Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft
File:                     2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json)
Hash identifier:          HPGSPy/e6H9Klq1k47RaYIK/Blbf5H26KlSLThqwyK0=
Subject key identifier:   EB:0F:42:74:C2:AF:DE:FC:4C:0A:C6:B7:00:80:0D:85:BB:17:F7:91
Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
Certificate issuer:       /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Certificate serial:       14BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft
Manifest number:          1493
Signing time:             Sat 26 Apr 2025 16:51:03 +0000
Manifest this update:     Sat 26 Apr 2025 16:51:03 +0000
Manifest next update:     Sat 03 May 2025 16:51:03 +0000
Files and hashes:         1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: FIeP0pldy2n9d8J8CLEjvoNpBggZ81SJ+5j9LxI56GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl
                          rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5308 (0x14bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427AF, serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
        Validity
            Not Before: Apr 26 16:51:03 2025 GMT
            Not After : May  3 16:51:03 2025 GMT
        Subject: CN=680d0ef7-585a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:da:73:83:0e:26:bf:a5:61:81:de:de:9f:
                    e4:b6:52:3b:60:af:6a:d6:46:9d:fd:f6:d6:27:41:
                    e9:90:54:35:00:4f:da:a6:2f:42:3d:e3:80:85:84:
                    65:b0:de:ac:62:02:ee:b3:8e:65:39:a8:50:5b:d1:
                    6b:7a:a2:79:7c:67:2d:c7:30:60:b1:23:87:64:8c:
                    d1:75:a4:0f:4f:22:13:88:cd:2c:cf:37:51:9c:95:
                    b0:43:87:64:b7:1c:0f:f6:2e:30:bf:0c:75:29:8a:
                    4b:ba:40:23:b9:60:0d:ea:f8:d2:d9:29:55:0e:69:
                    e1:13:8c:20:e8:84:08:64:25:bb:fa:e7:0c:18:aa:
                    0e:74:32:7f:5b:27:fd:14:1c:08:71:a7:9e:af:30:
                    02:61:25:6a:67:04:da:32:a3:cc:54:57:4e:87:fc:
                    1a:49:40:25:b6:28:33:ff:f7:dd:ff:69:3a:7d:d6:
                    ef:a4:b7:56:37:74:f9:63:51:c4:47:4d:3c:71:30:
                    82:f2:aa:1e:13:19:c1:e7:79:d1:c3:7b:96:16:12:
                    4c:88:cc:c8:68:63:e0:82:f5:3c:61:04:ee:c8:94:
                    94:7a:d7:d4:90:68:73:8e:cb:89:9a:7c:76:ad:d1:
                    08:f1:c8:f2:2b:76:ee:40:32:60:67:b3:df:06:e5:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:42:74:C2:AF:DE:FC:4C:0A:C6:B7:00:80:0D:85:BB:17:F7:91
            X509v3 Authority Key Identifier:
                keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:d7:76:4a:39:1d:e0:5d:da:53:f7:35:0e:50:d9:ec:ac:
         39:9b:77:b3:b0:a2:af:fd:d7:89:57:b8:78:27:d9:16:d9:c9:
         ad:42:d8:a9:52:8d:2f:95:97:6f:9e:23:41:61:78:d8:89:82:
         00:86:0b:d5:b5:1f:15:c3:3b:c8:1c:a0:18:72:d5:3e:36:92:
         44:9c:45:fd:cf:99:a8:65:94:ee:86:61:01:c7:9d:9e:4c:c6:
         ee:27:57:34:06:5e:6b:f7:a4:2c:f3:70:f0:e2:09:d3:9b:79:
         49:33:b7:e9:2d:ce:c0:51:c9:59:1a:3b:35:4d:ab:47:d4:2d:
         73:d2:6d:16:9b:5f:af:cd:3e:88:99:15:ff:83:d3:ca:bc:eb:
         87:23:0e:8c:6b:37:3b:a7:86:d9:c0:1e:36:75:4a:91:dd:8a:
         44:1c:71:73:cd:eb:0d:88:f7:4b:b9:0a:41:af:a3:15:39:58:
         88:c7:23:d3:91:53:58:dc:5f:e8:72:d3:48:4c:00:d5:3c:a1:
         9f:75:d1:92:13:71:63:19:50:bc:1d:06:01:9b:d6:03:59:c9:
         67:d9:60:c1:80:2e:5b:4a:4e:6e:be:ec:52:b7:23:ee:7f:eb:
         f0:e6:0d:21:7e:e3:a8:a2:ab:51:46:f6:7f:b7:f7:86:51:29:
         2e:39:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:34 2025 by rpki-client