Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
File:                     lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json)
Hash identifier:          8tLdAiCH2miKMe6qEkXMKg9flODSyuRWN3mYA2kqRVk=
Subject key identifier:   68:D9:AA:CD:13:16:20:B2:0F:90:6C:E6:0B:2B:EF:7C:2D:88:49:35
Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
Certificate issuer:       /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Certificate serial:       0CB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
Manifest number:          0C98
Signing time:             Fri 30 May 2025 18:26:51 +0000
Manifest this update:     Fri 30 May 2025 18:26:51 +0000
Manifest next update:     Fri 06 Jun 2025 18:26:51 +0000
Files and hashes:         1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: 2fG/TVlpKFSSrME5rlLy8/EczIM4Hp98/uVmfWHbW2U=)
                          2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw=)
                          3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl
                          rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3248 (0xcb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
        Validity
            Not Before: May 30 18:26:51 2025 GMT
            Not After : Jun  6 18:26:51 2025 GMT
        Subject: CN=6839f86b-24dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:1f:73:2f:2b:2a:4b:fb:1a:8f:b8:2b:fa:
                    28:23:16:57:88:3f:2b:82:7f:f0:fd:8b:37:d8:9e:
                    4b:2e:e6:9b:03:49:eb:8c:7c:93:2d:66:11:e6:33:
                    e7:50:11:a3:3a:d9:82:e0:fb:76:7e:61:fb:06:37:
                    5e:3d:39:bc:a8:60:e0:dc:e5:2c:db:98:59:1d:97:
                    c7:3f:53:2b:28:94:34:61:e2:5e:5f:de:73:32:f6:
                    dd:9c:bb:b0:14:19:10:62:28:53:85:ad:73:3f:3d:
                    3a:f8:e1:91:d3:6d:2f:8d:e3:58:d3:d6:d4:83:be:
                    70:52:1a:e0:c3:e9:92:7e:47:ef:96:7b:b1:a0:03:
                    8e:50:a8:ba:cb:c3:32:62:73:c8:01:b4:b1:5e:05:
                    e5:09:15:50:79:70:b3:78:b2:aa:c6:06:5c:66:af:
                    58:71:5d:e9:bb:df:ab:fa:34:7e:40:96:73:78:81:
                    44:7a:ab:c2:ef:b8:fc:0d:7a:86:64:fb:2e:5d:c1:
                    73:89:62:e4:5d:d5:8a:44:94:2a:e3:9f:21:e9:6b:
                    fa:a3:15:b8:ee:fb:e6:46:b2:14:43:6a:7b:c5:73:
                    60:2f:d2:4b:05:a8:cf:9b:06:35:b8:36:d4:2d:b2:
                    45:70:6f:5c:09:73:95:68:77:9b:8f:69:dd:9c:81:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:AA:CD:13:16:20:B2:0F:90:6C:E6:0B:2B:EF:7C:2D:88:49:35
            X509v3 Authority Key Identifier:
                keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:8d:63:04:2b:39:d1:38:4f:44:84:cb:27:5c:55:7e:59:
         6a:f6:56:d1:54:d6:d0:b7:4f:b9:4c:8d:dc:98:d2:0d:07:ac:
         d4:8a:79:17:a7:8e:0b:36:98:17:63:30:e2:a4:66:f5:19:3d:
         2c:5f:66:f3:26:8f:83:2d:7e:19:0c:4d:a7:05:11:60:22:f2:
         40:06:3d:b3:a4:bb:fd:fa:ea:a8:02:03:4e:de:f2:6e:b3:0b:
         49:d6:d9:2f:8d:0d:0a:2b:e7:4c:bb:e4:43:28:9b:56:62:5d:
         e4:cf:f1:4d:73:d0:f2:57:b3:f3:8a:7f:cc:7b:3c:ba:fd:84:
         0e:2d:0d:79:69:6e:8c:66:f6:22:2d:ae:dd:18:bc:3a:05:a0:
         d4:b6:f1:3d:ca:26:f8:ad:a4:70:f2:b9:96:82:7d:97:a7:2d:
         62:f4:d2:19:39:9b:34:9f:27:9c:b9:1f:6d:99:3d:41:0a:b3:
         37:5d:6b:ba:d3:e3:f1:c8:8d:fc:e1:5c:1e:38:77:2b:85:43:
         54:5c:5e:3f:67:a5:c5:17:f3:fa:b8:ea:bf:50:46:8f:b3:2e:
         4a:ce:0f:3a:c3:33:18:c3:38:a7:a5:23:46:22:e5:59:e9:55:
         ee:d1:88:1d:32:40:c7:3b:f7:35:36:77:58:61:4b:73:d9:de:
         9c:fa:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:39:46 2025 by rpki-client