Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File:                     Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier:          l840rJ/NXpSMTaVWZeLK5yJf/NVRuEWObEhZgrpEP/s=
Subject key identifier:   6E:DC:E6:F9:14:0D:CD:91:F1:EE:36:2D:77:CE:38:F9:32:0A:3B:1B
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer:       /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number:          16
Signing time:             Fri 25 Apr 2025 06:58:47 +0000
Manifest this update:     Fri 25 Apr 2025 06:58:46 +0000
Manifest next update:     Fri 02 May 2025 06:58:46 +0000
Files and hashes:         1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: Kgn1pSBkactSY0po2YvSzGoiMBT96S57oxY19nUetjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
        Validity
            Not Before: Apr 25 06:58:46 2025 GMT
            Not After : May  2 06:58:46 2025 GMT
        Subject: CN=680b32a7-3a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:6f:1b:dd:bb:32:e0:b5:f2:8d:54:91:61:
                    3f:5c:82:89:7a:aa:e1:66:5e:21:bd:26:d9:b5:2d:
                    b4:21:28:c1:61:9a:fe:90:ef:b5:ef:d5:f0:c0:88:
                    1e:3b:f6:47:0f:8b:52:37:6d:3d:0d:50:bc:91:1c:
                    1a:67:bd:31:c2:7d:6b:75:23:34:6b:e8:ce:96:7f:
                    fe:60:61:c5:0b:4a:04:b5:80:e1:74:5e:82:26:6b:
                    08:13:20:00:63:5e:80:31:fd:b7:33:d0:92:80:af:
                    d4:da:25:1c:42:4a:f9:50:c0:fe:dc:a0:a2:f6:27:
                    b1:85:92:92:83:3b:ec:9e:b6:8e:1f:90:b4:bc:f1:
                    a7:f5:98:20:b9:36:04:c8:b7:cc:57:ab:c0:41:94:
                    aa:f4:58:54:0c:3f:4e:bc:a4:7a:06:e8:79:71:e0:
                    86:2e:a0:cd:6d:8b:31:07:46:fa:57:e3:6d:41:9d:
                    72:3f:c3:67:c9:37:fb:9d:53:a0:44:09:ee:fd:cc:
                    17:56:71:5e:ac:ec:49:36:c7:b4:50:90:cd:b9:db:
                    f3:bf:c4:ef:68:9b:ef:7b:49:a9:d2:2e:4e:2a:53:
                    f4:95:f3:99:de:55:98:4f:46:42:c4:6a:fa:37:c7:
                    dd:e2:32:c1:b0:22:7d:cf:78:1a:04:15:f3:33:53:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:E6:F9:14:0D:CD:91:F1:EE:36:2D:77:CE:38:F9:32:0A:3B:1B
            X509v3 Authority Key Identifier:
                keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:53:89:3a:00:74:cb:9e:81:cf:39:84:c6:54:99:94:c0:58:
         06:41:a4:b2:56:8c:07:75:93:9f:af:42:d3:f5:aa:bb:22:d4:
         45:fe:87:3c:ba:b9:93:d8:40:e2:55:0d:a9:17:a0:87:6e:de:
         84:fe:37:06:48:6d:3c:48:6d:cc:fb:e9:c3:f8:0f:36:fc:81:
         3a:ba:43:76:4a:94:5c:a8:27:d8:ca:f0:e3:25:10:24:5f:91:
         7b:ae:80:9d:17:4e:30:2c:e4:3b:bb:a5:0a:7c:03:21:18:dd:
         dc:6c:51:2f:69:e9:16:1e:a4:5d:b9:6b:d0:dd:19:6a:cc:58:
         c7:2d:1b:bb:88:f2:24:60:24:a8:7b:85:49:64:03:38:44:1b:
         14:7d:3b:2c:8c:2c:92:3d:8b:01:ef:99:fb:42:04:0d:78:cc:
         fd:c4:8e:3c:af:9d:e3:5b:f5:09:6d:3b:b4:a6:a5:9d:6d:90:
         34:3e:17:13:ac:02:64:fa:78:31:c0:0a:a3:6e:08:ac:1c:dd:
         95:c2:63:65:fd:ac:1f:4a:93:fa:60:09:ce:30:31:96:23:16:
         0a:12:bf:01:35:f1:4e:1f:e7:8e:41:9b:12:75:61:23:40:e2:
         67:e2:fb:a8:88:37:3e:3f:01:1a:d1:c1:fd:10:9b:3b:5b:61:
         78:08:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:43 2025 by rpki-client