Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          KXKUdVp9B4Dmpre9aXe6GihbQ4pS3HBdif72k9N6a2A=
Subject key identifier:   60:D8:B3:4C:D0:49:2F:93:D8:9E:1B:29:BA:C3:2A:7D:D9:8D:C3:AF
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          FE
Signing time:             Sat 31 May 2025 04:45:26 +0000
Manifest this update:     Sat 31 May 2025 04:45:25 +0000
Manifest next update:     Sat 07 Jun 2025 04:45:25 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: 5suKPwoHBhGezzx/LHVvUWwqhOwdiiqKjYtrbqAcRR0=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: x9GRsqT1r4p+1r+DiQJUITI9RcFAyXCGhnRIsXkFNWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: May 31 04:45:25 2025 GMT
            Not After : Jun  7 04:45:25 2025 GMT
        Subject: CN=683a8966-462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bd:f3:e9:ed:08:0f:52:a2:7c:09:b9:89:ce:
                    dd:96:14:5e:59:98:d0:1d:9a:3b:3b:48:fb:36:26:
                    0c:79:4a:ac:44:98:0f:13:9b:7d:ed:db:54:4e:f0:
                    84:c0:6f:d8:10:8d:c6:90:a7:e0:7e:91:37:79:7b:
                    e4:fb:82:36:73:4d:6f:b1:1d:ef:14:f7:16:2e:fc:
                    3c:e8:72:51:96:24:2e:1d:95:56:80:38:5a:e1:d9:
                    6b:97:43:11:36:9c:5a:f4:44:db:49:fe:77:e4:80:
                    78:38:7c:59:94:64:45:ca:48:7b:85:04:1a:d5:46:
                    17:b0:61:2f:d4:e4:ef:24:80:43:63:4a:db:0a:7d:
                    c1:06:a4:16:fd:10:58:16:0f:34:27:57:0c:42:a2:
                    b3:19:e9:48:35:40:79:e9:bc:55:e3:67:c4:4d:0e:
                    1c:15:6e:da:0e:14:85:42:f7:3a:88:31:6a:a4:cd:
                    df:5a:29:3f:4d:41:81:2d:76:98:f7:d3:3d:ad:0a:
                    06:72:66:b1:27:14:d1:a3:12:f9:c4:2c:92:af:67:
                    c8:ec:f7:fb:ac:63:39:ce:4d:ea:ae:2a:69:ea:e2:
                    7b:ec:33:aa:57:47:1d:57:56:0b:49:8a:84:ac:56:
                    10:7b:42:59:f9:25:79:62:a2:87:ca:0c:ec:19:81:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D8:B3:4C:D0:49:2F:93:D8:9E:1B:29:BA:C3:2A:7D:D9:8D:C3:AF
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:55:ff:27:46:3f:19:62:86:df:e8:17:a2:93:c6:32:35:ec:
         73:46:d6:3a:10:a1:b6:c1:4b:a0:3e:01:f4:af:59:46:76:45:
         a9:d8:6a:f7:37:54:df:a3:02:87:76:ce:e2:39:40:fe:76:b7:
         e9:84:13:61:cc:8d:a9:0e:21:10:79:02:29:1b:27:4b:d0:73:
         ae:63:5c:dd:76:ce:45:46:0f:f4:fb:47:92:82:7f:9a:50:4e:
         41:70:5b:4e:03:66:17:a6:e4:9c:ee:7e:ea:4f:65:3f:f1:cb:
         94:fd:14:95:98:f2:37:57:b5:4e:6b:b5:26:8e:a3:72:f9:1a:
         62:a0:1f:a9:50:ad:47:92:b7:ba:3e:fc:4d:12:a0:f0:67:11:
         29:e9:7e:19:b9:87:77:5b:c1:c8:ca:7d:fd:b2:c2:16:65:e1:
         40:58:c2:b3:79:9c:8c:9e:46:7f:6f:25:fd:9e:68:62:0f:72:
         3f:e2:38:dc:23:29:c3:e1:73:92:70:3b:cd:67:12:70:e6:5d:
         a5:47:85:b9:24:3f:5c:a4:35:74:35:0f:b6:b9:51:fc:2e:21:
         a6:e1:c2:7e:77:e4:5b:b6:df:4b:0c:b7:5b:16:7e:c9:d6:39:
         50:13:0a:0a:70:29:2b:79:eb:17:87:c7:c3:5d:a6:2a:28:21:
         5b:d6:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:30:37 2025 by rpki-client