Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          +3uPGxjKA20r2FYHhpQtnTl6Ic8n9vf7BYRBmzOntsQ=
Subject key identifier:   52:2A:EE:37:D5:EF:B3:55:1E:60:30:D1:9B:9E:CB:EA:C1:B8:2E:AC
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          54
Signing time:             Sat 19 Jul 2025 07:27:08 +0000
Manifest this update:     Sat 19 Jul 2025 07:27:07 +0000
Manifest next update:     Sat 26 Jul 2025 07:27:07 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: S51lnBlJ3jo5lin2a/tl60FxPWQ+qmkCN3V7wt/S9nM=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Jul 19 07:27:07 2025 GMT
            Not After : Jul 26 07:27:07 2025 GMT
        Subject: CN=687b48cc-8e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:27:4d:b3:d4:f6:1e:8a:19:94:99:a5:9b:
                    54:fe:97:6c:e6:86:77:6d:ed:d6:7f:5f:67:bf:91:
                    20:df:e5:80:77:db:72:7b:85:80:42:6b:ac:c1:1c:
                    c8:d3:61:a4:41:27:10:32:e0:98:ed:15:26:0f:9e:
                    74:2b:f5:bb:ee:0e:95:78:66:bb:0d:91:b2:17:c2:
                    93:ee:9b:23:f9:7c:7d:bd:66:0b:8f:ce:0e:ad:b1:
                    b4:a1:51:9b:7a:c3:34:47:e4:09:ab:42:98:7f:ac:
                    7a:03:e1:a8:c3:e0:e5:36:aa:a5:9f:46:29:b5:19:
                    5b:55:22:38:c1:23:05:2b:5a:e3:de:3a:1b:06:da:
                    e4:7e:94:a0:03:17:73:4a:b3:04:db:5b:32:80:21:
                    9c:f7:f9:f7:2a:c7:96:a3:89:70:07:c6:a7:4d:84:
                    80:52:5d:64:60:07:16:9f:59:aa:9c:2a:bc:1c:42:
                    89:f9:af:1b:91:33:5f:2d:32:97:a8:fc:54:b9:20:
                    f2:d1:8e:7b:aa:d0:12:b4:48:45:62:2f:3a:1e:80:
                    08:7d:0b:02:0d:6c:e4:cf:cf:67:b1:4c:70:89:7f:
                    a4:6c:b6:09:ce:51:57:de:a4:7e:95:94:94:10:38:
                    45:c7:1f:24:35:8f:44:09:4c:87:3f:02:2e:53:29:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2A:EE:37:D5:EF:B3:55:1E:60:30:D1:9B:9E:CB:EA:C1:B8:2E:AC
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:49:e1:5f:b1:7b:c2:27:a2:25:7a:1c:49:3a:66:8a:3f:
         b3:5a:af:9d:55:f3:2d:19:1d:e5:7b:6f:75:5f:86:54:9a:89:
         c2:04:11:e9:88:42:e8:b5:18:23:17:41:5d:68:52:a4:f2:16:
         c2:8c:26:6c:18:14:7c:c8:85:a6:4e:63:77:65:ef:36:8e:95:
         02:b2:83:72:95:bd:85:dd:c3:f7:f1:eb:b0:e7:c8:c5:10:db:
         d2:7f:f4:4a:58:cd:b9:79:b5:30:16:16:c7:93:ed:1a:84:fc:
         94:4e:cb:4a:7a:90:72:64:13:99:c4:fc:ef:a7:af:39:8f:a5:
         dc:29:9c:d7:b3:bd:1f:9e:ad:62:79:33:3a:09:b6:bb:2b:0a:
         bf:cd:58:83:53:19:e5:35:93:9a:d5:b4:1e:bd:12:26:6a:2b:
         6c:b3:9d:22:e4:3e:24:bc:67:05:ca:95:9c:db:68:14:03:27:
         25:c3:6e:93:7a:de:22:da:0c:1c:32:97:fe:89:1e:4d:4b:e9:
         65:1e:24:a7:97:36:d5:93:e7:27:75:78:87:10:8c:7b:7b:2a:
         28:96:99:63:10:ef:63:05:1f:42:1b:1b:fb:eb:36:c0:d6:76:
         96:5c:18:7b:e3:82:b7:ad:9c:34:1e:26:83:be:29:c1:5b:b9:
         97:61:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:45 2025 by rpki-client