Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          o5kAnyJl9Nvqxh2lB1JFdI3yL4xyGLWxR6WwIYyPeoQ=
Subject key identifier:   AB:8B:80:42:2A:D4:DD:B4:79:4B:8C:E1:F0:C8:87:6F:96:BF:53:40
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          61
Signing time:             Sun 15 Jun 2025 06:12:15 +0000
Manifest this update:     Sun 15 Jun 2025 06:12:14 +0000
Manifest next update:     Sun 22 Jun 2025 06:12:14 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: 8Z5fPfE72ZBqyybmUL+FuSD14dTQSX3sB90oVYpjKCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Jun 15 06:12:14 2025 GMT
            Not After : Jun 22 06:12:14 2025 GMT
        Subject: CN=684e643f-2069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:b1:b9:d9:a8:48:ab:ee:e3:e4:65:8a:c7:
                    1b:27:ef:23:88:3b:54:1a:58:f8:98:20:3b:33:3b:
                    38:c8:33:49:5b:01:ca:ca:05:74:74:33:bc:c2:e8:
                    22:43:91:0a:98:1d:68:04:35:ba:bb:ae:32:31:a9:
                    9a:4a:79:0e:95:eb:4d:35:6b:f9:61:a6:e0:7c:95:
                    74:49:a0:c9:4c:af:02:a7:e2:4f:8e:a9:61:2d:ea:
                    47:ae:c4:75:cb:52:bf:cc:55:17:e9:0e:82:a2:ef:
                    9e:12:74:16:9b:a0:97:0f:1f:83:44:d4:bf:15:dc:
                    71:73:3e:a8:e3:8c:e2:87:9b:33:10:9e:af:9a:e2:
                    42:38:53:a8:2d:86:97:fa:4b:5f:84:92:76:ee:23:
                    71:cc:29:6b:2e:f3:a7:56:11:44:97:63:55:a4:83:
                    0e:d6:b8:44:0f:2e:65:87:88:a8:49:be:af:8d:76:
                    48:de:a3:14:12:af:21:3d:06:12:6e:2b:4d:91:d9:
                    14:82:cf:3a:e2:42:2b:56:10:d9:d1:ed:4a:4b:5c:
                    7c:18:cd:6e:ad:76:8c:f3:60:1f:94:12:9b:ef:13:
                    d2:ac:28:6d:18:39:77:b0:55:83:f2:e5:41:6c:61:
                    e1:7b:82:a0:be:91:f2:b6:04:34:77:68:46:1d:2f:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8B:80:42:2A:D4:DD:B4:79:4B:8C:E1:F0:C8:87:6F:96:BF:53:40
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:26:97:ef:93:be:4d:d0:f5:14:e1:b0:ac:3f:3f:26:be:1a:
         91:7e:4d:ac:ed:27:b2:c7:56:12:9e:ed:a2:92:08:2e:69:b9:
         33:a2:a2:73:60:5d:2f:bd:4b:bd:04:cf:29:fd:5e:b4:d3:64:
         0d:8f:b1:2c:b9:95:2b:76:10:5a:a1:71:ce:bf:06:c0:f3:22:
         b7:b4:32:7f:8f:96:30:b5:06:23:e3:9e:7f:2d:2e:fe:b4:d1:
         e6:d8:8d:5f:5e:d1:70:5d:ab:45:e6:25:d9:e3:61:d2:39:9c:
         74:72:09:77:ad:05:3b:f2:5c:82:1b:ee:23:df:9d:f3:ab:38:
         a0:76:44:fe:e1:d4:5c:2e:6d:08:75:c7:a2:3f:a0:a6:51:0d:
         42:85:a9:19:e6:73:6d:39:12:cb:dd:bc:1d:21:bc:55:0b:ff:
         a4:33:2d:d8:bb:d5:d6:9e:95:40:5e:8c:ce:04:24:22:64:c5:
         c7:68:44:08:d9:66:38:c0:4a:c6:f6:89:aa:3d:5f:9e:88:bd:
         fa:52:01:52:0c:66:43:a5:70:de:df:06:9b:cb:a5:2e:af:12:
         75:d4:90:46:c5:e1:92:62:57:db:4b:dc:cf:3e:c5:da:d5:06:
         ba:5b:b3:cb:bd:05:a1:41:0b:a1:25:92:8f:78:a3:6b:f2:2e:
         7f:49:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:57 2025 by rpki-client