Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          V2z21csWz9fsjcwr405lArI9Ex9w/KuBzVuhTA1vZr0=
Subject key identifier:   80:46:4D:2F:71:19:6B:17:0C:ED:1C:25:5A:26:E2:41:8F:4F:E0:B1
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       12AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          129C
Signing time:             Sun 08 Jun 2025 16:58:50 +0000
Manifest this update:     Sun 08 Jun 2025 16:58:50 +0000
Manifest next update:     Sun 15 Jun 2025 16:58:50 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: zJlvPBfMNq5Z9HXjfEcVGKAmjXdE1TEvk2eOTH9M3KE=)
                          2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=)
                          3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 16:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4778 (0x12aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Jun  8 16:58:50 2025 GMT
            Not After : Jun 15 16:58:50 2025 GMT
        Subject: CN=6845c14a-ac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:1b:64:55:49:ff:7a:be:f6:a3:e8:d7:2b:
                    45:8c:64:d9:d8:7b:60:a4:4b:11:c6:72:25:78:0a:
                    ec:6a:d0:16:3f:6b:27:f4:58:c5:86:08:cc:8e:b8:
                    4f:f0:ff:cd:50:f7:0a:bc:12:bf:63:64:e0:49:64:
                    b5:3b:97:19:f8:33:51:78:cd:c5:4c:79:17:52:34:
                    fa:f1:2e:79:ff:f1:d9:b1:da:77:a7:40:da:9f:97:
                    47:a1:5f:ca:18:df:98:98:f5:7c:1d:05:cd:80:da:
                    7f:99:c7:a2:f6:3c:4d:dc:5b:6f:06:84:36:4f:c7:
                    70:d0:65:6b:ab:1b:3a:91:30:6e:ba:ef:de:2a:df:
                    a3:0e:98:51:43:ca:4b:4d:68:1d:8f:17:59:c2:f7:
                    81:1b:63:7f:43:e1:d2:0b:4b:0a:e7:bb:8a:05:39:
                    a5:78:16:a2:99:4a:44:4f:26:2a:6d:db:b1:59:48:
                    5c:38:82:25:eb:c6:d6:08:08:cd:dd:f8:68:51:23:
                    04:94:cd:72:f9:d2:28:5f:c0:b5:b3:9a:7f:52:d0:
                    f3:41:54:9f:19:ad:7b:52:d3:3f:83:7e:a7:6b:28:
                    06:ed:fe:ec:df:97:3f:9e:75:b6:38:45:d6:0e:1b:
                    cb:53:b1:7b:0f:db:34:fc:0a:c4:03:2b:ec:ce:b6:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:4D:2F:71:19:6B:17:0C:ED:1C:25:5A:26:E2:41:8F:4F:E0:B1
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:73:82:89:34:06:04:37:6f:bb:f9:f3:3a:f6:78:e0:82:
         08:07:c1:26:66:50:79:d5:ad:28:60:0a:61:b5:ab:60:e7:30:
         0c:b0:1f:05:1c:ba:24:88:b0:3c:63:5c:51:cf:cd:11:6b:3e:
         29:d3:7d:ae:fd:6f:dc:2c:f0:ee:8f:8f:eb:e3:e2:29:99:12:
         96:4c:b3:98:a4:09:d2:f5:4c:f7:dd:c8:ae:98:48:89:74:86:
         91:50:37:74:0d:ee:e1:47:60:93:88:2e:c0:b9:43:04:20:1a:
         ba:0f:4f:5b:01:98:85:37:d7:21:a5:b3:b2:6e:88:03:b6:a3:
         78:d7:12:49:64:da:ed:1a:8a:be:4b:cd:de:9e:47:7e:e3:40:
         83:13:25:e1:1a:31:2b:26:2f:d8:26:61:7a:8c:7e:99:07:ba:
         89:a2:60:4b:78:38:43:8b:16:63:26:06:92:f2:18:b5:dc:99:
         c9:66:36:20:4e:6b:95:f3:80:5c:bd:5d:73:43:6f:87:11:0c:
         0f:b0:c0:76:0e:a2:bd:7e:58:d4:89:17:aa:63:00:43:e3:78:
         04:58:82:00:ae:75:58:06:ea:f0:32:9e:57:3d:a7:9b:4f:a6:
         87:9c:e5:8c:cf:80:c0:a6:30:fb:d1:f2:fc:62:3f:38:e6:25:
         4b:5e:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:27:21 2025 by rpki-client