Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
File:                     j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json)
Hash identifier:          QOvdRxDcP2yTDfeTKU3htcEkDhgwN1VIKdMfuope1GM=
Subject key identifier:   4E:62:37:0D:F6:50:01:3F:B2:47:6E:17:2E:22:5A:3E:64:A9:7C:10
Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25
Certificate issuer:       /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
Certificate serial:       1E4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
Manifest number:          1F47
Signing time:             Sat 14 Jun 2025 16:02:20 +0000
Manifest this update:     Sat 14 Jun 2025 16:02:19 +0000
Manifest next update:     Sat 21 Jun 2025 16:02:19 +0000
Files and hashes:         1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: sioKPJvsPNJqHl534ac+2xTIG1eSJBDZwajRhETAey4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7758 (0x1e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93, serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
        Validity
            Not Before: Jun 14 16:02:19 2025 GMT
            Not After : Jun 21 16:02:19 2025 GMT
        Subject: CN=684d9d0c-40c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:68:ba:3c:76:85:9c:cb:4c:5c:a3:ab:ca:
                    13:8f:f1:82:00:9c:87:1b:4b:f8:04:d8:f6:0c:13:
                    51:2c:d1:45:52:8a:3e:ac:cf:d3:cb:b4:3a:8d:15:
                    13:ce:4c:b8:e7:42:0b:52:fb:b7:04:53:f7:67:72:
                    f7:df:96:d1:dc:fc:3f:70:d4:9b:07:dd:26:fb:32:
                    b1:33:f3:1f:a4:9a:13:b4:41:49:36:db:f2:3f:8e:
                    c1:ed:5d:91:c1:48:3c:37:2e:40:9b:bf:10:6e:00:
                    a2:8f:05:ae:b4:54:8a:b7:c7:4a:de:ac:25:fc:59:
                    55:84:60:fb:33:13:ab:3b:20:77:82:c8:ef:85:d8:
                    5f:e7:35:4e:08:c1:ab:cf:ec:5a:fb:23:11:32:46:
                    93:e8:fa:35:92:12:90:da:f0:03:c3:9c:1b:1c:17:
                    75:56:03:82:f7:f1:bf:97:8a:cd:b4:71:64:34:dd:
                    12:ea:bf:78:ee:f9:61:85:b0:e4:4b:ea:42:7a:56:
                    63:8b:f0:e1:4a:13:96:b5:5a:cb:6f:5d:9d:fd:fd:
                    3e:eb:af:3b:05:ae:70:74:d5:c1:e1:a9:df:68:ee:
                    22:43:5a:15:23:79:27:c0:23:95:a7:9e:d5:f9:23:
                    21:8c:2b:0a:3e:0b:cc:0e:4f:94:1e:1a:64:69:ac:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:37:0D:F6:50:01:3F:B2:47:6E:17:2E:22:5A:3E:64:A9:7C:10
            X509v3 Authority Key Identifier:
                keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:8e:bd:02:45:09:fe:a8:84:3c:93:bf:82:f1:8a:2b:43:
         43:53:1a:82:2b:19:d7:0c:37:ed:80:b9:c0:8b:f0:0a:4c:34:
         8e:70:c8:51:e9:55:ff:84:93:bb:40:14:a9:ad:3f:80:60:6a:
         24:14:be:8d:51:f7:a4:14:93:79:0a:40:0e:77:6d:60:17:9b:
         b7:b2:9e:7d:35:ff:30:86:c3:d0:3f:ba:c4:e1:7c:0f:30:8f:
         ef:1a:99:4a:b4:70:db:43:01:ef:e3:90:41:15:6e:a5:b4:e4:
         36:74:98:d4:47:33:89:51:3b:28:a8:cd:8a:fe:e1:c2:14:3d:
         ce:f2:59:89:59:6d:4c:e8:c3:a6:d7:45:64:70:98:70:4a:98:
         df:a9:3f:6d:2f:6f:31:d8:a9:fa:c8:8f:11:d7:f3:0e:7c:19:
         e0:17:86:44:ee:47:42:41:60:40:2c:50:1e:9b:4b:68:fe:76:
         89:31:01:35:b7:0f:a7:13:13:86:ae:af:eb:f9:d9:4e:c3:12:
         e2:c0:dd:ad:7a:b5:85:e5:8c:22:ca:0d:49:a4:6e:b6:58:35:
         3f:57:83:c9:45:7a:c9:35:86:19:34:09:6e:85:86:0f:13:40:
         0a:a8:36:97:a7:38:a9:52:d4:b9:d3:e9:90:2f:49:63:67:2a:
         79:c1:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:45:21 2025 by rpki-client