Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
File:                     _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json)
Hash identifier:          zft86zrqQ8F8B/eUODn53fZgWcvfcDVwRStjcNpExB0=
Subject key identifier:   0C:19:5B:31:39:7B:05:A6:86:B2:9E:29:9C:79:8E:80:BC:46:0C:70
Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23
Certificate issuer:       /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
Certificate serial:       081B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
Manifest number:          13C1
Signing time:             Fri 30 May 2025 19:06:58 +0000
Manifest this update:     Fri 30 May 2025 19:06:58 +0000
Manifest next update:     Fri 06 Jun 2025 19:06:58 +0000
Files and hashes:         1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: 5UrHzB4vOeWBvKp35TVpYuDw/aD1q/0oim56n+iYXwY=)
                          2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: rU8D6mpdC1BmC/amQMPPP7kqQ/zxbdarw0Ro6gKcd88=)
                          3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: IQeY/vSsnV7lGmsF5ET0EctBxomkDxr65Km/1S0yvs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
        Validity
            Not Before: May 30 19:06:58 2025 GMT
            Not After : Jun  6 19:06:58 2025 GMT
        Subject: CN=683a01d2-d822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:e8:e2:a7:12:56:98:9b:77:c8:ff:f0:9c:
                    90:83:ff:e8:f2:c8:0b:78:1b:c8:8f:b8:8f:9c:6a:
                    9f:3a:ee:0a:66:3e:49:ec:32:d6:11:0d:12:03:31:
                    f3:fa:bd:ee:08:61:f7:3d:83:33:0a:af:c7:5d:b0:
                    6b:10:84:a4:eb:62:4c:1e:b8:c7:cc:26:f3:65:36:
                    d1:11:65:0e:89:13:b7:22:14:ed:e9:69:ba:b9:79:
                    13:eb:02:92:bf:b6:56:ff:ff:e6:97:6f:9c:28:4e:
                    b9:ca:09:fa:df:fa:fa:c3:f7:cd:6f:2a:c3:81:64:
                    0a:21:7c:50:83:38:0d:7f:94:5d:40:ad:90:f3:12:
                    2b:b5:43:f0:c2:26:81:c3:9e:a8:b1:9b:1e:b7:16:
                    1a:ca:e1:46:f6:66:12:e2:23:44:23:25:37:05:5f:
                    fd:4c:92:7e:88:b3:43:2f:5f:42:f8:18:1c:b8:6b:
                    72:42:7c:e6:37:57:40:27:b4:9f:db:49:24:78:55:
                    53:e8:55:55:f4:02:6c:f2:73:fe:05:7e:d9:d8:7f:
                    cb:18:5c:0e:3a:81:f4:82:87:f3:b9:27:d6:3e:4a:
                    78:07:3e:7d:97:bb:89:f7:e9:87:b8:0e:06:a1:49:
                    38:2b:08:be:c3:ad:f0:79:85:30:90:28:71:a5:ab:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:5B:31:39:7B:05:A6:86:B2:9E:29:9C:79:8E:80:BC:46:0C:70
            X509v3 Authority Key Identifier:
                keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:18:14:ba:82:ea:bd:71:de:43:b0:c8:d1:6b:dd:5c:13:a4:
         0d:46:b1:4b:a2:6a:a5:4e:af:06:56:21:86:55:23:92:ec:4e:
         fe:5f:67:11:8f:55:34:4e:55:12:6d:f9:89:7d:f5:3e:6c:6a:
         2f:d6:a8:dc:46:48:c0:fa:6a:a4:35:98:b3:3e:9c:7d:2c:0a:
         9e:bf:16:da:e7:03:3f:62:14:67:5d:45:ce:0b:0d:8f:55:c9:
         5a:3f:66:e5:08:c7:8d:36:a9:61:dd:56:c3:24:a0:88:20:52:
         c2:d1:f0:64:26:4c:33:b3:01:68:80:15:d5:6a:e8:5b:d6:ab:
         3f:1e:1c:43:4b:6e:ae:bd:fe:d4:ff:70:d6:84:9f:2c:c1:cf:
         7b:04:0f:38:c2:57:6a:67:6d:ab:eb:4f:c4:95:f4:95:51:9f:
         f3:b1:f0:ee:71:26:e4:a4:f0:8c:d7:5f:28:a8:20:29:96:3c:
         68:c7:76:1d:fe:5b:a9:4e:bd:7c:cb:b5:48:34:41:37:1d:a7:
         e7:88:c4:82:6d:76:07:f4:1f:08:43:d7:7e:b3:64:15:80:ce:
         d9:f2:21:76:e9:f3:d7:b5:2b:87:fe:94:15:8a:a4:62:b0:e0:
         9e:56:2c:ca:8f:10:0c:37:a1:f8:31:6e:03:8d:16:e2:0b:63:
         e8:3b:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:44:47 2025 by rpki-client