Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          jEnuv78FcQdPcJG4I2+wYlUE4nTT/1AOcIqLY6FP6Y8=
Subject key identifier:   49:21:EF:1D:EA:D6:83:94:F8:09:04:AA:86:5C:BD:79:F7:A0:B5:0F
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0BFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0BF2
Signing time:             Fri 06 Jun 2025 18:48:38 +0000
Manifest this update:     Fri 06 Jun 2025 18:48:38 +0000
Manifest next update:     Fri 13 Jun 2025 18:48:38 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: CqY7kRT8E1tPTgGwkiUk1hKIL7ZBiEMfC6SBDQ5d3Nk=)
                          2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=)
                          3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 18:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3070 (0xbfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Jun  6 18:48:38 2025 GMT
            Not After : Jun 13 18:48:38 2025 GMT
        Subject: CN=68433806-e450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:f4:d8:72:71:16:7b:8b:30:2f:f4:fd:bd:
                    44:d7:f1:d6:16:a5:f4:72:22:0d:ef:95:87:04:43:
                    04:8a:63:1f:79:f2:06:a5:66:db:c3:b3:15:76:43:
                    b4:06:e9:57:07:1a:0d:61:89:49:31:08:72:96:07:
                    93:c8:b0:28:fc:c0:a5:4b:14:02:40:10:81:36:a5:
                    f9:db:17:e6:49:b3:a3:3b:a9:2f:82:ff:fa:a7:c6:
                    3d:e9:05:48:21:1a:e8:d1:eb:50:94:bb:5b:83:03:
                    1c:6c:38:b2:78:d5:9f:5d:a8:32:05:64:97:72:61:
                    04:6a:cf:0e:45:1e:0f:0c:94:ab:eb:69:bc:7d:c5:
                    03:1c:b0:0b:68:64:e2:24:c6:5d:0f:ae:6e:fd:d2:
                    31:f8:08:85:ad:63:78:f1:85:76:83:93:68:1e:7c:
                    e2:fa:e7:b6:bd:56:b5:18:07:42:95:2f:f0:01:e1:
                    ca:f0:ee:dd:72:10:d8:be:d1:0c:07:e5:7c:f5:2b:
                    9e:50:1b:e6:16:b8:12:74:10:5d:83:91:7d:fe:76:
                    b1:fd:b6:76:ff:87:95:69:cf:fa:f2:44:7a:5b:8d:
                    ea:ac:4a:3c:54:eb:0e:67:c8:db:06:8a:21:f5:f0:
                    15:54:fc:3d:84:db:14:3f:20:d6:e6:4d:82:a2:10:
                    86:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:21:EF:1D:EA:D6:83:94:F8:09:04:AA:86:5C:BD:79:F7:A0:B5:0F
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:13:78:78:e4:47:96:4a:e8:15:88:79:e0:de:e1:10:66:
         ff:ef:34:80:56:b2:b7:e7:eb:bb:30:6c:59:da:d2:92:03:aa:
         83:53:fe:da:37:c2:74:74:cc:76:da:b0:d3:90:33:3a:1d:3b:
         6d:dc:43:78:52:43:33:d4:28:86:6b:e4:4e:97:bc:c9:7b:b0:
         67:ca:79:51:d7:42:b8:96:ed:20:63:65:e6:38:4c:69:0c:f2:
         be:02:b3:9c:e8:cb:45:94:f3:ae:87:fc:0e:8e:b0:da:20:86:
         14:71:3a:f9:51:d7:ae:82:45:9d:19:39:8e:a5:93:a9:3b:3a:
         4b:23:45:a6:4e:0f:79:47:c2:da:c5:56:67:99:b7:61:53:5e:
         97:bd:22:17:fd:7f:b7:7e:69:74:75:44:cc:8e:82:3b:dc:8b:
         34:14:2d:41:32:c6:93:ff:0f:3d:19:4a:37:50:c7:3d:da:e3:
         92:93:48:98:9e:2f:95:91:f4:91:ee:f1:42:8c:1c:ee:f0:05:
         7c:42:c5:6a:41:85:8e:7f:46:75:be:26:80:c3:5e:73:f8:c0:
         07:6a:69:d7:99:02:f1:a5:3d:bd:63:13:a5:66:08:74:eb:b1:
         37:2b:d2:0f:54:f1:65:fa:e2:15:21:74:cc:c7:ee:9a:5c:18:
         0b:61:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:42 2025 by rpki-client