Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File:                     a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier:          I+0W6bCNjN4pucvXH84tqmlz67gC62Ay74coRcav5H4=
Subject key identifier:   87:87:BB:4C:30:C4:A3:14:E6:CE:B0:6B:B9:8A:83:ED:C2:53:E4:70
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number:          0C9D
Signing time:             Tue 10 Jun 2025 18:08:46 +0000
Manifest this update:     Tue 10 Jun 2025 18:08:46 +0000
Manifest next update:     Tue 17 Jun 2025 18:08:46 +0000
Files and hashes:         1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: Z1wfv3BVRg8+tqBGV3FXx8ENSTcAZU8xNqkohqRNfzo=)
                          2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=)
                          3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 18:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Jun 10 18:08:46 2025 GMT
            Not After : Jun 17 18:08:46 2025 GMT
        Subject: CN=684874ae-7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:77:e9:08:4c:20:d2:78:9f:5f:95:e6:c0:
                    a8:20:e9:3b:e0:2c:ac:b3:90:2a:37:c3:49:5b:1c:
                    9f:42:77:8b:37:5f:f8:fc:60:00:73:61:31:6c:04:
                    ab:e1:cf:26:83:69:36:6d:c0:5d:7a:27:0c:0e:a3:
                    be:ac:ef:08:32:28:8b:53:df:cd:3a:31:60:f1:d8:
                    40:94:04:4a:ba:db:85:78:c7:7a:70:d9:d3:9c:c7:
                    47:c7:99:b1:ca:81:aa:be:9f:9c:a0:70:2e:61:fc:
                    0f:08:4b:32:da:93:88:fb:24:2d:24:10:2c:01:3e:
                    24:72:b5:01:8c:cc:2e:e2:31:33:d2:72:63:bc:61:
                    9a:21:ae:1b:f6:86:53:6e:7e:ce:e9:c6:a5:d4:bc:
                    c7:3e:6b:08:ce:8d:9e:df:ac:e7:d2:19:e3:75:96:
                    c2:1c:96:3c:89:c6:a7:b7:9c:11:f8:2f:1b:32:5c:
                    cd:c2:27:4b:7d:06:6e:aa:ac:01:92:06:fc:e6:9a:
                    f8:e8:ad:c7:6f:a3:c8:99:ec:a3:d6:b0:51:38:ba:
                    5a:99:8f:9c:aa:e2:1b:76:8a:76:00:35:ef:82:d4:
                    87:e9:c0:15:55:60:4d:75:9f:c3:8f:07:94:74:31:
                    bd:4e:8d:47:15:ed:71:bb:cc:a3:4b:2b:a7:35:60:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:BB:4C:30:C4:A3:14:E6:CE:B0:6B:B9:8A:83:ED:C2:53:E4:70
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:f9:2a:63:aa:a8:86:02:a8:ca:0c:2e:6e:38:2d:b3:62:
         18:5a:5e:86:e4:6f:ef:c5:cd:51:dd:cf:e5:ee:ba:37:e4:15:
         83:33:d9:7e:9b:be:e4:ae:c3:0b:ed:a2:61:fb:af:92:63:89:
         f4:a2:b0:02:f2:bb:8b:0e:40:a8:de:ce:e3:3f:ce:be:c4:25:
         a1:db:ca:06:6f:8e:5c:4b:21:6b:d5:32:7e:44:26:71:8f:05:
         3a:dd:2f:80:71:68:35:05:96:47:cd:c9:01:99:57:4f:d7:6b:
         85:0d:48:33:ea:c7:49:4e:f3:45:fb:bd:cf:b4:c3:be:3a:c2:
         92:48:98:0a:aa:d6:1e:66:d6:14:b7:f4:65:34:a5:b7:b7:9c:
         34:c2:dc:d1:4b:b6:df:e1:67:81:cc:8e:b5:38:63:78:86:17:
         71:89:6c:03:66:08:5c:08:3f:ff:73:95:be:72:6e:72:e3:d8:
         5d:99:00:66:5e:46:41:13:31:3a:27:ea:72:37:00:27:78:93:
         ae:80:0b:4b:84:ca:f8:60:75:00:96:17:c5:16:68:82:e3:c1:
         d4:6b:12:5d:83:2f:1d:b4:95:29:b4:cf:70:7d:6e:fe:f7:38:
         46:e7:ac:90:b3:28:5e:f0:98:83:99:07:96:14:d0:20:c2:5f:
         50:df:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:23:45 2025 by rpki-client