Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          YdZEM/5lb3CaYWtQ4e5ZHiGookht8OOKLGVCH2OR+m4=
Subject key identifier:   26:4F:44:9B:F1:96:97:10:03:39:61:F4:4C:3B:10:F5:4D:A3:DA:EE
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0C40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0C30
Signing time:             Fri 30 May 2025 18:45:49 +0000
Manifest this update:     Fri 30 May 2025 18:45:48 +0000
Manifest next update:     Fri 06 Jun 2025 18:45:48 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: HICeKfl2oAQTahjiMUy/NWJbqdV8nkPgFBKLvwoUxCo=)
                          2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=)
                          3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: May 30 18:45:48 2025 GMT
            Not After : Jun  6 18:45:48 2025 GMT
        Subject: CN=6839fcdc-47fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:ef:74:90:35:fb:b6:65:8b:a8:6e:ee:91:
                    d5:71:64:df:48:2d:e1:86:4e:ef:e6:03:70:58:43:
                    f5:e9:60:99:33:26:8a:b7:1b:82:e5:15:55:f6:4a:
                    86:cf:1c:e9:a1:99:55:63:30:9c:d3:54:b8:2f:c5:
                    22:0f:d2:dc:d0:a5:10:f4:08:9c:45:a6:b7:bb:70:
                    5b:ee:a4:38:98:44:1e:90:cd:ee:43:cf:95:a7:c7:
                    47:b0:bb:38:9c:68:58:d1:db:8d:1a:ba:0c:5f:fc:
                    2a:ba:c9:78:d5:df:b6:8c:03:6c:10:ec:5e:ae:2f:
                    6d:b7:b1:b3:63:76:9b:46:c0:b9:af:30:d7:ce:ed:
                    7d:f7:89:9f:50:84:85:c3:00:0b:be:93:f5:23:77:
                    bb:f7:c9:3a:b5:f0:57:b1:de:4b:9a:28:bc:fe:2f:
                    26:2f:b8:57:af:4b:c3:09:c0:0e:22:ea:df:d6:1b:
                    7a:1d:f1:42:0f:14:1b:aa:a7:fa:fb:b6:92:a2:45:
                    3a:23:6f:12:44:da:b3:dd:74:a0:09:0e:0c:77:aa:
                    0a:50:3a:d0:9c:fc:44:52:ad:cf:c1:36:11:04:f0:
                    83:b3:b2:30:71:d4:76:05:a3:3a:29:56:1a:51:32:
                    79:38:45:7f:38:cd:58:f6:e9:b8:e6:16:87:4d:9f:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:44:9B:F1:96:97:10:03:39:61:F4:4C:3B:10:F5:4D:A3:DA:EE
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:a3:3c:84:5b:12:2c:1c:41:af:8d:9f:61:38:74:a3:ea:
         62:68:14:2f:fc:28:f7:75:1f:bb:a2:dd:df:28:1e:a7:57:e7:
         4e:ba:3e:73:1d:77:9c:0f:75:70:3b:2c:f3:79:88:b5:6f:1f:
         4b:bf:12:d9:a7:d9:58:3f:05:fb:5a:df:9a:c1:97:83:fd:9c:
         9a:5a:5e:10:1c:b2:83:40:d8:f4:46:68:d8:d0:4f:db:51:51:
         7a:a0:83:39:0a:18:54:6c:b6:9b:d1:67:8f:25:5f:7e:a6:cf:
         88:72:03:e7:3e:44:55:57:ee:39:eb:72:02:2d:fb:ef:38:e3:
         d7:d9:56:d1:9d:a8:6c:61:2c:4c:09:9f:bd:4b:02:80:ca:96:
         30:89:d7:91:24:16:c7:f3:4a:89:85:0c:28:95:52:bf:4a:1d:
         ff:5c:3c:00:5c:76:f9:01:eb:1d:82:1d:1e:d0:31:76:ba:04:
         27:39:52:bf:e7:cc:a4:fd:c8:50:32:2e:2c:e9:47:74:11:de:
         fa:b2:59:7a:5d:a0:c1:c5:d4:1c:5f:b0:dd:cb:2a:a9:e1:09:
         4f:c5:e7:4a:66:fe:83:1e:4f:bb:32:55:f2:95:31:d8:00:2b:
         7a:dc:9a:48:f2:bc:82:f1:8b:f9:58:21:08:1c:2c:56:db:07:
         ea:cf:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:11:19 2025 by rpki-client