Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File:                     lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier:          /PW+zEJdDL/nKocI0J+BTZWJHxO39rHVTtKz9AZs9lI=
Subject key identifier:   17:1C:DA:55:63:3F:B3:93:B6:29:1F:B2:9C:74:21:07:69:82:EE:E3
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer:       /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial:       07E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number:          6034
Signing time:             Sat 31 May 2025 14:15:28 +0000
Manifest this update:     Sat 31 May 2025 14:15:27 +0000
Manifest next update:     Sat 07 Jun 2025 14:15:27 +0000
Files and hashes:         1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: QXT2z7L+p8uvLOahv8iCTMzv60repr2srt++je2C1vk=)
                          2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 3mG/DAHD47ieP+pHQ6Ko9KqnRvDpTJqoMQIZjKg03d8=)
                          3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: B5KSH4tVyudgx/M89rAS977NHCczXltU5o9B12V7IsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
        Validity
            Not Before: May 31 14:15:27 2025 GMT
            Not After : Jun  7 14:15:27 2025 GMT
        Subject: CN=683b0eff-050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:68:ae:61:78:ba:29:51:ab:10:5b:9b:c4:
                    cc:30:46:b2:45:15:2e:bf:32:70:2d:4e:3f:6e:0e:
                    ae:50:be:1c:83:e8:1b:a6:15:47:70:5f:57:35:77:
                    64:f6:10:91:09:78:18:51:41:b9:8a:74:6f:c2:ff:
                    c6:15:c8:ba:97:66:5e:68:cf:b1:c4:5c:22:b4:18:
                    60:e2:8f:8f:6d:1c:98:91:58:67:4c:61:5f:f9:72:
                    a1:c9:45:55:74:19:89:8c:7c:9a:4f:8f:e3:b7:da:
                    5b:9b:38:3b:9c:6a:4d:ff:e2:ae:df:99:4f:50:62:
                    2f:5d:f0:32:99:22:9a:ce:6d:ff:54:d0:78:43:7c:
                    36:49:5f:47:5a:d1:a8:d5:f7:e3:20:09:93:86:6a:
                    99:fb:01:d8:a3:91:3b:71:fc:e4:fb:29:1e:9c:35:
                    99:a3:e0:2d:dd:55:83:d9:43:3d:18:a0:32:77:80:
                    92:0d:cd:01:27:26:42:fe:b9:68:37:6c:f2:3a:9d:
                    da:4f:3e:ff:35:cf:90:6b:d6:e1:1a:3a:1b:2e:b3:
                    b7:6b:48:f1:d1:ae:f1:73:9e:b1:73:d6:10:b2:e6:
                    6b:46:80:06:9d:63:ab:2f:0a:fb:30:72:d3:97:64:
                    6e:51:b3:4f:9d:45:27:3d:ab:d8:af:ee:9d:26:ee:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:DA:55:63:3F:B3:93:B6:29:1F:B2:9C:74:21:07:69:82:EE:E3
            X509v3 Authority Key Identifier:
                keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:a9:5e:ac:e3:f1:14:4f:f6:2c:17:8b:bd:58:b0:11:62:
         4f:70:11:7e:d5:2f:66:dd:89:27:f0:48:d0:af:7f:d1:c8:d5:
         74:f2:f6:d0:52:d9:55:f0:87:0d:13:e3:60:a2:b5:8b:ac:e2:
         a1:59:a2:55:67:79:53:ff:1a:89:03:a5:14:2b:31:e2:1b:ba:
         91:33:83:5e:b3:f6:9e:66:85:ae:95:ba:31:b4:3f:15:a9:db:
         9e:43:91:20:29:2e:eb:97:2f:a5:95:c0:65:b3:72:f6:d6:ab:
         25:ff:b2:3a:92:b5:01:a4:ff:16:d6:79:52:51:6b:c4:bc:76:
         91:43:94:48:12:80:e7:3f:7b:7a:1d:a2:ed:5b:8e:30:9a:1c:
         37:b3:9e:4e:b8:d3:35:51:69:51:82:fb:51:64:12:41:01:0a:
         0f:fa:09:fe:fd:0d:a8:4d:a6:88:3e:2c:e3:de:cf:92:20:b5:
         73:a8:73:a3:ea:56:5e:f7:ac:eb:8d:52:30:0d:87:73:87:d6:
         74:30:8c:65:a6:ce:c4:3b:ce:ac:3c:35:6c:43:52:35:50:14:
         08:7b:88:cf:b9:28:35:c4:0a:a0:f3:45:0e:73:8c:2a:03:63:
         23:63:c6:bd:a4:0a:9a:e6:ba:64:63:8a:86:69:51:ee:d0:30:
         a8:84:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:43:03 2025 by rpki-client