Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier:          26pgblbL87hc1o5VsJtH7eNLdA3Qp3sBTbcmr+4ZGhs=
Subject key identifier:   6F:C5:50:16:28:86:92:F8:39:2F:2D:42:9F:08:F4:C6:5F:9E:70:46
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer:       /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial:       348D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number:          348C
Signing time:             Sat 14 Jun 2025 14:26:57 +0000
Manifest this update:     Sat 14 Jun 2025 14:26:57 +0000
Manifest next update:     Sat 21 Jun 2025 14:26:57 +0000
Files and hashes:         1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: uksl0HbOJ0+Ski1U9rf1GgCVpdvQXMG+AmnougNx4WI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
                          rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13453 (0x348d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Validity
            Not Before: Jun 14 14:26:57 2025 GMT
            Not After : Jun 21 14:26:57 2025 GMT
        Subject: CN=684d86b1-3416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:d2:0a:97:be:ec:c0:35:fd:0b:fa:12:8f:
                    a0:80:84:b9:d7:1d:3b:82:4e:86:5e:87:af:81:db:
                    44:92:3e:3d:4b:31:af:59:c1:d6:6f:00:2b:91:83:
                    1f:d5:d2:7a:f6:5e:1c:7e:80:59:a8:66:a2:b5:b6:
                    d4:41:8d:a7:8a:30:ee:7d:b4:3f:28:c1:d8:d8:d1:
                    9b:c9:99:2d:e4:65:9e:aa:70:df:e8:fe:7d:fe:1d:
                    a3:c0:e9:ae:05:f0:9d:3a:d9:50:1b:28:22:9b:8e:
                    2f:f8:33:5d:86:4e:66:df:d7:0d:50:54:67:73:02:
                    32:78:51:c2:5c:88:96:c3:6c:26:2a:92:82:b1:46:
                    dd:d5:b8:9f:9a:5d:2d:4a:73:4f:ff:b5:37:73:48:
                    cd:7b:0d:79:73:3e:91:eb:fc:b3:90:30:f5:1f:7c:
                    b9:be:fd:4a:9a:aa:71:47:ab:55:10:ef:b0:60:05:
                    be:5c:62:65:5b:f4:26:f0:5a:23:35:c8:75:88:b6:
                    57:e5:c7:a9:9c:80:39:6e:e1:51:d6:8c:b4:6a:be:
                    b5:3a:0f:e8:b0:a1:61:62:84:1c:79:cc:88:02:d4:
                    d3:60:26:fb:50:b5:96:6a:49:65:ad:98:54:24:67:
                    0a:8f:a3:33:0d:6a:13:63:f9:51:d6:bc:5c:e5:d8:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:50:16:28:86:92:F8:39:2F:2D:42:9F:08:F4:C6:5F:9E:70:46
            X509v3 Authority Key Identifier:
                keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:ab:a6:ba:ae:6b:e2:b4:37:f3:b7:85:5c:20:84:95:c8:
         63:98:fd:b2:b8:a4:bb:23:f4:ce:7c:eb:e0:58:f6:af:d2:33:
         03:81:bf:2c:cd:f2:48:be:3e:3e:7f:ab:d7:12:5a:5a:21:d9:
         52:77:b5:04:6d:e3:92:78:a2:ce:e7:44:1f:96:9b:41:84:8e:
         0c:8f:82:c3:13:1b:4b:8c:3d:8b:7e:23:60:ba:2c:5d:5d:64:
         e6:1d:05:4a:e1:71:d3:3e:eb:14:6e:4a:cf:be:10:70:85:c5:
         95:61:a8:38:ff:52:74:bb:c7:d2:be:b1:29:e1:3c:f3:37:47:
         54:51:a0:87:54:a8:3d:68:19:47:5f:d4:32:25:47:0d:ce:7e:
         97:7d:40:b6:73:13:34:62:fa:68:a2:c5:7e:8a:43:aa:a4:67:
         a9:5e:6e:c3:72:bc:d0:23:a4:5e:18:1a:a8:f1:1c:c0:0f:2c:
         30:c8:92:50:b6:cc:0c:da:d0:1d:26:e7:e0:0b:b0:65:a4:29:
         dc:00:b0:6c:84:e0:5f:c1:2e:51:eb:25:e6:95:48:60:7b:53:
         c9:b6:37:1e:99:7f:44:1f:8d:17:a6:6c:ad:36:99:fa:e4:0e:
         60:e1:3e:b9:0b:c2:75:c0:c7:03:eb:3c:10:75:e6:09:bf:7d:
         71:0f:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:01:02 2025 by rpki-client