Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
File:                     3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json)
Hash identifier:          mENvuHOCLAZe6ASzpmfkPDUL7uttHzPqEqCVVnokpN8=
Subject key identifier:   E3:8D:81:58:19:2C:9E:6C:02:54:4E:F9:A6:32:27:1B:D0:AD:9A:1D
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Certificate issuer:       /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial:       1EAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
Manifest number:          1E95
Signing time:             Tue 10 Jun 2025 16:04:00 +0000
Manifest this update:     Tue 10 Jun 2025 16:04:00 +0000
Manifest next update:     Tue 17 Jun 2025 16:04:00 +0000
Files and hashes:         1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: DVVqzQq0YMDJZrCM5fkT29B40+wMGIoGSBp2NBCsUyY=)
                          2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=)
                          3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
                          rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 16:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7852 (0x1eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
        Validity
            Not Before: Jun 10 16:04:00 2025 GMT
            Not After : Jun 17 16:04:00 2025 GMT
        Subject: CN=68485770-616d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:0d:66:db:b6:cd:14:6d:6d:cc:8d:b1:84:
                    46:3a:37:97:2c:23:7a:7f:cb:fb:6f:1c:b7:37:3a:
                    05:5f:c7:a7:75:34:26:9c:37:8e:5f:5a:de:5a:c4:
                    d2:64:24:0e:ee:0a:e4:52:b7:af:78:9d:74:34:bc:
                    29:ed:4d:eb:ab:ec:52:6d:79:87:a6:61:64:0a:56:
                    7b:71:ca:d1:60:46:10:18:fc:a8:5b:5a:4b:8c:58:
                    b3:5a:49:51:e2:f6:ba:6a:80:cd:b5:09:45:f5:0d:
                    0a:d8:d2:ea:70:50:7f:ed:4c:32:43:48:26:ce:00:
                    b8:07:91:d9:3f:cc:88:b2:ca:48:14:4b:df:7c:92:
                    d1:41:a5:00:e2:1b:4e:c2:2a:64:42:9c:e8:4f:95:
                    ba:15:8c:0f:74:41:41:c3:80:a4:6a:f9:85:cc:5d:
                    73:22:0a:46:fb:75:4c:f3:4f:c1:6e:95:c7:bb:67:
                    e5:5b:a4:59:c6:3b:ad:29:da:40:c4:2f:02:e9:9c:
                    2c:52:d5:63:7a:4d:da:bf:c9:30:28:df:ee:3c:48:
                    71:c1:5c:6b:dc:b4:ca:a8:b6:d5:3d:a8:9e:33:5c:
                    b4:c0:7a:e7:16:9d:26:92:bf:55:61:0d:7e:76:2e:
                    3d:f2:c4:84:53:8a:c9:77:30:ca:d2:a1:7f:92:9d:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8D:81:58:19:2C:9E:6C:02:54:4E:F9:A6:32:27:1B:D0:AD:9A:1D
            X509v3 Authority Key Identifier:
                keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:04:d8:68:b0:2d:da:d4:36:61:8f:d6:0f:6e:14:13:7e:
         34:36:e4:4a:36:ec:8e:f1:a3:88:d9:ad:5d:04:5d:1a:32:b4:
         c7:d8:e2:b5:b4:c2:62:76:8b:5d:40:97:77:70:14:18:43:8b:
         c8:31:00:90:cb:f3:11:02:86:46:8c:a4:85:8a:2e:e0:8d:06:
         40:de:94:a0:22:e7:0a:28:f1:91:80:dd:73:ab:80:be:13:78:
         8b:bb:d2:30:b1:63:d3:7a:83:41:9e:4a:89:1f:47:e5:ac:7f:
         79:17:91:c8:22:b4:b4:da:f1:46:ad:53:32:2e:a8:a4:a4:27:
         ed:c0:06:17:a9:35:29:a2:60:37:07:e6:fa:5a:cf:62:ad:23:
         3b:29:d3:11:b5:2a:e1:dc:88:70:c8:da:fc:78:9e:c2:7e:2e:
         7d:f3:4d:93:c3:de:7e:cd:b0:94:85:fd:c5:05:17:1d:21:c7:
         d4:c8:7f:f5:fe:ca:a5:8b:d5:9a:da:66:8f:8c:23:dd:f3:ba:
         d1:41:b3:84:aa:66:77:cf:a7:be:40:a2:78:2d:25:53:29:63:
         69:6d:60:8c:c6:8c:a1:60:ab:92:45:c1:b5:5b:e5:8e:bd:53:
         de:80:09:d2:e8:36:61:9e:36:b6:d0:33:b1:c7:e9:53:22:7b:
         9b:4f:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:46:20 2025 by rpki-client