Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          RT5MsXw7LBJqdpWSdRBzgeC/lyIGvmNQRAOnCilBijw=
Subject key identifier:   05:8C:C3:D8:12:7A:B3:75:BF:00:7A:B9:F7:A1:60:7F:9B:DF:6F:74
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          03DB
Signing time:             Mon 02 Jun 2025 23:30:55 +0000
Manifest this update:     Mon 02 Jun 2025 23:30:55 +0000
Manifest next update:     Mon 09 Jun 2025 23:30:55 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: VpojsqUOXfjvsLA41bfgGBDYXfnVtLlqpxBneCmxX7U=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jun  2 23:30:55 2025 GMT
            Not After : Jun  9 23:30:55 2025 GMT
        Subject: CN=683e342f-3804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:16:71:00:9d:47:f3:05:26:bf:77:0c:37:
                    27:b1:73:40:d6:84:ae:da:c7:3b:c8:46:a4:d0:cd:
                    ab:0e:e6:ae:ca:c9:64:df:24:67:87:c3:d7:e1:0a:
                    11:e4:2c:da:f5:05:12:9b:74:12:12:74:17:0d:e5:
                    5b:e4:ac:ed:2f:a9:3d:c0:7c:7c:2a:8b:c0:e5:fb:
                    16:68:d0:3b:74:a2:36:ad:86:8f:73:90:46:25:fd:
                    08:b8:d7:18:92:fa:a8:0a:6c:39:55:b0:e2:60:6e:
                    60:cb:32:0c:26:a8:7e:db:9a:bd:e2:d5:2a:f3:88:
                    ef:da:81:4e:c7:90:fe:a6:48:cc:52:ad:04:75:b6:
                    a4:63:ce:f4:81:5b:66:df:37:6b:13:40:58:04:be:
                    80:bf:9b:7d:b3:9e:70:65:6e:22:aa:82:2f:9e:0b:
                    2e:b9:5e:87:6e:39:9e:8f:23:86:ce:16:92:fc:f0:
                    f3:a3:fb:19:83:e2:15:96:29:39:0f:db:e9:4d:30:
                    7d:33:69:2a:c4:e2:f7:f2:8c:50:1e:bc:68:85:c8:
                    d1:6c:cc:6c:cd:74:2d:7f:5f:1f:7c:49:cb:39:8c:
                    9a:3a:51:c1:2f:cc:7a:d1:aa:3c:5c:06:25:bb:23:
                    7e:3f:21:0a:40:e3:87:fd:04:78:6c:ad:15:93:20:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:C3:D8:12:7A:B3:75:BF:00:7A:B9:F7:A1:60:7F:9B:DF:6F:74
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:d4:c8:0c:ce:eb:95:d3:e8:ac:e5:d5:3b:ed:fa:cd:e4:
         78:60:1b:f7:07:e8:8f:3c:76:e2:60:81:85:cd:42:0f:e3:b6:
         cf:74:d0:c6:25:3d:bf:7e:65:9a:7f:8a:1b:83:f6:62:46:17:
         98:c8:16:a7:3b:68:e0:1c:06:d5:53:0f:c6:00:a1:2a:a2:31:
         74:f8:4e:39:e3:45:6f:d0:74:44:e8:07:d0:5c:5e:bd:e7:7e:
         78:bc:95:89:af:24:a5:13:f1:fd:81:d6:18:05:e1:a4:b1:37:
         0b:42:a6:78:7b:ea:41:0c:71:54:b0:9c:54:3c:d0:b7:e8:18:
         e5:70:0e:a7:ce:e7:6d:f4:96:87:32:6f:32:10:05:75:48:92:
         36:1c:fd:0d:3b:44:db:d1:1b:83:d9:cd:11:95:b0:f1:69:1d:
         a7:49:66:63:e4:58:80:01:4d:9d:dd:15:5b:66:cc:e5:4d:49:
         e9:bf:85:81:a4:71:65:77:13:78:26:a9:78:ea:98:fb:e3:93:
         20:cb:c1:a4:de:9a:89:4e:f3:dd:6a:56:41:09:64:fd:b3:4b:
         93:93:14:47:9b:bd:6b:82:6e:b5:57:1e:39:6d:37:f9:c0:71:
         cb:d4:5c:ba:55:e6:dd:d7:9d:04:35:c7:31:e6:b8:d4:91:c7:
         5a:0f:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:19:51 2025 by rpki-client