Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
File:                     V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json)
Hash identifier:          s7mJvnI8Bj4cBs/03gHs9RdP/eUBaVH2B/foxOvYFsE=
Subject key identifier:   F0:98:EE:DB:D2:57:85:04:4D:42:38:49:A4:50:70:E9:0F:46:96:1B
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Certificate issuer:       /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial:       103A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
Manifest number:          101E
Signing time:             Fri 30 May 2025 17:37:03 +0000
Manifest this update:     Fri 30 May 2025 17:37:02 +0000
Manifest next update:     Fri 06 Jun 2025 17:37:02 +0000
Files and hashes:         1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: gK2e/VoipPkcbXXEedghlOVPAl59qD7x2A3r5+2/vjA=)
                          2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: bXgEyT98R8thRPsYUWy4Fp7WrzYnlZBS5iobweOZ0lw=)
                          3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: C95dcxmbgG9m0J5QHw9VXXRl9oV1Z68MXGZ2KXxsrFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
                          rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4154 (0x103a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
        Validity
            Not Before: May 30 17:37:02 2025 GMT
            Not After : Jun  6 17:37:02 2025 GMT
        Subject: CN=6839ecbf-7722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:5d:76:82:7f:25:50:31:25:68:f9:3f:62:
                    00:3a:d2:9a:d3:96:6c:53:8e:a5:05:02:c9:cc:9c:
                    04:c1:8e:8e:f7:69:eb:12:f7:5d:e0:f4:f9:19:11:
                    73:46:72:dd:61:14:56:e4:a1:82:e6:1d:42:04:e4:
                    73:81:f0:8b:1c:bd:84:84:78:be:f7:e3:b0:d2:f4:
                    d1:49:0c:a7:8b:95:24:25:eb:c4:44:43:68:3a:a0:
                    4c:6d:ff:e0:9f:fc:dc:da:14:ee:40:f8:6e:ac:8e:
                    8b:64:92:17:e3:79:4d:89:9a:a4:3b:c2:5d:71:9d:
                    21:00:9e:73:aa:01:81:2d:b7:19:5e:2c:38:aa:a3:
                    fc:40:2d:05:19:f1:4d:14:f0:c5:07:b6:da:3c:e9:
                    91:f8:d4:1e:76:27:23:4f:72:21:a7:f2:45:0a:06:
                    bf:bd:f9:5b:4c:a7:b2:1e:e9:d3:e0:61:4b:29:c4:
                    da:56:71:88:8d:5d:c3:a6:e8:e2:93:fd:68:aa:52:
                    6b:d2:44:e4:de:bd:0d:bc:10:21:38:90:96:88:c1:
                    26:3f:f8:45:0b:27:9c:3d:70:96:0c:43:d6:ed:ae:
                    07:1b:1a:73:0b:dd:25:a4:43:a3:df:c7:58:bc:f0:
                    f9:89:db:e7:61:93:6e:bd:6e:8a:16:04:89:52:6d:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:98:EE:DB:D2:57:85:04:4D:42:38:49:A4:50:70:E9:0F:46:96:1B
            X509v3 Authority Key Identifier:
                keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:c8:17:3b:cd:b2:cc:cc:f8:e3:9e:70:80:d2:71:86:aa:8a:
         38:d7:88:b3:02:ec:41:14:d8:db:f8:da:13:70:6d:97:62:6c:
         46:84:8f:50:11:74:33:8c:14:4b:dd:a5:99:d7:46:3d:bd:5f:
         41:b1:88:55:90:de:23:28:aa:15:34:41:d2:db:72:ca:27:61:
         66:25:d7:4d:d1:04:aa:1c:46:7c:5b:12:f1:f4:50:1f:19:05:
         50:28:33:d3:7c:4d:56:2c:58:bc:69:db:7a:19:f1:79:a3:34:
         b5:e4:d9:ad:ce:2b:6d:f0:b3:24:c9:35:46:cb:9a:09:1f:93:
         92:d4:5e:82:c7:8d:75:e8:85:8f:9b:de:b6:6d:3d:27:5f:b5:
         11:c0:11:80:ee:52:08:f5:cc:51:a7:9d:ed:3a:45:92:70:5b:
         ef:d6:ce:89:87:45:d8:b5:0c:82:2d:ca:08:23:7f:14:bb:73:
         30:33:51:5a:f6:c0:50:13:23:9a:a7:ff:5c:e0:e0:6d:4f:d9:
         a2:54:2f:b7:ab:f4:b3:4f:79:dd:32:d8:08:c5:0a:29:23:98:
         eb:84:48:0d:86:2f:c9:f4:b2:1b:c4:7e:c1:e0:cc:86:ae:01:
         94:3a:d2:93:fb:e6:d9:ad:65:34:d2:e2:b0:30:55:b3:4b:9f:
         f4:4c:12:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:35:58 2025 by rpki-client