Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File:                     sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier:          o5Pp5oM+X2IVtOH3Do/uGtHMIjTaTgTzHyKkQEoqTFA=
Subject key identifier:   9C:7D:5B:E7:12:67:B3:46:E8:63:86:0A:BA:67:32:F2:C2:00:B7:1A
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer:       /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial:       080C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number:          07FF
Signing time:             Wed 04 Jun 2025 20:52:12 +0000
Manifest this update:     Wed 04 Jun 2025 20:52:12 +0000
Manifest next update:     Wed 11 Jun 2025 20:52:12 +0000
Files and hashes:         1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: PvfRuroJWwqi/rJxqu6nR3KDBbEuLhzrrsrhWfCiZac=)
                          2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 7JHMwVjCROL2NO+MkxXgRxb2ZHCCwLSy/kLqZ1Og33E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
                          rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 20:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
        Validity
            Not Before: Jun  4 20:52:12 2025 GMT
            Not After : Jun 11 20:52:12 2025 GMT
        Subject: CN=6840b1fc-fb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:c8:95:15:19:8c:79:5d:73:ed:63:96:44:
                    3d:ac:f8:7f:4e:4f:85:51:a7:f5:06:a0:79:ac:47:
                    a8:33:f2:47:2e:d1:3c:e1:a5:f7:39:63:50:62:cc:
                    b2:37:43:ba:8e:c7:f9:ba:4e:5a:7b:d2:b5:56:99:
                    1b:de:58:77:7e:8a:44:1c:b0:ba:d8:9f:ee:13:10:
                    53:02:24:67:d2:29:03:7d:ec:4a:36:3a:ab:cc:53:
                    99:1f:a7:be:f6:3d:f4:68:0e:68:f2:0d:54:93:a8:
                    b2:da:b2:59:cd:ac:5a:87:1a:73:7e:7f:05:c5:23:
                    5a:7e:86:54:74:5a:0c:bf:ca:8c:0e:b6:8c:90:22:
                    0b:37:a4:92:cb:62:28:d8:fd:07:42:6a:e4:db:5a:
                    44:aa:92:a7:ad:87:6c:e9:76:00:f2:a0:a5:f7:57:
                    c3:16:38:80:82:f1:ab:b9:70:75:18:eb:d7:eb:2c:
                    85:2d:5a:0e:85:75:02:8a:dd:6c:64:92:f5:c5:4b:
                    ee:81:b9:6e:f8:e3:76:35:2c:80:1a:b3:a2:f6:67:
                    4c:be:a0:39:93:97:2a:bd:67:4b:63:32:3c:50:bd:
                    ee:73:0c:82:1d:fb:a2:eb:81:f0:cb:7f:26:f3:8d:
                    16:c4:11:c7:6b:ad:ad:72:42:4e:e4:45:fe:a5:47:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7D:5B:E7:12:67:B3:46:E8:63:86:0A:BA:67:32:F2:C2:00:B7:1A
            X509v3 Authority Key Identifier:
                keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:62:dc:ce:f0:30:a8:c9:2d:c2:73:0f:5f:08:30:ad:a7:99:
         4f:8b:16:2f:bb:d8:6c:9a:66:18:d9:9b:47:5f:91:ab:d6:d3:
         de:c0:9f:6b:d9:fa:8e:d2:4e:db:5b:4c:44:ce:58:dd:29:c0:
         6a:91:b0:0d:84:e1:a2:34:f0:13:51:c5:df:7e:53:35:f7:c7:
         19:94:87:da:5e:55:9f:f8:b5:0e:4c:80:50:c7:cb:3e:3e:63:
         8e:40:54:4a:54:ab:56:d5:9d:ff:50:b3:3c:f0:24:c2:5d:5e:
         1c:e1:d9:ff:9f:fb:02:e2:82:e7:50:8f:ac:68:86:3b:5b:67:
         1f:d5:d3:4d:dd:95:93:2b:a9:e8:3e:fa:39:43:24:8a:d3:3c:
         4e:29:25:90:10:1c:9e:a5:36:01:cf:8c:8c:c1:33:d6:20:06:
         fb:26:91:8c:ca:ba:6a:b2:02:e4:db:3c:b5:ab:b8:87:d2:30:
         bf:e6:d2:8d:e0:73:f9:8e:a8:04:55:92:b4:ba:55:7c:65:05:
         cd:69:b9:91:96:b7:63:5a:86:46:61:d3:9e:dd:5e:09:d2:e3:
         9d:8c:ee:ce:94:9c:b7:1a:ed:8a:5e:c2:07:5a:60:44:7a:7d:
         83:6e:6b:33:3e:fa:8f:5e:21:86:ff:f9:bf:2b:70:bc:9b:b4:
         a4:8f:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:36 2025 by rpki-client