Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File:                     u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier:          Y1yk9sPii9j8foew0CSPe4vIBBAApiPCVkJi57WyHAc=
Subject key identifier:   09:32:B6:2F:81:AC:F8:7F:6B:70:85:D0:DB:3A:A9:CB:00:7F:FD:B2
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer:       /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number:          4E
Signing time:             Mon 07 Jul 2025 07:39:00 +0000
Manifest this update:     Mon 07 Jul 2025 07:39:00 +0000
Manifest next update:     Mon 14 Jul 2025 07:38:59 +0000
Files and hashes:         1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: /iO7Md/gGmHazIpILWgstzDRvaBZ5veM+kyqTsFOjio=)
                          2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Jul 2025 07:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
        Validity
            Not Before: Jul  7 07:39:00 2025 GMT
            Not After : Jul 14 07:38:59 2025 GMT
        Subject: CN=686b7994-f7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:d3:43:47:81:8e:0a:e3:86:2d:ca:6f:5c:
                    0e:ff:ed:29:ed:82:fa:e1:9e:ce:92:91:60:d9:b8:
                    3e:82:21:e5:a3:b4:ca:d6:a9:7b:cd:fe:56:a0:f8:
                    4b:ff:50:3d:09:b4:08:dc:e2:8f:97:d4:d3:09:46:
                    5a:ad:20:42:b9:60:d3:5b:8a:f5:51:2b:76:27:56:
                    7c:76:85:92:f2:d0:9b:82:83:3a:d4:4a:16:3e:e7:
                    8d:1e:c5:fa:42:3a:91:51:ae:24:a0:6a:a7:dc:ec:
                    db:83:0d:e8:33:eb:ab:70:b3:18:c3:81:0a:47:4b:
                    5d:47:55:52:5d:b4:d8:b4:6e:ba:58:52:e3:87:e9:
                    67:fc:dc:0a:3f:85:52:6d:8b:f0:cd:48:a5:77:f2:
                    18:6c:55:cf:c9:de:16:4c:59:dc:04:3e:9c:dc:0a:
                    24:80:58:cd:dc:d9:95:50:3b:4e:b5:a0:45:59:d5:
                    9c:b0:7c:6e:ec:95:52:19:57:21:95:41:e3:8d:20:
                    77:75:15:dc:28:d4:d9:32:77:0a:58:3a:bb:40:89:
                    98:e7:ba:9c:df:30:eb:ff:32:36:5b:43:05:88:cd:
                    49:b1:eb:3e:fb:39:6b:33:8d:9e:68:5f:f4:ac:32:
                    1f:32:f1:bf:38:88:4e:5f:25:99:4b:d5:f7:44:26:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:B6:2F:81:AC:F8:7F:6B:70:85:D0:DB:3A:A9:CB:00:7F:FD:B2
            X509v3 Authority Key Identifier:
                keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4c:cd:34:66:56:49:fd:61:c3:29:fa:a1:d1:10:1f:ef:09:
         a1:9a:4d:77:6e:18:05:85:e7:69:4a:38:6e:b7:5d:96:bc:45:
         03:48:41:91:7b:56:5b:3b:19:73:c8:1d:60:e1:f3:9d:16:86:
         f2:58:26:c4:34:87:82:14:62:8a:6a:e8:38:43:8d:6a:b5:5b:
         3b:e5:7e:1f:d8:81:69:bb:13:bb:7e:18:d2:7f:f1:a9:fd:ca:
         bd:c1:39:63:ed:f8:66:0c:54:7a:5a:4b:92:10:9f:d3:53:c7:
         af:6c:e7:3b:bb:6e:9b:3d:68:f6:1d:1a:17:26:93:d7:a2:9b:
         e2:50:f3:07:c2:78:af:c6:fc:79:36:c2:32:d8:28:3c:87:d5:
         6a:b6:59:6e:9b:59:97:05:5d:2a:58:93:d8:99:3e:1f:21:96:
         1e:09:a4:ae:a0:5e:66:d2:26:ab:dd:2b:da:4e:84:85:6b:15:
         a8:59:0c:ca:8c:b8:2f:b8:e4:bd:7d:76:18:c4:01:aa:48:67:
         0e:02:da:29:c9:ba:50:c2:8b:4a:4a:75:81:42:05:2d:37:a2:
         15:b8:4b:36:8d:64:4d:61:a0:a8:31:a9:26:05:f2:9c:4d:9a:
         ac:7f:61:71:2a:7e:52:ee:e4:ef:0d:aa:c8:54:8e:40:e2:2e:
         e6:f6:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 09:26:39 2025 by rpki-client