Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File:                     4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier:          q02EjJ2W/hDkj6A2FTrex83LYP3KJizFaARjPa0G2ZE=
Subject key identifier:   34:B0:F9:7E:A2:F6:51:31:5F:BD:97:81:2B:6B:0B:BA:AD:6C:E9:0A
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer:       /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number:          AF
Signing time:             Fri 13 Jun 2025 04:58:42 +0000
Manifest this update:     Fri 13 Jun 2025 04:58:42 +0000
Manifest next update:     Fri 20 Jun 2025 04:58:42 +0000
Files and hashes:         1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: hB1IjByfsnPlIR6cxOQq0kFYk2fXSDvW9StX4djZcTk=)
                          2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
        Validity
            Not Before: Jun 13 04:58:42 2025 GMT
            Not After : Jun 20 04:58:42 2025 GMT
        Subject: CN=684bb002-602e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:99:61:49:9f:6b:71:d3:2b:37:18:77:d5:
                    23:a4:be:ec:f0:ad:01:28:6f:bd:80:df:86:6c:12:
                    82:9c:d8:94:40:48:ec:ce:7f:d0:eb:5f:4c:89:54:
                    89:81:83:42:f2:a3:fd:75:4e:69:c9:a8:37:2d:40:
                    f9:4e:f5:93:33:2a:4a:20:2e:26:ca:60:e0:4c:79:
                    0d:36:43:9b:d2:ba:8f:bf:a2:09:96:e4:14:c8:77:
                    d2:4f:d8:f3:9d:0f:af:62:6f:74:80:e5:80:34:99:
                    62:ec:b9:1a:da:ac:8b:9b:71:c2:2a:3c:cc:2d:21:
                    f8:98:e1:4b:0d:ee:c5:7a:5a:97:f1:d3:05:38:d2:
                    24:20:f3:ce:36:32:f0:26:62:0f:d0:3a:4d:9b:b1:
                    45:27:a0:48:33:46:31:4a:2b:72:1e:13:96:80:9d:
                    5f:2a:a6:4c:0b:6d:04:6a:c1:fe:4e:e0:6f:da:e9:
                    07:66:ac:f4:51:25:03:e4:8e:18:bf:c7:ae:fd:40:
                    19:d9:78:48:d9:75:df:87:fe:a4:9a:61:47:6c:82:
                    38:e4:86:92:62:a8:f2:30:cc:7b:df:18:ed:d6:73:
                    02:e2:44:ab:22:cc:c9:ef:eb:6f:9e:8c:18:79:de:
                    0b:fb:63:8f:7e:27:c1:59:81:33:20:93:54:38:93:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:F9:7E:A2:F6:51:31:5F:BD:97:81:2B:6B:0B:BA:AD:6C:E9:0A
            X509v3 Authority Key Identifier:
                keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:b0:a3:69:5f:46:aa:d9:08:93:06:a2:65:83:e6:97:f8:
         7e:e1:dd:35:2e:99:49:a7:7a:45:d2:07:a4:49:83:f0:55:0d:
         7a:21:e1:09:9f:a1:65:2a:17:39:45:60:9c:85:c8:2f:de:54:
         7c:80:31:27:3a:5f:8e:e0:d1:25:99:92:bd:3c:39:be:5b:1f:
         27:a6:32:ab:dc:0b:df:78:f6:a1:bf:b0:64:c6:e9:6d:d8:d6:
         64:59:fa:86:4b:ff:47:61:ee:85:d1:2e:51:c1:b7:fe:e1:20:
         99:1a:b3:a0:f8:d6:e9:71:39:d4:2a:a4:49:5e:f4:cd:8a:41:
         38:70:eb:44:8f:f5:e0:02:01:8a:af:09:44:c3:ae:f1:5b:6e:
         d0:12:a2:41:fc:40:61:ba:b2:ab:2a:f7:43:11:7a:27:67:c6:
         4b:ff:d2:23:33:de:39:e4:62:d6:6e:4c:21:1c:51:95:5d:87:
         a0:2b:07:68:6c:66:fc:3e:83:4b:ec:5e:ee:e0:4b:d7:70:ba:
         d2:f6:35:31:4d:72:2c:f5:cf:21:87:0e:42:75:c3:75:20:7b:
         72:07:44:12:a9:ca:51:32:a3:b9:2b:14:fa:8a:f2:ea:d3:a4:
         28:fb:0e:7b:a9:a7:4d:81:7e:ec:45:49:65:62:02:d8:a0:c7:
         e0:21:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:59:47 2025 by rpki-client