Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File:                     4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier:          FHwf7sswiuWv0x2ygC1X0dh4IoMOcTAwocOJK9MJ/HY=
Subject key identifier:   FE:A5:3D:73:A5:D7:F7:E5:34:EA:13:B1:3D:2C:E1:44:6D:17:3D:75
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer:       /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial:       037C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number:          0378
Signing time:             Thu 05 Jun 2025 00:45:21 +0000
Manifest this update:     Thu 05 Jun 2025 00:45:21 +0000
Manifest next update:     Thu 12 Jun 2025 00:45:21 +0000
Files and hashes:         1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: sZ2I7KpuV9x5KeiuVJ+1cs1nzrmTWw71PaTJlirlbaA=)
                          2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 00:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
        Validity
            Not Before: Jun  5 00:45:21 2025 GMT
            Not After : Jun 12 00:45:21 2025 GMT
        Subject: CN=6840e8a1-8373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:ea:16:aa:ca:6c:46:51:5f:e6:b6:b1:ba:
                    cc:6d:dd:45:2b:ca:25:85:c6:00:d6:3d:50:e5:35:
                    de:8a:81:5b:67:eb:ec:55:6e:a3:be:dc:59:c9:f5:
                    6d:28:7c:9f:c5:7c:1e:ba:a6:9c:9f:5f:6d:d7:d9:
                    0e:0d:52:68:c8:f6:a7:3d:da:18:dc:2b:01:e0:25:
                    f4:6d:28:75:8e:82:f2:db:5c:d1:18:bc:8e:85:de:
                    c2:8e:c0:60:f2:ef:16:b8:dc:e0:ea:7c:22:a2:8f:
                    ea:b1:24:de:ce:0f:d1:a2:e2:f0:78:ba:ac:28:71:
                    2c:b6:fc:15:46:d3:2c:b0:1e:e7:8c:b7:a8:6d:16:
                    9b:f4:23:d7:15:a8:99:db:81:3b:23:97:da:fa:64:
                    39:b9:4b:de:90:33:7b:9a:31:a2:f7:fb:a4:aa:89:
                    57:e2:6b:f3:2f:00:08:57:7a:3d:d3:17:e0:11:af:
                    63:f7:25:53:56:18:23:0c:ea:92:b5:0c:d6:81:d0:
                    60:9f:d8:c3:73:75:d2:d4:d2:9e:2e:0f:ad:78:06:
                    14:08:37:4a:08:a2:1e:e7:68:9e:3d:2d:18:1b:34:
                    4c:0e:5e:c8:01:97:d6:97:22:a2:68:99:0f:38:5c:
                    18:32:17:e3:03:be:66:a8:81:6d:7e:d2:a8:26:71:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:3D:73:A5:D7:F7:E5:34:EA:13:B1:3D:2C:E1:44:6D:17:3D:75
            X509v3 Authority Key Identifier:
                keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:16:48:ee:b6:ea:ac:8b:64:bd:51:29:27:1f:eb:6a:27:67:
         88:49:56:94:35:d3:06:cb:54:2c:23:15:86:61:84:a2:4c:e3:
         40:db:77:71:d4:14:8d:91:2b:2c:83:9d:0d:74:78:08:40:57:
         60:1c:67:fa:af:21:e4:71:c1:c0:4b:44:ac:e4:eb:0e:f9:3c:
         a9:dc:df:27:ab:cd:ba:5e:11:20:bb:52:b2:da:6f:f2:17:57:
         20:cd:c9:4f:1b:29:ee:f1:d2:96:45:44:d7:bb:f3:77:09:5a:
         27:13:4e:64:fb:c7:44:da:77:99:fe:d7:7d:ee:e4:1f:e9:de:
         65:7f:66:5f:6c:a2:e5:e2:01:58:04:75:d4:e6:f3:3f:00:45:
         21:04:ca:66:d2:97:d4:b8:9d:57:ed:50:53:78:be:e5:01:bd:
         9e:cb:47:66:6a:09:5f:94:04:f3:18:20:47:3c:74:2b:7f:10:
         67:ca:26:b1:fe:23:c4:e0:2d:2b:be:c9:6a:61:4f:dd:2a:02:
         4e:79:20:ab:1e:d6:01:fe:75:2e:5a:78:8d:e4:c7:b0:3b:84:
         60:e6:9d:30:61:30:a9:9c:0e:97:75:cc:c6:84:43:84:48:fa:
         ee:dc:26:b9:63:8e:6c:dd:ac:7c:4d:10:e1:e9:90:ee:9f:d0:
         36:ea:f3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:16 2025 by rpki-client