Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File:                     lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier:          mD1qQhmn9H2TqpJOINK0CfIWPC3kRhwkGHI2q+YJZec=
Subject key identifier:   7D:8A:6A:9A:14:1A:A1:4F:09:F2:48:11:E7:C8:3C:82:0D:95:F6:8D
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number:          CF
Signing time:             Wed 11 Jun 2025 05:04:42 +0000
Manifest this update:     Wed 11 Jun 2025 05:04:41 +0000
Manifest next update:     Wed 18 Jun 2025 05:04:41 +0000
Files and hashes:         1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: bmPaDpdok4hxgnESdq0ajrJ+5wzybxq9hnAL6Ci2Tac=)
                          2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 05:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: Jun 11 05:04:41 2025 GMT
            Not After : Jun 18 05:04:41 2025 GMT
        Subject: CN=68490e6a-f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:90:83:58:c4:8a:d3:ff:50:42:cb:00:4f:
                    8a:d7:bc:b1:31:9e:6f:63:62:37:5d:55:1c:fb:d9:
                    40:b9:13:92:69:d9:c3:39:5f:bf:94:cd:bb:92:6b:
                    0e:c0:91:f4:21:d8:de:36:18:02:db:21:48:1d:a2:
                    49:5d:e3:d8:f2:b2:a4:44:95:0f:68:bf:02:74:0d:
                    11:70:e5:d2:3b:ea:8f:de:8a:07:96:16:63:fc:bd:
                    00:ab:2c:db:e7:b0:d5:c0:a7:90:7c:4e:b0:3d:a1:
                    03:3a:6a:b2:5e:dd:3f:c4:f2:ed:21:33:cc:41:59:
                    01:c3:fc:52:83:5c:3f:01:cc:6b:9f:ee:09:47:e2:
                    04:5d:96:0d:48:27:97:e9:28:a2:cb:9b:9f:ff:17:
                    7a:32:13:9c:66:5c:fd:6e:9d:07:55:95:41:0c:a1:
                    27:3a:78:3b:ed:50:e4:50:e8:36:6a:9b:2a:3d:21:
                    9b:97:c8:9d:be:d5:ac:df:6e:38:c7:32:23:9a:8c:
                    ff:8f:23:b0:34:45:8f:15:a3:d9:9b:b7:ae:31:e7:
                    0b:66:14:f0:ad:c4:eb:b7:95:ab:0d:70:4f:37:4b:
                    f9:db:1d:b1:d1:5d:54:fd:6f:48:bc:94:b9:8e:a5:
                    2f:67:e6:97:cb:14:4f:9b:80:b8:c8:be:a8:a2:51:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8A:6A:9A:14:1A:A1:4F:09:F2:48:11:E7:C8:3C:82:0D:95:F6:8D
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:85:cd:5e:90:fe:ae:2d:7e:fb:cd:59:41:c8:0c:b5:8e:a4:
         4c:0c:7b:c0:2e:01:c8:05:14:54:0f:b2:41:30:73:ab:f9:9a:
         46:f6:99:f1:91:ad:86:af:95:13:64:9c:ae:19:11:98:40:0c:
         e5:f4:2e:c0:6d:ff:a8:c8:77:95:ea:93:10:ce:dd:33:f7:48:
         06:d2:6e:9d:3d:f6:6f:11:26:f8:3f:e8:cc:3d:ad:1d:51:4d:
         c3:6b:f4:a8:8e:e9:24:8d:f0:45:39:66:3e:6c:94:12:90:69:
         de:87:43:45:93:46:b3:3d:5e:e6:d4:ca:7f:23:a9:48:ca:0f:
         1e:a2:75:d1:cd:33:a3:52:cc:0c:bd:2c:ad:90:21:9f:64:b1:
         05:d4:d5:ce:df:71:1b:1a:0e:f0:18:75:be:f6:98:85:cf:9d:
         29:2b:07:ed:ff:d4:dc:8c:2d:12:0e:f7:15:2f:4c:46:ab:f7:
         40:b5:3c:35:40:96:3f:6f:5c:b0:7f:85:d4:6c:e6:3e:51:a7:
         91:d9:f4:36:0b:69:fd:23:70:b5:ee:d0:0d:3a:e8:78:62:40:
         76:3e:f5:96:dc:c0:6e:21:8a:67:2b:9c:df:e6:28:01:86:84:
         0e:6c:35:3d:85:f0:ae:9e:df:be:be:b6:33:9e:77:ff:96:f4:
         10:3b:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:12:57 2025 by rpki-client