Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File:                     V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier:          XLltVil74rDcd7gOS/mzhfWdXgP9MbxMyFwsfiVRbeI=
Subject key identifier:   87:F8:24:CC:4F:BD:D4:55:55:32:E4:73:74:28:6A:D5:34:62:1A:1D
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer:       /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number:          64
Signing time:             Sat 31 May 2025 06:36:39 +0000
Manifest this update:     Sat 31 May 2025 06:36:39 +0000
Manifest next update:     Sat 07 Jun 2025 06:36:39 +0000
Files and hashes:         1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: q1E3xstY3ADzVe3syxHgE/QVi7an8nIubvjsqdH+dWA=)
                          2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY=)
                          3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: 3RUDCXxLe0lvptsJjUy4NkMr2pEIuvZpBiDjKj7RKDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
                          rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
        Validity
            Not Before: May 31 06:36:39 2025 GMT
            Not After : Jun  7 06:36:39 2025 GMT
        Subject: CN=683aa377-a89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:d6:ee:f9:03:3c:22:7e:aa:89:c1:d4:db:
                    1d:ae:1b:01:92:a3:9a:1e:f3:79:c5:40:35:dc:74:
                    ce:53:a2:6c:8b:ac:ef:a1:67:08:c0:38:38:ca:88:
                    7f:90:c2:e4:ce:a0:2f:f2:15:82:68:86:2f:60:67:
                    fe:89:9c:be:8e:04:8a:2f:84:19:08:16:a6:ef:ac:
                    65:84:93:30:00:d0:5a:bb:17:8b:7b:f2:8a:c9:48:
                    dc:3e:c3:98:81:10:8f:84:61:6b:29:64:fc:4d:a2:
                    53:fc:0b:a3:ca:de:8f:46:15:82:7c:12:55:52:b0:
                    2c:d3:83:31:01:97:d8:95:77:eb:7d:c3:2d:60:2b:
                    3c:b4:2b:87:89:7c:a2:06:ad:6c:4a:28:24:dc:06:
                    dc:1a:03:7a:10:28:f3:35:28:6a:ed:d4:e4:ba:53:
                    48:61:13:e9:c0:78:1f:3e:73:43:d9:a4:df:3c:6e:
                    2d:ca:f3:17:75:8b:ac:94:b1:41:96:b2:ad:53:14:
                    61:9b:e9:3c:fa:17:3a:80:8c:6e:a1:0d:67:80:ac:
                    66:78:c3:07:1d:fc:75:b3:b8:8d:96:46:a4:6e:c3:
                    29:f3:bd:55:6d:20:6e:85:2f:7a:07:c9:bd:ad:28:
                    53:64:0e:b1:a4:31:d0:e9:26:4f:8c:1c:8e:5e:69:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F8:24:CC:4F:BD:D4:55:55:32:E4:73:74:28:6A:D5:34:62:1A:1D
            X509v3 Authority Key Identifier:
                keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:9d:83:a4:cd:37:fe:16:a0:72:8a:5b:a1:d4:c2:de:c5:
         ea:b6:e4:a5:7a:db:29:64:20:54:26:94:96:68:8a:01:50:b0:
         d2:60:8f:eb:52:1b:49:2f:e9:e9:00:6b:78:49:2a:63:34:ad:
         22:60:05:1f:f6:c3:c6:5e:5b:90:c8:11:74:35:68:b5:0d:94:
         08:39:03:7e:6b:0f:90:9b:4b:c9:26:4a:b3:b7:6e:96:bf:3d:
         cf:99:3a:73:1e:1f:dc:1c:0a:14:cf:e4:df:1a:9a:81:5f:1f:
         66:18:3e:c6:b8:c2:e0:c8:ba:a3:4a:f6:84:74:56:f8:a1:9d:
         1b:37:db:71:c5:3c:78:1f:fb:0d:53:82:c8:2d:0b:ee:76:75:
         64:32:73:3f:0e:e5:29:1f:fb:7e:58:66:53:35:22:b6:f6:5b:
         33:bd:43:e5:3b:ef:38:27:12:bc:de:1f:bf:39:3d:63:77:be:
         ef:20:eb:e2:21:c5:67:55:c0:44:61:f0:c0:6c:a0:8c:2e:a0:
         7f:da:b3:64:71:12:db:ed:c1:bb:6d:4f:97:28:7d:85:f4:ed:
         85:f8:01:11:cf:2e:89:c6:42:23:80:b2:64:27:e5:df:d3:54:
         34:74:3b:f1:a1:be:21:04:e9:46:64:f0:02:e7:24:50:81:91:
         8c:b6:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:40:35 2025 by rpki-client