Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
File:                     47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json)
Hash identifier:          C3ZKU0Lm0vr7cEi3252q0k3GsKHfaktjjkwKMJOHeM4=
Subject key identifier:   46:28:78:96:90:6B:3D:42:46:79:EB:0B:D8:6E:BF:C4:AF:E3:76:C0
Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7
Certificate issuer:       /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
Manifest number:          0732
Signing time:             Fri 30 May 2025 21:58:35 +0000
Manifest this update:     Fri 30 May 2025 21:58:35 +0000
Manifest next update:     Fri 06 Jun 2025 21:58:35 +0000
Files and hashes:         1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: L7JU9nOf83/stzfh1fUUD2q7HhoVydMf2bEmRrs0IXA=)
                          2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: xD5zoFxi5V/haijCFX+sW8lJO7TZJGfn2t06N67wG1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl
                          rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
        Validity
            Not Before: May 30 21:58:35 2025 GMT
            Not After : Jun  6 21:58:35 2025 GMT
        Subject: CN=683a2a0b-2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:bb:07:ed:e1:53:c8:e8:0e:39:a8:63:11:
                    43:ca:3a:03:62:37:9f:b9:d9:52:f1:14:77:ef:6f:
                    5b:e6:1f:03:43:23:89:8b:38:db:0e:e1:f3:40:d9:
                    2f:e0:9e:a2:f9:f1:ad:e0:9f:08:00:33:47:5d:df:
                    e4:56:c6:a1:48:46:6b:62:30:a4:5b:a1:8e:90:e0:
                    99:bf:14:48:dc:4d:27:d5:03:a4:4f:53:ec:9c:c5:
                    68:3d:da:6e:2d:46:44:82:ab:a9:ce:23:ea:c7:53:
                    d7:d0:aa:35:b4:70:d0:33:17:f2:96:71:bc:c8:bf:
                    e8:9f:b7:65:78:aa:b7:c3:b2:bd:0c:6e:2a:2c:34:
                    ea:9c:6c:d3:fc:d0:4d:f5:50:a9:70:ac:c7:3c:69:
                    0e:80:bf:f1:a4:13:c6:20:33:bc:db:97:ec:15:18:
                    a2:1d:27:c5:da:ed:89:76:64:1d:9e:88:85:53:80:
                    0e:f9:ab:e1:be:09:16:d4:54:2f:9f:4e:02:ee:a2:
                    79:6d:54:2f:63:eb:d6:df:22:60:86:98:a2:66:e6:
                    c5:91:98:1b:5e:bb:63:f7:4a:48:b5:85:87:a1:3f:
                    99:b6:8e:40:ce:26:a2:64:b5:36:51:c1:a0:ff:cb:
                    1d:b6:61:99:f0:de:6a:63:0f:c6:ba:48:09:63:3a:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:78:96:90:6B:3D:42:46:79:EB:0B:D8:6E:BF:C4:AF:E3:76:C0
            X509v3 Authority Key Identifier:
                keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:69:fb:6e:69:48:7b:67:e6:1a:2e:ab:e2:33:91:64:78:73:
         8b:6b:a5:be:81:7d:c9:e3:82:f6:22:e8:a5:5d:f8:0d:c3:57:
         64:91:52:fe:61:cd:b5:1f:91:bf:88:82:74:3a:65:dd:5e:f8:
         0b:7f:40:c9:14:76:0e:e7:8a:fa:ae:61:17:51:44:d0:7e:f7:
         c8:d2:bd:54:e9:79:17:e2:73:45:c5:97:d2:4c:a6:53:9a:5c:
         fd:dc:68:4f:e2:71:f5:12:ad:bf:8f:01:5c:28:15:3d:97:5c:
         d0:06:2b:87:21:9e:25:c0:07:68:d7:6d:ce:5a:15:1a:ac:91:
         ea:bb:5d:9e:68:7a:7b:8e:66:be:04:83:42:b3:a6:07:71:87:
         f9:fb:7d:f2:87:93:eb:b5:80:32:0e:f3:19:e7:57:54:e6:c1:
         e7:94:a7:99:32:ec:e0:a2:d1:20:e2:04:63:97:b1:e4:6f:11:
         b4:bf:af:a9:93:32:63:6a:39:28:76:8a:01:8e:fb:8b:60:2a:
         0b:45:84:9d:85:56:d8:0c:82:7c:80:7d:a2:4a:ab:e1:1a:1e:
         8a:09:34:13:43:fd:f0:c2:0f:59:46:ba:0a:13:1b:20:6b:b3:
         c0:82:fc:12:e3:69:91:f3:36:6b:bb:b5:75:2a:87:1f:20:cf:
         96:5b:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:27:55 2025 by rpki-client