87:27:f2:e2:
         e4:89:f0:c7:c2:5f:f2:f1:be:cc:d3:15:ac:4a:a7:f0:09:9c:
         aa:37:90:32:21:7c:0c:6e:76:93:01:d4:c4:aa:9b:72:d4:7d:
         2b:25:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:26:12 2025 by rpki-client