Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
File:                     9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json)
Hash identifier:          vkYX9OSpw8t1u7Gs+1gpcGOpetlD49ep62oPz5HI564=
Subject key identifier:   F0:F2:09:82:4C:0A:E8:15:27:04:B1:1D:46:DA:C3:E8:76:E7:F3:E9
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       0636
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
Manifest number:          0634
Signing time:             Fri 30 May 2025 22:51:20 +0000
Manifest this update:     Fri 30 May 2025 22:51:20 +0000
Manifest next update:     Fri 06 Jun 2025 22:51:20 +0000
Files and hashes:         1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: 0VEFmeUIlFuXTTan4ijVscvwOEEWI1WNPcs6MlypgvI=)
                          2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=)
                          3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: May 30 22:51:20 2025 GMT
            Not After : Jun  6 22:51:20 2025 GMT
        Subject: CN=683a3668-6d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:fa:3a:19:15:bb:96:f6:67:00:f7:2f:7a:
                    9c:3a:9d:c6:80:d0:00:e5:7d:f9:47:4f:10:ab:a7:
                    fc:ac:1f:69:05:e8:64:a7:0d:59:53:0d:9a:45:34:
                    12:c8:86:3e:67:8a:0b:e6:bb:29:be:12:a3:8a:ee:
                    69:4c:7d:ea:67:98:bb:e4:f5:19:0d:c8:4c:41:ff:
                    48:a0:a2:f0:60:2a:2a:02:76:48:ad:2b:bd:0b:30:
                    f7:38:45:07:94:78:0e:d6:61:b1:1c:af:09:26:99:
                    7d:38:ed:e5:85:2d:d6:b1:74:a6:03:64:42:6f:b1:
                    42:0f:df:16:f5:00:6e:70:4c:95:51:b3:43:d9:d5:
                    82:79:68:2a:0a:75:aa:32:7a:d6:09:a3:63:b0:bb:
                    79:7b:70:a6:f3:4a:ea:ba:b4:31:96:be:f2:71:d2:
                    14:ca:33:3d:5f:8a:4a:36:ce:f3:5a:8b:6a:2b:a8:
                    ec:7d:7a:31:94:d4:20:28:f3:2a:1d:e3:3b:da:af:
                    a3:3d:ff:40:78:cb:aa:43:4a:02:3b:6e:7a:23:b2:
                    10:35:d7:3f:bf:41:99:e0:da:a4:4c:97:64:10:b0:
                    d7:85:a5:00:39:fa:99:26:49:32:d8:f3:f2:65:96:
                    99:7f:cd:e6:3c:fa:6d:3c:4a:ff:ee:cf:05:a9:76:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F2:09:82:4C:0A:E8:15:27:04:B1:1D:46:DA:C3:E8:76:E7:F3:E9
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:c9:a2:65:ef:2f:85:42:0b:41:12:bf:07:d0:46:fd:43:
         db:d2:1c:f0:e4:ea:42:59:89:d2:90:b5:81:36:78:7d:4c:10:
         29:69:4a:d3:93:3f:26:bb:20:fc:0a:bd:a2:fc:d5:9f:b8:f2:
         bd:2e:04:03:2c:97:d1:ea:10:5c:c6:60:91:84:b2:20:ac:ac:
         c0:48:13:ec:eb:34:6f:1e:b7:92:94:4c:52:a0:5e:b7:82:3d:
         d4:60:59:d6:3f:80:a7:3a:0e:cb:0b:2d:04:2a:0a:63:bd:ba:
         cf:10:51:00:00:ce:b5:86:d8:2a:fd:a3:24:3c:e9:e9:e9:41:
         0e:e2:8e:9e:36:9f:3d:81:93:3a:57:ef:3a:85:0a:db:1a:6a:
         f4:3e:f3:42:97:90:1f:14:75:fa:7f:a1:84:bd:b1:82:71:65:
         e2:ba:67:f4:6e:e6:1a:92:3e:8e:7f:44:b5:f2:28:63:8b:46:
         82:ee:cc:49:b3:2e:c2:0e:a7:02:d6:32:4c:93:a7:e9:40:7a:
         5a:36:44:15:91:dd:ee:08:5c:d0:d2:42:c3:33:67:91:8f:b0:
         73:02:73:fb:e3:be:d8:3d:39:e2:f6:da:c8:e1:41:f0:bf:b6:
         cc:45:9b:60:02:f4:4e:88:71:1f:99:59:e4:7f:b2:f4:eb:82:
         0d:76:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:56:20 2025 by rpki-client