Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
File:                     w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json)
Hash identifier:          SGqE05fbtyw3mIBbEpY4khUe0fWW3h30bg8mgEQlHvg=
Subject key identifier:   13:5A:FE:1B:A2:09:B5:7B:E1:70:71:B3:96:79:FF:3D:8B:38:14:F3
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
Manifest number:          FF
Signing time:             Tue 03 Jun 2025 04:52:49 +0000
Manifest this update:     Tue 03 Jun 2025 04:52:48 +0000
Manifest next update:     Tue 10 Jun 2025 04:52:48 +0000
Files and hashes:         1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: A5mn62nJPOQ6PkZGVol1gC9qFN3x3fcNPhJzC/qy/SE=)
                          2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 04:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Jun  3 04:52:48 2025 GMT
            Not After : Jun 10 04:52:48 2025 GMT
        Subject: CN=683e7fa0-bad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:a1:12:68:36:9c:cb:d7:a2:98:d8:82:ea:
                    77:ad:91:86:03:e8:b4:98:d1:5b:e4:6d:9f:f7:69:
                    bd:f9:59:79:3f:14:38:b2:bd:54:a5:73:8f:96:3a:
                    60:a7:03:45:71:21:17:fb:16:7f:60:ad:09:de:34:
                    61:cc:3c:89:6a:b0:26:33:9b:4c:1b:f0:37:8e:7f:
                    43:0d:a5:ad:07:21:b8:dd:39:43:82:53:7d:ba:50:
                    76:66:95:6e:9e:6e:17:e3:ac:d1:e1:93:ef:94:d6:
                    26:ac:c0:c5:9b:0f:88:00:be:b4:a2:b8:b4:69:b3:
                    76:98:d6:78:af:ed:a1:47:d4:92:a8:ba:fd:c3:e4:
                    63:50:17:2a:68:9d:1a:92:b4:4d:c4:af:17:a7:96:
                    d8:62:ac:07:90:64:05:cc:66:47:62:b3:df:d1:e4:
                    8c:19:d9:c6:21:90:02:34:a1:b2:41:02:aa:8a:b2:
                    83:11:c3:4f:1d:28:31:94:e5:8f:81:49:f1:09:21:
                    9b:60:f1:77:3f:0e:ad:19:72:72:7f:9e:d3:7d:9c:
                    94:d8:28:93:f4:63:4b:b7:e9:9a:e4:cc:65:3b:33:
                    6c:bf:1f:4f:22:fb:19:f7:75:36:41:69:fb:ec:f9:
                    13:69:17:be:3e:cc:78:5e:19:32:66:bb:8b:d5:d5:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5A:FE:1B:A2:09:B5:7B:E1:70:71:B3:96:79:FF:3D:8B:38:14:F3
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:d2:4b:ab:13:e2:d3:1b:ab:2c:52:7b:92:de:d8:74:ee:
         33:de:24:15:f5:ba:14:a8:6d:a4:09:77:e2:e9:1c:13:7d:70:
         27:74:40:ce:e1:37:c7:5d:7f:4d:50:82:34:79:cc:45:90:7d:
         a0:ed:89:b1:ba:9d:ca:ac:58:82:69:e1:42:6f:b0:23:02:8f:
         68:30:f8:1a:62:74:b3:c4:96:c8:59:16:1a:5c:6d:c1:5c:d4:
         3c:85:d8:89:89:8c:c8:a6:93:fa:9b:59:a0:e0:ec:6b:18:f8:
         3d:67:c1:9d:80:02:2e:91:cd:db:79:82:52:9c:0c:85:a1:f7:
         62:8f:2d:89:20:91:5c:50:36:73:04:6e:5b:86:2c:5d:36:64:
         c9:11:d3:c6:11:8d:23:6e:fc:06:01:f8:de:d4:59:a1:f8:a6:
         c8:dc:88:fd:47:00:71:8c:18:c2:22:77:eb:a0:68:6a:db:ac:
         0a:c7:94:2f:08:d1:29:71:bf:22:21:ff:a2:c1:ae:81:a3:25:
         a6:c0:ba:e8:2e:98:38:a6:79:f8:09:39:ea:02:a4:1d:c8:2b:
         cc:13:06:ec:b4:1d:17:3b:ea:b7:ab:a9:70:0c:7e:ab:c9:4e:
         14:a2:0b:5e:03:c7:af:c0:24:05:f2:20:01:b9:64:2b:97:02:
         44:4c:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:14:40 2025 by rpki-client