Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File:                     4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier:          CjIDcLf8KGlILb7hw5FfGSebcRlu98JYE/R/L1X0yPc=
Subject key identifier:   A3:63:8B:27:22:39:48:54:73:24:60:01:BE:E3:41:05:AC:9F:94:71
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer:       /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number:          0162
Signing time:             Mon 09 Jun 2025 03:02:07 +0000
Manifest this update:     Mon 09 Jun 2025 03:02:07 +0000
Manifest next update:     Mon 16 Jun 2025 03:02:07 +0000
Files and hashes:         1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: 0mCAX8Vkfn0ChT5KX8s8ra2ARMNmlDT0664oykE+xDE=)
                          2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=)
                          3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
                          rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
        Validity
            Not Before: Jun  9 03:02:07 2025 GMT
            Not After : Jun 16 03:02:07 2025 GMT
        Subject: CN=68464eaf-26cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:05:86:3b:00:32:a1:ce:76:d7:00:b9:c0:
                    34:88:14:5b:85:cb:e5:9b:34:c2:cb:24:fc:ae:d6:
                    53:7b:10:35:8d:a6:d7:2f:14:92:3e:ee:be:b7:34:
                    00:3f:a1:ec:9b:f1:b1:c7:38:2e:75:95:d2:33:b2:
                    c7:64:89:eb:27:92:05:b3:84:28:0b:f8:1d:64:c7:
                    dc:48:d3:77:f5:52:d1:f9:af:9b:5f:51:be:5a:fb:
                    2b:4f:40:c6:1a:a2:23:8e:5f:b2:19:5c:a6:c8:a9:
                    5b:ad:00:76:f9:89:e8:1d:93:81:63:35:7c:85:fb:
                    9f:cc:de:7b:72:e1:02:05:df:06:ef:24:73:b8:29:
                    38:5f:b9:54:10:47:17:25:f2:7c:15:99:ac:7b:bd:
                    0e:eb:c2:91:c0:70:0b:d4:8d:c9:53:9a:6f:4f:39:
                    a0:fc:9d:40:97:7e:84:06:53:a8:f9:c3:0d:63:73:
                    62:28:ce:89:77:0c:60:a7:7b:c2:62:4f:0f:ff:50:
                    bb:7c:9b:ba:fb:83:9e:ff:ed:63:ea:9e:1c:a6:60:
                    f2:61:4f:29:35:9e:fc:63:c9:2f:f9:81:ee:65:ea:
                    db:e1:ad:7a:d5:d7:03:91:f6:fe:c9:38:21:0c:62:
                    51:d1:f1:a6:62:45:23:84:63:df:7a:65:50:37:5c:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:8B:27:22:39:48:54:73:24:60:01:BE:E3:41:05:AC:9F:94:71
            X509v3 Authority Key Identifier:
                keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:f5:fa:77:79:33:4b:a2:34:79:c3:ab:73:fc:95:1f:14:
         bd:55:2d:e1:94:c1:63:34:f9:5a:8a:3e:bd:e0:c8:e9:0b:2a:
         ad:53:73:e0:0b:a9:e3:74:a2:e1:9c:78:8c:9f:7b:51:76:86:
         07:6b:ff:aa:a2:42:91:d4:f0:c5:af:0a:43:37:4d:c9:40:9b:
         3d:ac:ed:7e:d6:f6:a0:0f:c0:8c:64:c6:cf:5b:f3:2f:fb:1b:
         4c:30:9b:fc:67:e8:54:8b:76:bd:44:00:e5:2e:ed:ff:5c:b6:
         a3:05:68:2c:d8:fe:95:2f:ba:f5:a8:2d:85:1b:d5:3d:3a:6f:
         83:ec:eb:d6:c8:01:80:6b:90:b6:d6:98:4a:30:49:26:43:dc:
         b1:24:97:69:a3:d3:00:b9:f7:55:15:50:06:11:9d:be:12:11:
         8a:62:fb:4a:2c:dc:4c:70:2a:ec:fc:64:7a:e0:75:fe:d7:3c:
         0e:cc:9d:df:5c:2e:83:49:4e:b6:bf:a9:cd:e1:49:23:bf:ff:
         b8:7c:5a:30:df:da:a8:e5:ff:2c:26:70:64:f6:29:14:e1:41:
         d3:0d:eb:2b:68:fa:cf:45:9a:3e:52:86:ae:f6:8b:d3:a3:c6:
         7a:e6:e9:be:05:f4:b7:9a:cf:fa:71:97:30:29:70:25:0a:bf:
         c6:c5:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:24 2025 by rpki-client