Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          8kswv5Gi9cncdGok7EwORiGURIlwX+ew2xOgzet6idU=
Subject key identifier:   B3:AA:A1:68:D2:D2:BD:14:13:16:8D:82:79:DE:EA:06:40:34:FC:2A
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1F1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1F0A
Signing time:             Thu 12 Jun 2025 15:59:33 +0000
Manifest this update:     Thu 12 Jun 2025 15:59:32 +0000
Manifest next update:     Thu 19 Jun 2025 15:59:32 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: I3+RIkhb5N3ZYVgGkmq94pbyHLrULSTsIAbRh4vSR7A=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl
                          rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 15:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7962 (0x1f1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Jun 12 15:59:32 2025 GMT
            Not After : Jun 19 15:59:32 2025 GMT
        Subject: CN=684af965-a67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:27:14:08:c9:46:e4:a2:7d:ea:39:4b:3b:
                    61:00:35:51:be:51:9a:ad:43:da:80:1f:62:b5:b3:
                    df:b8:59:fe:ae:92:2a:d9:6a:7f:bd:1e:d0:d7:18:
                    88:92:98:b2:07:12:a0:44:2f:56:b8:16:a9:81:c9:
                    98:38:97:7b:3b:6e:57:4b:1a:50:27:34:3e:3e:c4:
                    7d:67:e2:62:2d:e0:20:f0:1e:cf:7f:61:f2:25:ae:
                    3f:62:90:39:ba:20:8a:ff:f0:e1:1d:ff:f3:cf:10:
                    e5:39:d5:a7:cc:27:a8:19:27:fb:11:9f:9c:ac:6c:
                    82:12:da:09:5a:c1:24:2a:b3:c0:ac:f8:80:63:db:
                    e6:9c:63:fd:6a:85:42:da:8b:e6:9c:b2:7d:06:71:
                    cf:91:c2:f9:41:70:ca:25:75:cc:d9:4d:c3:1b:67:
                    dc:d9:7e:cf:0b:0d:31:17:cf:24:0a:29:5b:ec:ea:
                    24:d5:2a:13:5b:3b:98:64:4b:b8:85:f3:f0:cf:ac:
                    34:ec:8d:c7:dd:b2:6f:14:22:a8:f5:7d:5b:65:50:
                    e7:26:e5:b5:35:5b:ab:34:55:fd:f7:cd:0f:2f:32:
                    e2:35:b6:a0:d3:04:a3:27:d6:05:bb:24:30:c3:6d:
                    7d:99:92:71:43:66:24:de:05:a3:13:88:20:0d:dd:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:A1:68:D2:D2:BD:14:13:16:8D:82:79:DE:EA:06:40:34:FC:2A
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:d5:6b:b1:18:b4:2b:95:4d:12:c2:7b:55:35:ab:d9:6a:
         dc:99:f0:ad:ee:32:e5:65:f1:38:e8:4c:44:34:b1:d0:9f:e7:
         4d:1f:05:14:5f:f3:b7:cf:b2:4b:0f:29:ef:1e:73:d1:a4:c5:
         ae:bf:a9:8b:83:bb:e9:11:d3:3a:82:57:a6:f1:c1:76:b3:dc:
         ba:31:19:7c:8e:90:2e:a7:94:50:c0:d4:2c:ee:f6:3e:4f:32:
         ab:f5:f6:76:8a:34:1d:ed:44:ad:00:69:ac:2d:1a:95:54:c4:
         9a:f9:cd:c3:c4:19:7d:78:6a:5d:fb:cb:d1:9c:07:80:2f:2c:
         2c:3c:2b:37:94:9f:5d:89:1c:85:7b:ca:97:f4:07:c1:90:c4:
         98:d7:b7:5e:c5:5e:17:2c:98:8e:50:e6:1e:62:d7:09:23:5d:
         a3:b5:b8:af:69:7b:9a:55:4e:4e:d8:ed:ec:89:cc:46:c7:f1:
         fb:9d:50:a3:fc:34:8d:a3:c9:90:2c:7e:4c:f4:09:f4:6b:01:
         60:e2:ef:71:5b:b9:9e:04:65:15:04:fd:b7:31:3e:86:26:c1:
         96:40:be:df:67:0f:69:43:84:c5:d6:ef:16:aa:c0:80:01:a2:
         cf:08:d4:70:7d:60:c1:26:db:65:f8:b2:87:71:b4:d0:aa:26:
         4e:9a:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:18:24 2025 by rpki-client