Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          z9wrEQ5wCky/UA/dPtj1sadjCDJyQNyIUKtC3fQDw6M=
Subject key identifier:   13:14:38:69:D3:8E:7C:3A:77:5D:8E:57:1C:D3:CE:99:FD:AF:9A:B1
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       0589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          0573
Signing time:             Sun 08 Jun 2025 22:58:32 +0000
Manifest this update:     Sun 08 Jun 2025 22:58:32 +0000
Manifest next update:     Sun 15 Jun 2025 22:58:32 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: n+eEG8LXnQAzjbExDaGPvipTIAMwySkKHd47VLDnnd0=)
                          2: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: V6GGgopQM/9MURG7ZCjHLUUN1Fak1PfMVntGosPl4Vo=)
                          3: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: DYCid3LLEniTmBG1cDjym9t3s6fpWuAE5JDaOW/kSN8=)
                          4: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: YAUteCmPsOym2G6bKX0x3ZydCIKVsenbUJgAGliknoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Jun  8 22:58:32 2025 GMT
            Not After : Jun 15 22:58:32 2025 GMT
        Subject: CN=68461598-298b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:00:8e:fb:6f:f9:6e:6e:66:65:16:db:61:
                    6e:4c:70:0a:4a:0f:cb:8c:7f:3b:24:24:02:ac:10:
                    08:c7:9a:29:41:c7:6a:61:df:a2:56:ac:ab:f7:3a:
                    ab:76:8e:ec:98:a7:db:bd:ae:e8:7f:64:81:ec:c1:
                    41:87:59:67:a8:26:ff:77:13:aa:80:d3:ac:da:34:
                    33:99:09:4a:38:b5:28:b1:b7:a8:cb:d9:39:fc:22:
                    8a:6d:0c:43:47:80:1a:52:32:91:bb:ad:bf:3d:48:
                    79:48:57:75:46:50:98:79:a0:cb:4c:41:3e:13:04:
                    17:73:95:2a:c7:53:5c:a5:f8:27:da:0c:4a:a6:a3:
                    a4:6a:f9:b7:18:0a:d7:8c:f8:39:62:23:20:e6:44:
                    5b:5f:9a:a5:e0:92:ae:3d:01:ef:cd:61:4c:ac:a6:
                    83:93:75:e3:18:4a:c6:80:a5:8e:9b:db:eb:89:48:
                    07:41:e7:aa:6b:69:0c:af:42:f6:6a:9c:8b:55:93:
                    ca:da:26:ca:4c:c6:a6:0b:0f:ae:10:37:b5:dc:b8:
                    9d:63:ce:3b:77:9e:16:42:e5:53:c5:ca:51:df:28:
                    8d:5f:af:9d:a6:28:b0:6d:d6:c5:1f:12:df:66:7e:
                    28:36:7d:30:98:7a:b9:78:a8:9f:4f:a0:eb:70:32:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:38:69:D3:8E:7C:3A:77:5D:8E:57:1C:D3:CE:99:FD:AF:9A:B1
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c4:3f:30:aa:f8:3f:83:0e:74:ad:fa:92:23:c3:61:d1:d7:
         64:7d:46:99:5f:3d:d5:95:d1:90:93:ca:f3:c8:f3:15:c5:d5:
         1e:9e:f5:04:0a:48:92:ce:8c:d4:69:f7:20:47:19:d6:03:33:
         eb:bf:1f:fd:67:aa:23:29:e4:9d:b0:8f:14:e2:5c:7d:cd:04:
         b5:9d:0d:34:4a:a8:4f:d6:17:5b:91:28:2e:4b:d9:5f:d5:07:
         c4:68:d3:5f:df:56:8f:17:69:a4:4a:50:55:8b:0f:6b:55:8e:
         1c:b9:84:0c:ca:d7:9f:15:99:e6:13:6d:4a:a1:73:be:bd:e0:
         17:a2:7f:36:94:08:f3:b8:21:5b:a9:67:b7:b0:91:e2:85:c0:
         89:d6:82:0b:79:5e:d9:e0:1e:e3:aa:8a:16:3e:e5:35:1a:cd:
         06:24:85:ca:0d:5f:99:8b:46:ed:4c:c3:2d:20:5f:65:17:47:
         df:8f:19:fb:44:28:a4:11:ea:e2:ac:3d:5a:b2:99:62:6d:5e:
         83:a4:90:43:25:53:db:d7:56:12:e0:ac:11:06:93:2a:64:20:
         f9:4f:e5:a7:cd:82:e8:e8:d4:4e:73:68:e1:1b:6e:92:12:d8:
         52:41:4b:96:8d:0c:0b:94:ca:bb:3a:e1:4b:f1:62:f9:3a:b6:
         f3:d5:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:11:30 2025 by rpki-client