Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File:                     m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier:          OQcpFwPyW2RyP6H27YttTJBuHJroX8AqMwuTVPLhxZE=
Subject key identifier:   DE:2F:D7:3E:08:DF:60:52:31:B3:78:FF:D7:78:0E:07:95:25:AF:D6
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer:       /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number:          07
Signing time:             Sat 07 Jun 2025 07:38:26 +0000
Manifest this update:     Sat 07 Jun 2025 07:38:25 +0000
Manifest next update:     Sat 14 Jun 2025 07:38:25 +0000
Files and hashes:         1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: 5sspycbSL0fj4+kB+5FCe2p51Hnl9N+gl7F2mq5ttZY=)
                          2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: pCu6+WJeqtvS7Tcl3+9JWLKb1zyqA9V6h4uJDrGt8GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 04:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
        Validity
            Not Before: Jun  7 07:38:25 2025 GMT
            Not After : Jun 14 07:38:25 2025 GMT
        Subject: CN=6843ec71-d8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2f:0a:0f:16:0a:54:f2:62:af:96:d4:fb:58:
                    7e:91:3d:e4:f3:79:93:55:85:ae:14:6b:96:36:e3:
                    66:c7:7c:01:18:e4:ab:6f:6d:f2:8f:5a:83:7d:2a:
                    7e:70:08:08:59:11:cd:41:3e:db:90:53:92:75:5c:
                    0a:2e:71:37:a9:47:53:cd:54:81:8a:bd:73:1e:24:
                    be:ac:a0:68:1e:3b:25:97:11:01:6a:76:57:5c:4a:
                    5e:5b:3f:55:76:20:e6:43:a0:02:e8:d3:fb:b1:f4:
                    01:73:ad:71:e4:ae:94:ae:4c:ac:70:bd:3c:d5:30:
                    aa:ed:b2:73:60:d4:eb:14:0a:aa:c9:06:2e:fe:9e:
                    3e:c9:0d:88:24:7e:75:69:3a:4f:77:03:1c:51:5b:
                    9d:af:ce:73:75:a7:a2:c3:7e:33:c5:a0:7d:23:3f:
                    91:14:a0:73:78:94:56:26:ea:ca:0b:28:c8:92:3b:
                    13:53:5b:da:b9:b9:f6:30:75:ec:60:5c:44:ff:2e:
                    99:4e:87:96:18:10:17:5b:56:24:9a:62:af:10:5d:
                    7f:96:4a:ff:ae:94:7d:04:0f:ec:28:3c:82:2a:64:
                    91:16:fd:4a:23:5f:1e:99:08:84:ad:5b:78:97:eb:
                    11:04:8e:a3:84:ae:5b:b4:fa:8b:c1:ab:a9:3e:ea:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:D7:3E:08:DF:60:52:31:B3:78:FF:D7:78:0E:07:95:25:AF:D6
            X509v3 Authority Key Identifier:
                keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:71:9e:b3:4d:12:e0:fc:13:aa:32:58:1d:5b:65:11:2f:e6:
         23:a7:d9:27:3a:2d:1d:73:6c:2a:c8:18:5a:a9:13:b9:6e:12:
         b5:31:65:82:81:42:83:da:0c:9f:2c:82:34:ea:bc:c3:1a:b8:
         63:16:7d:04:0b:49:13:a8:9d:53:b5:c0:4b:33:7d:84:d7:55:
         fb:f5:b0:0d:2d:6f:e0:a0:07:65:32:eb:75:f7:74:72:05:84:
         95:63:a9:91:9a:26:49:2b:25:0b:ae:8d:44:02:2d:16:9d:4a:
         ad:ea:fd:84:22:d5:bc:22:1c:df:fe:42:21:1c:dd:da:dd:20:
         95:f3:57:c1:ec:b4:67:d6:6d:19:71:71:f9:25:fa:16:fe:3e:
         98:1b:f5:88:26:ce:b5:ef:b3:31:52:e1:08:08:2b:e4:32:f5:
         7d:2b:a4:e9:dd:eb:d6:15:41:1a:8e:71:d3:13:68:35:d0:01:
         c3:70:51:09:61:5b:e7:3e:fe:8c:38:e0:9c:a2:31:d1:f2:48:
         d2:71:66:6e:69:47:3c:6d:26:d6:18:33:db:8b:68:7f:1f:c2:
         01:e8:5c:ca:f1:66:a8:f1:6a:38:40:c2:23:02:20:ff:c9:b6:
         72:8b:54:4d:b4:02:03:cf:fc:5c:a3:59:53:4a:10:35:12:c8:
         e8:58:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:58 2025 by rpki-client