Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
File:                     3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json)
Hash identifier:          lgVcg4A9InXGnFx3lnmuuXtoELfDWrmmg89SyRxkNmQ=
Subject key identifier:   8C:89:38:0E:EC:8D:48:A3:9F:0C:E2:BD:E8:A9:51:F4:68:0A:18:22
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Certificate issuer:       /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial:       1EAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
Manifest number:          1E96
Signing time:             Thu 12 Jun 2025 16:01:14 +0000
Manifest this update:     Thu 12 Jun 2025 16:01:13 +0000
Manifest next update:     Thu 19 Jun 2025 16:01:13 +0000
Files and hashes:         1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: lYiT/SuxU1tAZNQQEmZNcIWvYbKcwD/rRcIjjJ7Qahk=)
                          2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: h0HyLn8ocWGb9KjF4xTUCCRX3RLDUFI2FgHziz/KxqQ=)
                          3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
                          rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7853 (0x1ead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
        Validity
            Not Before: Jun 12 16:01:13 2025 GMT
            Not After : Jun 19 16:01:13 2025 GMT
        Subject: CN=684af9c9-6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9b:ec:bb:65:37:b3:13:61:31:9d:df:cf:c9:
                    f1:3a:c4:04:ec:43:f6:c2:2f:fa:49:ce:f0:65:bd:
                    78:59:cf:3b:03:a1:72:2d:9b:28:66:fa:cf:ec:73:
                    2d:38:f5:0b:90:7c:ab:fb:ea:5b:62:dd:54:60:af:
                    be:bd:20:2e:44:55:c5:e9:43:45:f7:bf:61:ee:f9:
                    8d:0d:33:34:94:da:c6:ad:d4:74:5c:52:df:a8:ef:
                    c9:2d:23:bd:0e:a0:8a:a1:e5:8c:d2:84:29:7f:91:
                    c0:3c:5d:1e:e4:7d:36:ae:3e:37:4b:eb:c6:9a:83:
                    e1:04:de:c5:e4:7e:1d:f5:31:2d:02:28:af:90:ec:
                    6e:a6:10:d0:ee:6e:4e:eb:6d:2e:33:0e:99:85:2a:
                    0e:25:ce:dc:94:49:34:cc:a2:00:e8:2c:cd:74:ac:
                    c7:c9:f3:31:fb:d0:ff:d8:07:71:bd:f9:26:bc:71:
                    0e:07:af:38:70:d2:ac:ff:95:6a:c5:da:b1:f1:8b:
                    ad:65:9c:30:c3:c4:e6:59:80:df:07:17:7f:e2:d1:
                    0b:42:2d:cb:a3:3c:92:8a:c2:d2:da:32:03:19:96:
                    61:a8:55:00:3c:1c:4e:15:7d:25:91:4c:ad:30:72:
                    78:81:71:ae:7b:fc:b4:f6:ed:0a:70:a2:97:c3:ea:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:38:0E:EC:8D:48:A3:9F:0C:E2:BD:E8:A9:51:F4:68:0A:18:22
            X509v3 Authority Key Identifier:
                keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:b4:a2:e0:72:83:2a:28:3a:ec:20:7c:e2:ec:7b:88:2f:
         1d:ca:1e:da:36:69:90:2c:e8:62:c1:ae:51:f4:0c:37:19:2c:
         2d:94:3d:4c:db:0f:fc:23:c9:8b:8a:6a:08:d3:35:72:ae:1c:
         c9:94:0f:f0:1a:1b:16:4b:2b:bf:61:7e:4c:0e:b0:22:3d:a0:
         8f:4d:19:f7:da:1e:66:55:34:8e:d7:4a:49:53:67:c9:87:1e:
         d5:52:32:36:46:91:24:8d:eb:62:07:75:88:37:fb:14:e7:03:
         45:00:00:66:78:f9:49:9c:d1:1d:40:d9:f5:87:d1:bd:52:61:
         50:ae:dd:0a:f0:d3:d4:b2:ca:ce:12:4b:7d:e8:b2:d4:e0:e9:
         fe:6c:24:29:74:ae:a4:bb:a9:f2:4a:ac:a8:eb:39:79:2e:0c:
         6b:eb:93:c3:84:76:83:35:9c:d0:86:8b:bf:7c:b4:f1:61:7d:
         87:4b:6d:c4:3c:0a:7e:a7:71:38:47:19:2e:59:9e:6e:8f:79:
         51:aa:54:c7:57:2e:36:a0:0f:10:04:ff:fd:40:d3:9d:2a:33:
         28:63:fb:e7:de:e9:84:7e:b9:bc:d8:2d:d1:eb:5e:df:0c:e0:
         92:36:b3:be:a0:7d:50:ea:43:49:22:44:9b:9f:9f:6f:d2:b2:
         83:c2:5d:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB
RjkzMzQxRDIwHhcNMjUwNjEyMTYwMTEzWhcNMjUwNjE5MTYwMTEzWjAYMRYwFAYD
VQQDEw02ODRhZjljOS02Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45vsu2U3sxNhMZ3fz8nxOsQE7EP2wi/6Sc7wZb14Wc87A6FyLZsoZvrP7HMt
OPULkHyr++pbYt1UYK++vSAuRFXF6UNF979h7vmNDTM0lNrGrdR0XFLfqO/JLSO9
DqCKoeWM0oQpf5HAPF0e5H02rj43S+vGmoPhBN7F5H4d9TEtAiivkOxuphDQ7m5O
620uMw6ZhSoOJc7clEk0zKIA6CzNdKzHyfMx+9D/2AdxvfkmvHEOB684cNKs/5Vq
xdqx8YutZZwww8TmWYDfBxd/4tELQi3LozySisLS2jIDGZZhqFUAPBxOFX0lkUyt
MHJ4gXGue/y09u0KcKKXw+prewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyJOA7s
jUijnwziveipUfRoChgiMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG
RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh
SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7XbSi4HKDKig67CB84ux7iC8dyh7aNmmQLOhiwa5R9Aw3GSwtlD1M
2w/8I8mLimoI0zVyrhzJlA/wGhsWSyu/YX5MDrAiPaCPTRn32h5mVTSO10pJU2fJ
hx7VUjI2RpEkjetiB3WIN/sU5wNFAABmePlJnNEdQNn1h9G9UmFQrt0K8NPUssrO
Ekt96LLU4On+bCQpdK6ku6nySqyo6zl5Lgxr65PDhHaDNZzQhou/fLTxYX2HS23E
PAp+p3E4RxkuWZ5uj3lRqlTHVy42oA8QBP/9QNOdKjMoY/vn3umEfrm82C3R617f
DOCSNrO+oH1Q6kNJIkSbn59v0rKDwl0T
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:36:51 2025 by rpki-client