Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          ngU3z5C8vorhBjPcJQ0NfVlkWRQ63gCNEeuhrmnbG8Q=
Subject key identifier:   B1:6A:77:EA:D7:25:A5:17:7F:29:94:D7:90:88:67:16:84:1C:FA:79
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0D46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0CEF
Signing time:             Sun 08 Jun 2025 17:59:38 +0000
Manifest this update:     Sun 08 Jun 2025 17:59:37 +0000
Manifest next update:     Sun 15 Jun 2025 17:59:37 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: zdWEt8t/MHufTZhEwL7WGAmmLBndoCY13LL3oddPzhk=)
                          2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: hKWe/eIi1S/b0sftmS4vbxX+CeHNz0WaxfQQONNUalk=)
                          3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: yXlaLhbx5YRuGCOCxZS+UVUBHLhciPfPZJOpJ77jS10=)
                          4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6pM1TQdNb79+DA6IOYbwXDIQvGxFIYUOEy7bg1GioZ4=)
                          5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: KHH4guWZz2QPTGfSHIABOFeNEzmNYAkAEdSlj0Q8gIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 17:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3398 (0xd46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Jun  8 17:59:37 2025 GMT
            Not After : Jun 15 17:59:37 2025 GMT
        Subject: CN=6845cf89-fc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:73:fb:33:9a:a0:c6:04:6a:d7:5b:39:78:
                    e3:df:e1:1d:2c:4a:92:d1:6c:8e:c4:e4:ed:d9:ea:
                    c5:46:3c:4a:77:a0:ae:e7:94:1c:4e:e3:dc:09:bb:
                    a7:03:ce:7f:d7:6f:3c:f5:40:be:3a:85:6e:3f:fe:
                    63:3f:95:5f:0b:05:e5:0d:7a:46:5a:c2:3e:25:de:
                    78:75:2d:d6:26:77:7e:08:87:2b:e2:78:cf:e6:af:
                    88:63:6f:6a:eb:72:7d:37:9f:af:ad:25:5f:ad:d9:
                    64:d5:7d:ff:3a:83:dc:4e:df:e9:c9:fc:f4:ca:6b:
                    a0:3a:f3:e0:a8:c2:bd:ec:89:a7:05:96:03:80:a9:
                    d7:60:90:71:5c:42:31:49:87:1c:d3:86:9a:c3:e3:
                    b9:37:6c:26:b1:af:5f:45:ef:5e:c9:20:c4:00:a8:
                    ad:23:9e:83:51:5f:1c:c0:2b:b6:c2:68:5a:2b:d9:
                    e4:ff:97:2a:e9:ee:46:7f:de:b3:73:a8:7a:39:a1:
                    8a:c7:bb:8f:f0:2c:40:20:49:15:83:4f:7d:61:a7:
                    33:8d:a4:01:3e:dd:7c:b6:50:0a:c9:4c:fc:26:98:
                    fb:bc:4d:9e:b6:bf:c5:b8:88:a3:52:bd:82:21:b8:
                    53:fc:0a:03:f8:b4:2e:5f:4e:e4:9e:c9:fd:07:b3:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6A:77:EA:D7:25:A5:17:7F:29:94:D7:90:88:67:16:84:1C:FA:79
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:37:33:1a:93:f9:82:68:74:ca:9d:66:f1:fb:1d:81:1e:a0:
         32:05:7f:d4:bb:1f:02:10:58:0a:ad:6d:6b:b2:b6:ae:63:c6:
         69:2a:16:8e:e3:60:27:7d:d4:29:30:bd:cd:96:a1:ee:41:92:
         ea:e7:ee:65:b8:27:dc:06:ba:b2:6e:45:a0:2c:0b:ec:f5:39:
         c6:1f:d0:44:84:44:f4:cc:40:24:95:19:1e:50:ad:04:ea:84:
         89:5d:4e:96:8a:5e:9b:94:4e:ba:04:d6:29:4b:36:0f:c8:94:
         c3:a4:2e:b4:9b:ca:fc:3f:5f:d3:11:f3:09:ca:b2:99:aa:12:
         08:52:0d:18:76:89:eb:b5:a8:0f:5a:a2:f5:43:05:86:11:ef:
         82:92:a7:85:c9:08:fc:e8:60:d1:22:7f:d7:5c:99:3b:7c:1f:
         93:94:43:ea:3c:88:81:8f:60:f5:97:4c:64:72:53:98:de:fe:
         2e:55:ab:c1:67:3d:4e:3f:ac:c9:2b:85:a7:9a:7b:93:06:b8:
         54:05:29:ab:78:7c:a7:a5:fb:fa:9b:c4:ae:4f:c9:31:88:ab:
         70:56:99:8e:4c:44:1b:38:01:76:72:b8:0f:64:77:b7:ca:a2:
         32:c5:09:bc:12:04:8a:c8:e8:b9:db:ff:29:01:cf:fc:b6:ce:
         fe:91:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:00:36 2025 by rpki-client