Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
File:                     y36OVMh-Ac6Gec_lUPH-myNhCD4.mft (raw, json)
Hash identifier:          3h+yesw1OrP8nXojLDxkisMnaE0MnNxtz1HC2QglhdY=
Subject key identifier:   9F:31:84:90:8C:88:D9:7B:D8:7F:01:6A:C8:53:CB:CC:94:E5:2B:9C
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Certificate issuer:       /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
Manifest number:          011C
Signing time:             Mon 09 Jun 2025 03:56:09 +0000
Manifest this update:     Mon 09 Jun 2025 03:56:08 +0000
Manifest next update:     Mon 16 Jun 2025 03:56:08 +0000
Files and hashes:         1: y36OVMh-Ac6Gec_lUPH-myNhCD4.crl (hash: jMA+cDp2VFdP2TWj+LBfMFBsYmABZ5X7eQ4cT/u4MUk=)
                          2: 1C977098A54911EEA5726C58C4F9AE02.roa (hash: nXtaThu3TIoFMtdBr1ku1oMROARCmy4V1hsNkYKjwTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
                          rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE01, serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
        Validity
            Not Before: Jun  9 03:56:08 2025 GMT
            Not After : Jun 16 03:56:08 2025 GMT
        Subject: CN=68465b59-11f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:5e:e7:16:cf:e6:bb:ea:f8:bf:60:49:63:
                    2e:8f:9d:61:63:c9:f9:c6:16:a5:32:ea:b5:c6:86:
                    c0:08:f7:7b:56:d4:ef:8e:13:32:ca:3a:1b:aa:08:
                    d3:3f:9b:50:8e:6a:cd:4c:81:54:83:5f:cc:6b:fa:
                    b2:89:50:ac:96:56:c8:68:aa:59:c9:ea:ef:ab:e8:
                    ea:92:da:f0:6d:8f:04:38:dd:d5:64:9e:ec:0f:ba:
                    5e:ae:a7:ff:ea:54:76:b1:3c:ee:64:29:9b:bb:a6:
                    1b:8f:c3:b8:1b:3a:01:5e:67:be:9a:b5:3a:1e:f5:
                    10:82:4d:99:7f:fd:74:56:f0:7f:fc:87:34:64:c6:
                    6a:02:34:d1:64:55:0a:05:b8:02:c4:fd:b4:4b:c4:
                    ae:da:f3:ea:58:ba:bc:e6:06:fd:e8:ee:0e:11:48:
                    3b:8a:ac:ad:f4:3e:92:bf:27:03:9a:f6:db:ee:d0:
                    4f:e0:0d:cf:63:0e:88:e9:e8:86:72:c6:7d:60:d3:
                    3c:a2:8b:a6:e6:e8:3d:47:9b:01:ab:38:f6:91:bf:
                    1a:17:6f:2c:41:3b:37:57:67:bb:fa:0b:8e:49:6e:
                    8a:88:1b:78:5b:bd:61:ae:6d:a5:8e:3d:65:a7:e4:
                    79:10:0d:02:91:ff:6b:eb:7d:f9:6b:00:27:32:05:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:84:90:8C:88:D9:7B:D8:7F:01:6A:C8:53:CB:CC:94:E5:2B:9C
            X509v3 Authority Key Identifier:
                keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:50:4d:35:8e:f4:ba:cd:e6:be:48:d0:af:b3:45:6a:b7:
         6f:c1:5b:16:51:63:e6:cf:b3:62:ad:af:c6:50:54:8e:86:db:
         b0:bf:16:ca:25:05:67:d3:cf:e6:b9:86:26:f2:af:31:e3:51:
         60:3a:b3:de:16:96:13:34:f2:84:e3:1f:16:72:cf:3a:0a:33:
         51:d5:f3:5b:db:ab:e6:3d:dc:76:fa:b6:ff:e8:9a:04:26:18:
         e3:f0:4b:18:a5:89:b6:c8:96:cd:2b:1c:aa:79:c8:00:d9:bf:
         19:78:b9:72:37:02:0b:8e:9e:a0:eb:e5:db:29:e9:ba:13:a1:
         76:a3:a5:c5:e0:f8:27:2d:f2:44:31:2d:79:46:a5:d4:69:c5:
         42:48:6c:2b:69:28:5d:ee:64:10:2c:ec:7f:ef:37:bd:69:c8:
         62:61:c3:03:18:28:82:e1:ef:f7:09:3b:08:c0:91:74:e2:42:
         13:0d:90:34:b6:73:39:82:35:68:d7:48:df:03:67:07:ac:7f:
         c4:f3:f5:bf:22:83:51:df:8d:26:ca:59:1f:2a:74:0b:1d:01:
         87:20:29:20:28:fe:74:d3:ac:b7:dd:1e:da:ec:16:cf:33:d8:
         6a:09:5b:5b:07:93:6e:d8:4c:a5:83:e6:d6:3d:43:ae:48:58:
         6d:ed:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:24:08 2025 by rpki-client