Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          QBtBkMq/gvH6YiBJ+qhKdmDzvbIawgzPGiy61OV/75E=
Subject key identifier:   30:DE:07:F0:59:F9:C5:31:9A:AF:E4:E1:26:76:BA:DA:98:89:76:8C
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          06C2
Signing time:             Fri 30 May 2025 22:21:16 +0000
Manifest this update:     Fri 30 May 2025 22:21:15 +0000
Manifest next update:     Fri 06 Jun 2025 22:21:15 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: RzKxC/vASlSTrIYUJJOn1BfJX165uUAGU9YaMeCAgt0=)
                          2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: dsXz2lfcHryblqx1Ukw1H9WGMnpRDnzyM9OTmUgJl/0=)
                          3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
                          4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: 6R33YrxpQxTL0tryG4KL8AOz8hxoPlF0ceIkKdbUGro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: May 30 22:21:15 2025 GMT
            Not After : Jun  6 22:21:15 2025 GMT
        Subject: CN=683a2f5c-c8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:7e:bc:81:47:07:56:f5:e3:ab:c9:f8:4e:
                    ff:d5:b6:3a:6d:45:7b:90:a4:a1:c0:10:ba:bd:4a:
                    46:7b:78:e4:0a:7a:83:3a:04:09:84:d6:c0:b1:51:
                    63:86:56:53:6a:83:6e:48:98:87:6c:bc:c0:e7:13:
                    d7:fe:0e:c4:e1:ef:91:64:00:5a:f3:f5:ac:0a:b5:
                    6f:e0:6b:56:37:a1:88:42:1e:f7:a9:e9:1b:db:1c:
                    ad:e9:73:88:f5:01:36:bc:24:97:a0:12:5e:e4:e4:
                    8d:6f:bb:83:d1:73:0f:bb:bc:ab:89:66:f4:c9:ee:
                    a8:dd:54:0b:6e:47:de:0b:54:f6:82:e9:94:9f:8c:
                    3a:38:e7:b7:3f:68:e9:3c:4c:a2:49:ec:3e:03:c1:
                    ee:3f:68:4a:56:d9:87:b1:f7:fb:d5:78:35:e0:f9:
                    11:96:21:de:c1:b4:0c:9e:69:6e:26:8b:16:24:2a:
                    3d:d2:69:96:46:77:d6:a7:32:35:9e:1c:cf:c7:68:
                    8b:b5:69:82:44:86:b7:24:5b:fa:73:34:1a:b3:3e:
                    bc:63:c8:bf:61:9f:d3:a7:df:5f:4c:af:ca:4d:2f:
                    27:8f:3b:ee:67:3e:ba:bd:36:a5:10:14:13:7a:4b:
                    39:6b:eb:32:2f:70:73:11:7e:af:2e:e0:7e:94:4a:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DE:07:F0:59:F9:C5:31:9A:AF:E4:E1:26:76:BA:DA:98:89:76:8C
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:76:d4:45:d8:2a:7d:25:a4:30:55:91:f5:7c:b6:25:9d:ca:
         90:b4:4d:44:7a:c0:57:df:b6:f3:8e:32:eb:34:63:ac:6d:d5:
         ce:66:3b:5b:1c:57:4b:fd:b4:d6:70:ca:42:76:e0:33:34:45:
         8f:4d:cb:e0:f4:75:1b:8f:0a:8f:b3:33:2d:60:8e:e9:a8:f4:
         2c:f6:fa:ca:d5:f8:a7:d4:cd:f9:09:89:4a:d8:30:4d:eb:cf:
         f1:af:1d:ca:72:19:9e:e4:a9:ce:50:7a:0a:fa:f1:38:87:01:
         6d:24:65:49:66:63:0e:13:93:0b:f5:36:b6:0b:d4:8e:b4:de:
         84:dc:72:d8:15:b3:c5:b3:f8:8f:e7:8e:8b:c0:59:79:69:0f:
         70:46:10:30:66:54:24:df:7a:69:96:28:d3:e5:30:ff:0d:22:
         df:7a:fe:af:1d:c0:14:2e:34:7a:83:de:27:52:3e:62:a0:b2:
         12:08:a3:81:53:e9:e8:82:07:96:c2:22:6d:49:b5:95:57:2e:
         bf:5d:69:01:39:03:da:6b:29:d2:64:15:70:96:41:10:8f:19:
         8f:5c:6a:c8:6e:f9:92:39:c9:fd:67:d9:46:22:47:9a:dc:b2:
         92:1f:fa:d8:2c:e5:12:c9:fd:9e:06:88:4e:93:c6:db:dd:64:
         5c:1c:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 14:59:32 2025 by rpki-client