Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File:                     kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier:          6Wu/Vd/R2K5kok7iLg+FuNShHelJ8k85zheF4y0H5Ds=
Subject key identifier:   94:B3:3C:4F:F3:AA:06:8E:80:91:47:B1:62:C3:2B:0B:A2:43:15:AA
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       0992
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number:          0985
Signing time:             Fri 30 May 2025 20:18:24 +0000
Manifest this update:     Fri 30 May 2025 20:18:23 +0000
Manifest next update:     Fri 06 Jun 2025 20:18:23 +0000
Files and hashes:         1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: /OBlQEAuSidQAHDdqgoW+RFbCQC6sHDlYGoQFpmyB5U=)
                          2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: 4L/8MzP5Gv0BrcSJxbpf30TM5iV0Rok3eBScr5m+tTk=)
                          3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: TDeFd4z1mfEd9OqdDhf5hU/55tTk1mPNz/sxM3VsRgg=)
                          4: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: iwk36RqjK4+CbUIlYGdivIX0PP8tUC3WVzRS7SZf7Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: May 30 20:18:23 2025 GMT
            Not After : Jun  6 20:18:23 2025 GMT
        Subject: CN=683a1290-f5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:dc:55:d5:7f:ca:0b:46:f6:c8:ea:4b:a2:
                    06:85:38:bb:86:b3:ec:03:57:64:34:b0:85:86:cc:
                    fd:3a:00:81:9f:50:ec:9d:72:c0:34:69:f2:15:59:
                    ed:08:a1:27:11:0d:72:5e:57:aa:72:3e:75:0e:2a:
                    10:a7:07:bc:84:3f:84:94:39:51:05:89:c5:56:9d:
                    c0:a2:c9:d3:86:d8:8f:c4:a9:31:64:2b:69:7c:64:
                    3b:c5:43:54:95:52:c7:86:bd:6d:57:ad:a6:e9:d5:
                    7a:62:be:75:42:84:c3:79:74:11:06:0c:1c:fc:cc:
                    61:8c:c2:5e:34:b3:11:22:7a:dc:dd:de:6e:81:ef:
                    ef:3a:79:07:b4:98:5b:05:94:95:55:61:63:78:0c:
                    e1:3b:97:b5:df:5c:ac:4c:3f:2a:f2:f1:31:83:7c:
                    21:f2:d0:df:ae:03:ae:19:b1:ea:1f:02:7e:1d:69:
                    7a:6c:89:16:18:53:f5:99:69:28:43:29:4d:44:f4:
                    fa:d6:72:fe:d6:e3:35:a6:41:fd:d6:d7:63:4d:48:
                    71:32:45:41:2e:40:dc:05:19:c3:96:e3:cc:6a:8f:
                    ce:04:4e:37:b2:45:31:74:59:89:d9:65:e8:91:14:
                    55:2a:e2:5a:96:dd:9a:d5:5c:e3:5f:5f:7a:e4:ff:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:3C:4F:F3:AA:06:8E:80:91:47:B1:62:C3:2B:0B:A2:43:15:AA
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:09:22:02:18:28:44:65:ab:77:5a:82:eb:1e:56:ee:4d:
         94:37:89:df:74:b6:16:ab:9a:d4:de:b3:ab:29:70:c2:b1:02:
         57:67:e5:bd:26:23:32:2a:d1:4a:7e:17:99:ab:be:3a:a8:72:
         34:1b:27:cb:6f:0e:82:1d:c5:c9:66:3b:18:ff:a9:6f:35:91:
         2f:ce:58:80:8b:06:77:f2:23:c4:01:56:08:d1:72:6d:78:4b:
         89:1a:78:5f:42:f2:84:77:5c:e3:e6:ef:1a:d3:18:26:8e:fb:
         1c:94:b5:3a:02:d8:bc:66:ca:43:af:06:39:62:6d:2d:74:b2:
         79:3c:77:1f:30:c5:eb:77:20:74:90:ad:61:82:cb:37:36:4e:
         bc:64:31:25:08:57:6c:3d:18:68:be:44:da:07:84:22:7c:46:
         08:29:26:81:7c:b7:84:93:fd:76:b4:3d:34:20:7e:ed:b2:20:
         e4:87:82:96:20:25:5a:58:bc:29:d2:8a:5e:62:c5:90:b5:a6:
         23:75:7a:03:21:61:50:69:dd:96:91:0b:21:64:0e:3f:37:01:
         c8:43:22:00:2b:3b:8c:45:10:7a:8b:ed:39:86:ec:d2:61:fc:
         bd:9a:43:3a:09:d8:f8:ab:b7:80:48:1e:16:25:80:90:33:48:
         df:75:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:47:17 2025 by rpki-client