Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
File:                     BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft (raw, json)
Hash identifier:          8afFmr7QXR11n47990tMcRZnRVsaGg9ME6s2r10RS/E=
Subject key identifier:   2F:18:B6:E3:84:54:07:06:2F:3C:2A:41:5B:1B:65:CF:07:1E:F4:2E
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       1C3E6F82EF80850A1FA59725FBAB02F7CC85F547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
Manifest number:          0512
Signing time:             Sat 07 Jun 2025 02:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 01:55:38 +0000
Manifest next update:     Sun 08 Jun 2025 05:39:38 +0000
Files and hashes:         1: 3130332e3137352e32372e302f32342d3234203d3e20383334.roa (hash: Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w=)
                          2: BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl (hash: nFpWF91htPfMtxqdnZ43z82eKyYRX6w5OfqOwRrnxa0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
                          rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3e:6f:82:ef:80:85:0a:1f:a5:97:25:fb:ab:02:f7:cc:85:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000, serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Jun  7 01:55:38 2025 GMT
            Not After : Jun  8 05:39:38 2025 GMT
        Subject: CN=2F18B6E3845407062F3C2A415B1B65CF071EF42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:60:20:01:89:08:d1:fc:73:e8:59:45:d4:
                    cc:0a:bd:38:9f:b7:d8:7e:5d:d6:43:74:5a:a6:34:
                    df:ea:c7:ee:fb:55:55:18:d0:b0:69:cd:5e:c4:60:
                    a9:c0:c8:ad:75:37:75:54:d3:7b:fc:a5:6d:75:8b:
                    3d:0b:31:2b:31:4b:68:f8:37:a9:02:94:51:09:8b:
                    a3:27:93:2f:14:cc:21:c7:c2:5a:8f:19:ae:ef:c8:
                    43:b3:4c:73:62:df:e2:4f:1f:78:48:83:dc:e2:ab:
                    8a:e0:7b:43:c7:5a:d0:ee:8d:74:0c:44:dd:18:7a:
                    bb:16:6e:09:a9:42:a6:70:7a:ee:da:78:5f:97:4d:
                    13:a7:91:6b:fa:81:85:8c:f8:da:53:84:78:89:df:
                    ad:c1:2d:7b:62:95:91:d5:e1:d2:b4:22:49:e2:08:
                    ac:fb:fb:05:74:15:2e:02:12:02:8f:53:c6:7a:54:
                    7d:d3:d3:6e:ac:59:83:48:8c:ef:43:df:a8:3c:c4:
                    9c:c5:5d:bf:0e:c5:01:9a:d8:a7:bd:c6:19:8a:eb:
                    ce:e4:48:09:db:e6:50:1d:25:6b:5a:00:6d:a8:ec:
                    3f:88:28:e1:e0:1d:83:3f:70:8c:87:75:c5:9e:ce:
                    86:ed:97:84:a2:89:be:55:9c:56:1f:c7:e4:30:12:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:B6:E3:84:54:07:06:2F:3C:2A:41:5B:1B:65:CF:07:1E:F4:2E
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:b3:fc:0a:d9:a5:d1:cf:d5:ca:b5:64:84:a7:42:53:ba:
         53:9b:f5:3e:e6:39:9f:eb:a0:44:3f:48:82:0a:ab:d0:b4:cb:
         98:38:1c:69:52:19:b9:05:96:01:98:65:e9:66:b1:c0:44:9e:
         68:f4:cc:53:df:42:da:93:6a:aa:b7:65:85:0f:1d:3e:3c:b2:
         ec:11:de:84:da:96:fb:61:7a:86:d5:58:96:62:e5:32:b0:72:
         f4:c9:44:34:e5:d3:81:42:c9:b5:57:14:51:97:fe:f4:f3:d9:
         aa:be:9c:ea:c8:55:67:e9:5e:46:f7:ba:1f:bf:9e:9b:6a:ae:
         68:4f:23:f8:60:4b:a4:2a:9c:50:73:44:f6:7d:88:a6:6e:4e:
         51:fa:5a:db:d2:6f:17:35:85:8b:47:43:b3:8f:a7:44:a6:36:
         92:9a:a3:34:7d:28:6a:05:96:23:8c:1f:7d:d2:4c:3a:b5:0e:
         c0:17:2f:f1:98:c7:98:88:19:74:83:2d:51:29:81:90:be:4d:
         29:05:66:a6:b2:4b:6f:c9:a9:46:95:18:5d:49:b5:be:0d:40:
         61:76:b9:31:91:8b:67:47:2a:27:b2:cb:57:60:56:1f:72:db:
         9f:13:a6:4d:9e:68:a5:20:47:ab:c8:91:9e:fa:4c:53:5f:9a:
         4d:c7:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:21 2025 by rpki-client