Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File:                     8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier:          3VgNGowOUe4/doolkIplBlLsS0EK1tlgad1dDjnovk4=
Subject key identifier:   3D:1B:3A:89:76:A9:33:3F:D4:E3:29:34:62:60:83:96:F0:6D:C7:74
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer:       /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number:          0264
Signing time:             Thu 19 Jun 2025 01:35:54 +0000
Manifest this update:     Thu 19 Jun 2025 01:35:53 +0000
Manifest next update:     Thu 26 Jun 2025 01:35:53 +0000
Files and hashes:         1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: Tw2EKDG0b98dAlMR4TDpKO5X5eo86QFYjuvB+aSfvwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
                          rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
        Validity
            Not Before: Jun 19 01:35:53 2025 GMT
            Not After : Jun 26 01:35:53 2025 GMT
        Subject: CN=68536979-6741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:cb:0b:85:cb:53:8c:a2:07:44:66:57:86:
                    58:17:1f:24:a8:11:46:8d:38:00:55:48:58:d0:11:
                    fa:62:7b:e6:33:d6:ac:f5:fa:10:af:0a:6c:cd:ca:
                    ef:69:3f:92:32:bf:c4:48:54:9b:7a:5c:f1:06:a8:
                    5a:a9:e9:35:a2:ae:1a:15:a0:d2:36:76:45:01:a0:
                    58:cd:40:ef:12:0f:fd:4a:a4:9c:6f:ca:0f:72:f1:
                    61:b0:dd:4d:8b:6d:63:cc:75:21:e4:f0:fa:45:22:
                    5e:11:d7:4b:ed:32:2e:e1:7b:4d:d1:b2:18:f4:a6:
                    6e:4d:65:9d:38:52:d0:80:0c:5c:04:ca:71:1a:0e:
                    ce:96:bf:ce:68:ff:f0:b0:85:73:52:ef:be:26:19:
                    f3:c5:08:82:f0:e7:e1:fd:16:db:06:33:df:28:9c:
                    93:7e:c4:72:7b:d9:cc:64:26:d0:02:1d:3f:d3:9a:
                    1b:e5:fc:91:ee:60:21:7a:50:22:08:c1:93:2a:5a:
                    2a:6e:b5:25:a4:1e:ec:b9:d0:fb:80:7f:aa:48:d7:
                    3c:71:8d:a7:b7:b4:80:74:58:a9:69:00:e3:9c:c3:
                    a6:b3:43:c7:50:ec:2c:b6:6c:3c:b9:21:05:b1:66:
                    8d:e3:52:66:49:13:6a:03:3b:b6:3d:ec:c4:7b:ae:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1B:3A:89:76:A9:33:3F:D4:E3:29:34:62:60:83:96:F0:6D:C7:74
            X509v3 Authority Key Identifier:
                keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ec:9a:c1:41:ef:15:55:eb:83:b9:e4:3c:7d:8f:5c:bd:54:
         60:a9:6b:cb:f6:0f:26:13:70:13:31:97:44:3d:29:7c:ac:d0:
         f8:e1:ab:61:09:67:de:f7:78:ad:23:ae:f2:bf:18:9f:8c:59:
         f7:76:a7:a0:04:a4:6f:d4:69:19:9d:e4:8d:0c:4a:ff:24:56:
         d7:90:15:86:da:25:6d:be:86:bc:70:e9:9d:85:18:96:c5:24:
         1d:4a:e6:0b:9c:fe:62:54:44:26:26:fe:4b:0e:38:29:80:1a:
         55:b3:ba:2a:e3:18:b8:c5:30:2a:54:b3:de:76:27:aa:12:f5:
         09:56:9d:37:6c:25:67:a6:4b:57:6e:7a:90:98:be:e4:7c:44:
         74:12:a8:d8:d6:38:1c:e8:2c:5f:7c:67:7a:0d:29:e9:78:39:
         bd:f2:e1:0a:0f:89:84:54:4c:a5:60:7c:0e:92:11:7b:a4:ce:
         c3:33:fb:30:bb:05:83:f9:10:76:2a:55:e3:45:20:f4:a2:00:
         7e:f2:ff:d7:b0:c2:1f:7e:dc:5d:cf:0e:45:ec:50:b0:a8:31:
         59:29:b5:93:9e:b0:18:f0:42:87:26:58:6b:b3:10:4c:0a:e6:
         45:ea:0b:de:c2:17:9c:4d:00:0d:15:64:af:87:59:3c:7d:54:
         fb:90:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:19:06 2025 by rpki-client