Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File:                     45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier:          v6HlmAO73o7u1pdPtN1d1GPg+HvwMshMzk9jqRw0BwM=
Subject key identifier:   FA:27:14:07:16:B1:C4:AD:E0:AE:74:E0:95:83:B4:51:A4:68:5F:6E
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer:       /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number:          0223
Signing time:             Wed 11 Jun 2025 01:52:30 +0000
Manifest this update:     Wed 11 Jun 2025 01:52:30 +0000
Manifest next update:     Wed 18 Jun 2025 01:52:30 +0000
Files and hashes:         1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: 1OAsfW8fgq8GtaFQV2AVKciWGzi79BsECfJmP7pkepY=)
                          2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 01:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
        Validity
            Not Before: Jun 11 01:52:30 2025 GMT
            Not After : Jun 18 01:52:30 2025 GMT
        Subject: CN=6848e15e-dec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:41:aa:32:a4:c7:db:8a:84:5e:48:83:8f:
                    73:a7:15:12:2b:ac:8b:d4:d0:ca:f4:c7:33:8f:01:
                    41:97:24:7a:c6:00:8c:6a:d2:95:56:dd:77:b6:d7:
                    8a:22:14:51:91:dd:ed:cc:d6:5f:66:23:06:7c:10:
                    a8:f9:b2:e4:cd:34:b8:cb:3e:64:35:8a:b7:72:67:
                    f0:9a:22:e5:82:84:e8:4b:10:49:7f:31:63:d4:a8:
                    be:51:68:d6:0e:51:c6:3e:af:37:d1:8a:1f:ee:86:
                    dc:80:28:17:3b:83:6d:7b:27:e7:0a:66:c6:f3:92:
                    c7:84:b2:2d:b3:de:c9:9d:b2:0f:d0:47:9c:36:a9:
                    e3:99:d6:57:4b:01:10:ad:38:fd:e3:64:d7:c1:ab:
                    a3:fa:db:3c:63:1f:89:00:50:c7:20:9b:27:ae:de:
                    f0:56:b4:13:94:d0:97:bd:aa:0f:68:e9:0b:62:d5:
                    01:7a:19:01:d1:72:92:42:ba:17:ef:1e:98:fa:4b:
                    d6:3f:3d:11:e9:ba:58:18:1d:7b:5e:e0:5d:ce:c9:
                    bc:70:c4:0e:7c:69:e7:ea:a1:c1:60:ae:c4:c7:ac:
                    0a:1c:1b:98:b7:a4:4c:e2:64:62:40:af:e4:46:08:
                    7e:13:ab:98:de:34:d7:39:6e:b8:38:f6:24:1c:70:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:27:14:07:16:B1:C4:AD:E0:AE:74:E0:95:83:B4:51:A4:68:5F:6E
            X509v3 Authority Key Identifier:
                keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:a7:38:66:25:4f:18:87:36:05:be:70:07:30:7f:48:40:
         17:87:0d:e6:57:61:93:9a:a7:d2:89:1a:b0:d6:3c:0c:8c:73:
         98:33:ee:7f:8e:cb:ca:76:83:11:28:3b:28:72:ca:f6:3b:59:
         f3:4e:43:5a:38:1b:dd:89:9c:d9:90:58:70:25:3d:b5:a4:f8:
         9c:9a:03:13:e9:6e:03:da:63:c0:2d:d1:27:12:49:0f:dc:7d:
         86:26:83:f7:d1:60:1f:10:8b:51:f1:4e:67:f1:4e:5c:e7:f2:
         a3:53:62:bb:2d:28:2e:2d:a4:8c:57:cb:59:96:a3:8f:70:63:
         85:8e:7a:a6:88:b0:8f:1c:3c:58:c1:2b:50:3b:f1:7f:ee:97:
         4e:80:81:c4:7c:a7:43:b6:97:ef:7a:ee:25:f7:32:59:23:ae:
         a4:10:c0:2e:0d:5a:24:62:70:84:31:9f:99:fa:00:ec:58:2b:
         c1:8d:25:43:37:f2:15:66:8a:b9:e9:31:6f:51:b8:08:77:3b:
         4c:b7:d2:bb:f4:48:6c:8e:7b:00:8d:98:89:b6:3a:5c:0e:59:
         54:52:5c:28:8b:bb:7d:df:50:83:75:61:c0:e9:b6:1b:70:b8:
         37:98:fe:09:54:9b:43:60:ad:e7:f3:23:f0:0c:cc:dd:69:5c:
         06:1c:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:46 2025 by rpki-client