Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File:                     MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier:          Z27UcdSJPx+6HyFaf7uKdMvQeIT5LosXwGcrHDdihaU=
Subject key identifier:   B1:81:87:9D:7A:B1:D6:2C:39:88:C8:3D:2A:2D:ED:64:49:FB:86:A7
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer:       /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number:          067A
Signing time:             Fri 30 May 2025 22:31:48 +0000
Manifest this update:     Fri 30 May 2025 22:31:48 +0000
Manifest next update:     Fri 06 Jun 2025 22:31:48 +0000
Files and hashes:         1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: rNUkSdt07HZ9sjOFZmzClGBU8heZCqTtnlx0sWnk/K4=)
                          2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=)
                          3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=)
                          4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: kssI5Drais5SXspTClU/NbBaSd+qkoi5idfDTiL4j3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
        Validity
            Not Before: May 30 22:31:48 2025 GMT
            Not After : Jun  6 22:31:48 2025 GMT
        Subject: CN=683a31d4-ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:70:40:0a:63:c5:c6:86:9a:dc:90:67:81:
                    78:d1:01:7d:88:f9:e2:e3:a1:23:d1:88:ea:7e:2a:
                    f0:3d:e2:f2:66:a4:48:4f:a7:36:70:38:90:81:78:
                    c9:28:c6:a7:5f:0c:f2:44:9e:7d:b2:fc:ca:72:fe:
                    30:03:36:87:8d:a7:52:1c:ed:89:b3:1f:22:50:fb:
                    34:9c:8a:c7:d3:ae:81:f7:de:47:fe:ff:7b:7b:b4:
                    cf:68:69:dc:41:7c:6f:45:5f:53:00:32:7a:ac:94:
                    96:e2:4e:9a:3d:a5:8b:e6:e4:20:d7:5a:93:15:5a:
                    8c:a7:67:be:04:e7:38:8e:5e:59:d3:b3:47:6e:87:
                    53:d1:bc:22:8b:92:35:f8:3a:f2:2f:06:00:92:86:
                    d4:fd:00:52:37:b9:ae:30:58:d3:70:31:70:51:1a:
                    5a:db:64:ff:fa:44:eb:15:95:03:f5:ac:a5:cb:79:
                    56:9d:1e:e2:db:da:c4:15:d8:b3:79:57:cc:19:f7:
                    31:b6:a5:c1:2d:71:3f:00:40:83:4c:ce:58:84:6e:
                    fb:32:c1:5b:52:ed:51:ca:15:bb:55:a9:41:34:32:
                    d0:f3:f2:ea:70:cb:ee:c3:d7:2e:7b:5c:92:d8:b3:
                    bd:e8:47:2b:57:08:dd:d5:32:2a:8e:33:63:50:1d:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:87:9D:7A:B1:D6:2C:39:88:C8:3D:2A:2D:ED:64:49:FB:86:A7
            X509v3 Authority Key Identifier:
                keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:23:42:e1:f5:81:a4:0a:51:3e:bb:4d:12:b9:8e:16:69:
         08:1c:e1:a6:0d:1f:cc:c2:f4:0b:fa:10:ae:95:2a:52:07:84:
         19:56:96:c8:6c:97:e0:22:70:6d:78:d4:7f:5a:c3:59:07:99:
         5d:f0:72:01:f8:68:8c:bc:db:5f:ef:a2:3f:7b:d9:81:9a:f5:
         85:78:13:d8:8d:a4:7d:99:17:9f:80:89:a2:f5:97:35:2a:23:
         27:78:48:a0:38:ef:5e:ac:cb:df:ac:64:5c:1c:bc:23:76:5f:
         92:40:7f:da:ef:0c:a2:31:58:db:87:54:cd:00:80:05:7c:13:
         a4:0d:83:67:23:76:0a:21:cd:af:64:25:38:ef:f8:ff:46:14:
         14:dd:3b:78:d5:e9:2a:61:67:ca:35:cf:f0:b8:bf:41:36:38:
         e5:ee:64:78:09:11:f7:d7:a1:13:82:ba:91:5d:69:8a:d0:c6:
         3c:21:14:ff:0c:bd:60:8b:ad:5f:f6:b7:17:0e:e0:5d:aa:22:
         e7:e1:39:43:70:56:5c:0c:69:d7:b7:85:3b:c8:47:98:6c:be:
         b3:af:e3:f3:44:d5:85:85:19:56:84:75:f7:76:fe:05:0b:48:
         cf:e0:7f:a3:7b:e7:ed:62:02:6a:4d:a3:01:5b:7a:58:81:b8:
         bf:6f:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:23:10 2025 by rpki-client