Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File:                     QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier:          K+A7dYMABJwi3ZYfmtYoj8QoeGWoJHCcFJPo0ZhspTo=
Subject key identifier:   3E:80:F9:B3:E8:D1:FE:8B:95:58:F0:0B:A7:A4:8F:38:66:8D:A5:9F
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer:       /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial:       0C2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number:          0C22
Signing time:             Thu 12 Jun 2025 18:28:50 +0000
Manifest this update:     Thu 12 Jun 2025 18:28:49 +0000
Manifest next update:     Thu 19 Jun 2025 18:28:49 +0000
Files and hashes:         1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: sB8fslvUolc+GlCu2g9+HozIcltt12mrR2Z7PgAl0a4=)
                          2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
                          rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3116 (0xc2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
        Validity
            Not Before: Jun 12 18:28:49 2025 GMT
            Not After : Jun 19 18:28:49 2025 GMT
        Subject: CN=684b1c61-625b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:d0:fc:36:ec:f4:08:46:88:a3:17:6e:c8:
                    63:5b:e5:31:ae:56:d6:ea:7c:67:c9:d0:10:17:36:
                    8c:33:ae:6b:ba:ab:6f:dd:69:57:3e:5d:27:32:ab:
                    d4:8d:65:c8:f9:0b:a3:27:31:58:38:50:cd:9f:79:
                    af:35:7d:e5:b9:5f:f8:e2:b2:c9:aa:30:c2:81:bd:
                    60:67:a8:9a:6f:52:37:d3:02:f5:31:22:9a:62:ea:
                    0b:f3:6a:49:4a:a8:33:23:a7:a9:85:2b:a5:a2:61:
                    05:87:21:1f:66:7c:fd:66:4c:a8:64:f0:79:b1:eb:
                    1d:ea:69:06:78:d6:ae:aa:ae:bd:46:d2:a6:42:74:
                    01:cf:c5:72:64:85:38:0b:fb:5f:0d:72:d4:fc:da:
                    87:81:76:b2:94:fa:ef:b4:df:ad:c2:bb:bc:74:4c:
                    41:df:53:d1:1c:6d:ef:08:b7:f4:72:54:2f:c5:e6:
                    72:8f:30:a4:f5:d2:4d:26:f6:66:ee:ef:cd:68:ca:
                    d4:be:c4:ea:44:01:f5:ea:f2:63:42:5d:d3:e0:79:
                    eb:90:49:2a:a0:ea:ba:1a:7e:4e:df:12:36:58:11:
                    6b:70:9e:7a:86:cd:54:9f:57:0a:b1:b5:63:c7:6e:
                    30:0f:23:8c:23:bf:5e:f2:db:4a:2a:e2:cb:c5:49:
                    15:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:80:F9:B3:E8:D1:FE:8B:95:58:F0:0B:A7:A4:8F:38:66:8D:A5:9F
            X509v3 Authority Key Identifier:
                keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:76:65:63:a8:da:97:87:80:c7:3b:fa:ca:3d:34:2c:95:
         15:62:b6:33:63:13:6e:89:0d:d9:09:6f:91:01:47:7a:d7:a8:
         44:50:31:57:de:6d:84:d5:90:bb:f2:44:a2:d1:1f:10:51:62:
         2e:27:b7:32:b2:2a:54:24:4b:99:71:0c:5c:39:a1:b2:cb:c9:
         48:40:89:2c:30:cf:99:a0:86:69:10:7d:fb:99:89:a1:a8:61:
         41:de:c1:a2:4a:be:9e:27:74:c5:15:5f:d9:38:ef:07:43:2a:
         be:b6:e7:44:ec:d7:bd:a0:85:23:6f:dc:1e:17:50:64:07:7e:
         9f:17:43:99:25:47:2b:eb:1d:f2:af:05:c7:80:4b:b9:e6:f4:
         ed:ac:93:8f:82:30:9b:3d:84:3d:9d:16:4c:e2:fb:b6:1c:0c:
         dc:00:07:10:50:0a:0b:2b:1e:16:ae:5d:ba:66:aa:5a:24:e0:
         65:34:0c:bc:fd:63:40:99:92:25:9a:10:bf:83:2b:f4:7e:b8:
         64:bb:b6:b6:6b:8c:07:3c:57:f4:3a:30:d3:9e:b1:39:78:04:
         2a:45:c9:09:8f:4f:b8:3f:3a:29:c8:aa:f6:86:92:33:b6:e9:
         e9:77:3b:1f:01:29:ba:d0:b9:85:cf:bb:7d:cd:43:1f:61:23:
         b4:c3:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:30 2025 by rpki-client