Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
File:                     6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json)
Hash identifier:          IMZz/Ty22gegKzdqJK8Q0da9ZLR7j5zI6OTy6WWJfro=
Subject key identifier:   24:A4:3A:F6:31:B9:BC:B6:18:88:15:3D:D0:D3:69:63:C0:7C:64:90
Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A
Certificate issuer:       /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
Manifest number:          E7
Signing time:             Thu 19 Jun 2025 04:44:57 +0000
Manifest this update:     Thu 19 Jun 2025 04:44:57 +0000
Manifest next update:     Thu 26 Jun 2025 04:44:57 +0000
Files and hashes:         1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: L5gXIrXgIi7heRY6RkHkvYuk22P2YENexJLrnMNsjcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
        Validity
            Not Before: Jun 19 04:44:57 2025 GMT
            Not After : Jun 26 04:44:57 2025 GMT
        Subject: CN=685395c9-6e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:e9:5c:9a:c6:cc:b2:92:26:7c:62:b1:72:
                    4f:f3:b2:bf:f0:cf:d1:15:33:52:5d:f6:21:d1:55:
                    d9:ca:f3:cc:44:9d:f9:63:37:a8:c5:c2:4c:02:9d:
                    1c:0d:21:85:fb:fc:2f:b4:28:05:cd:fd:85:11:49:
                    c6:2d:c8:57:ce:92:1e:3e:8c:80:90:2d:44:27:29:
                    cf:65:4c:60:60:65:95:2d:f8:4a:8d:42:6b:09:3e:
                    5f:e5:04:10:d3:23:87:b7:72:6a:0a:06:ce:0b:f5:
                    ff:74:09:5b:95:d6:59:b3:91:dc:0f:50:c5:e1:98:
                    28:46:2e:02:da:5c:b7:fc:6a:cd:b0:4e:a2:e8:e0:
                    e3:61:b6:ba:2c:d6:89:70:fe:c2:16:b9:16:e9:c0:
                    84:06:9b:88:e9:96:a7:9b:9f:44:ac:ce:e6:1b:4c:
                    a9:8a:d3:53:96:c8:a5:a7:56:eb:82:19:cd:ac:b1:
                    31:3f:c9:d1:5b:cc:62:ef:11:8a:9b:db:ac:92:e4:
                    89:ef:41:3a:33:bc:92:24:dd:4c:32:fa:f1:be:1d:
                    d1:2c:1e:ac:01:7a:9f:c6:c9:25:e4:de:6d:cf:69:
                    b3:78:af:44:15:fe:89:f7:e6:87:c0:da:8a:b9:89:
                    fb:0b:9d:54:9b:aa:f9:d0:ff:5f:fc:33:57:b5:13:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:3A:F6:31:B9:BC:B6:18:88:15:3D:D0:D3:69:63:C0:7C:64:90
            X509v3 Authority Key Identifier:
                keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:6d:29:0d:13:44:df:30:94:5a:96:24:7b:20:bd:06:bb:
         1b:91:69:07:26:86:bc:c2:83:6e:15:ee:49:a3:10:81:61:b1:
         d6:79:10:a1:3c:73:7a:eb:0e:fe:cf:bc:28:6c:cb:40:6f:7f:
         59:45:f1:62:44:2f:2e:aa:36:17:3c:1d:14:75:83:18:15:c9:
         c4:ba:33:8b:56:9a:29:d9:7b:03:03:c2:6c:03:9e:c3:c6:44:
         1c:3a:87:37:2c:70:f3:fe:cc:4d:39:11:47:52:65:66:9d:06:
         7d:5f:06:20:6a:02:58:12:7b:26:07:55:8f:11:e5:f0:84:0b:
         39:0e:9e:f4:7f:cc:34:13:d4:08:eb:4a:37:64:80:3f:29:0c:
         9a:cd:6b:ff:e9:70:04:2d:aa:41:97:c5:56:32:d2:9c:09:26:
         b1:b5:10:23:0f:2c:41:7c:6b:2d:59:ea:c7:0c:38:94:4d:51:
         ac:25:de:aa:b1:0f:e1:17:b9:e1:fc:a6:28:b5:e2:c0:ae:d3:
         0c:bc:38:53:d1:7f:a1:16:36:49:0b:11:fb:fc:3f:3a:ce:6a:
         01:3a:de:8e:67:30:2f:26:0b:16:68:25:ef:ee:8a:c6:6c:b4:
         c8:c5:57:86:85:78:f9:a9:7c:8f:37:e1:00:f6:2d:b0:dd:c5:
         6e:76:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:53:14 2025 by rpki-client