Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File:                     srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier:          YnyA/Ct4FpHeRkWY8KzWkWIXmOY4d7wO+VpiIhMoIJw=
Subject key identifier:   0D:64:6B:F9:B0:87:52:9F:DA:86:61:2B:54:BD:FB:EC:E8:74:93:7E
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer:       /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number:          0A7C
Signing time:             Thu 12 Jun 2025 19:23:45 +0000
Manifest this update:     Thu 12 Jun 2025 19:23:44 +0000
Manifest next update:     Thu 19 Jun 2025 19:23:44 +0000
Files and hashes:         1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: bxZqSonjt4Sz3Pt5gQvKI1U+6dmO+SzKiZ08feqg6B8=)
                          2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
                          rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
        Validity
            Not Before: Jun 12 19:23:44 2025 GMT
            Not After : Jun 19 19:23:44 2025 GMT
        Subject: CN=684b2940-05d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:53:7d:19:3e:7b:78:8b:8b:6a:bd:13:a8:
                    9b:84:da:2b:2c:a1:7a:9b:28:6f:6a:bc:65:c7:91:
                    1f:e3:80:ca:b5:78:47:de:c3:11:c1:4d:88:54:c7:
                    e5:91:97:7b:84:5f:66:e7:8e:78:b1:ca:7d:a6:22:
                    58:51:30:6c:ef:d3:66:de:d2:55:2b:71:f6:56:36:
                    c8:d5:6c:c7:53:4b:87:a5:75:ef:3b:f2:b8:06:02:
                    07:a8:09:6e:a5:a6:df:8b:23:a3:36:3e:ca:c0:db:
                    af:81:0d:ab:9c:e4:52:c9:f9:60:5a:33:95:fa:d0:
                    2d:bd:78:8a:de:2b:18:c0:0b:d7:f2:33:49:5d:fd:
                    8e:c5:29:f1:fe:ec:c8:c1:65:dc:76:f0:96:29:25:
                    ba:9f:32:f4:72:36:86:94:11:eb:d2:db:52:f1:f2:
                    b8:9a:2d:b7:fa:2b:17:5a:9a:a8:e5:96:1d:9f:26:
                    a7:42:c3:3c:56:57:df:7b:47:9e:94:4d:13:8a:83:
                    06:1e:9d:ec:d6:36:dd:79:ba:fe:ae:0e:e7:f3:8c:
                    75:28:1d:bc:05:34:9d:77:00:50:ee:d9:57:27:34:
                    96:0b:37:ad:d6:a2:7e:85:dd:3a:34:b1:28:46:b0:
                    d2:e6:96:ba:78:73:40:c4:ba:fb:64:46:a3:35:0b:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:64:6B:F9:B0:87:52:9F:DA:86:61:2B:54:BD:FB:EC:E8:74:93:7E
            X509v3 Authority Key Identifier:
                keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ed:be:c4:2d:44:f2:75:61:2e:61:a7:d6:da:18:a4:89:24:
         81:62:51:6c:42:33:f1:56:1e:23:51:8a:52:f9:4d:2e:05:da:
         c7:e7:9a:07:88:9c:3b:b0:15:2b:b7:0c:43:ac:c2:42:bb:ec:
         19:78:6f:5f:18:cd:18:8c:f0:e0:03:3c:63:9d:53:ea:e1:b0:
         1a:8f:93:26:f0:cc:d7:7b:b8:a5:0c:1e:0b:c4:eb:1d:cb:98:
         ee:e4:06:cf:05:23:2a:b3:16:5d:d9:c4:41:0e:83:bc:89:45:
         2f:c2:6f:ee:57:3c:c8:9b:4b:2b:3c:af:4f:63:7b:42:82:1b:
         0b:01:f0:57:4d:d7:0d:9b:1d:f2:f1:0d:b7:26:3f:f7:63:98:
         e2:7b:a3:d1:cb:50:f5:59:50:f3:14:22:2c:86:bd:4f:3f:47:
         f4:1a:16:3a:38:7d:03:d8:3a:31:e1:1d:cc:8c:e7:2b:1f:04:
         8c:d8:62:2a:4b:0f:87:0c:b6:ce:af:54:f3:b1:41:ae:1b:52:
         0b:fd:71:0b:7a:de:a3:3d:72:ff:4e:bc:18:3c:3e:60:08:22:
         ec:28:ef:8d:f8:84:88:aa:3e:aa:45:c9:0e:07:3c:1a:43:73:
         b8:5f:40:a1:66:01:43:ae:f1:75:43:f3:05:71:3b:d7:fc:04:
         bd:bf:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:17:20 2025 by rpki-client