Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File:                     AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier:          2BRxx72gjeEmut9OKVlu9oWZftsx6SVZBx7vpz9zCVA=
Subject key identifier:   88:DB:16:95:05:9B:F3:EC:E8:C9:76:CD:F8:8B:52:4C:73:1C:1A:70
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer:       /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial:       348D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number:          348D
Signing time:             Sat 14 Jun 2025 15:10:20 +0000
Manifest this update:     Sat 14 Jun 2025 15:10:19 +0000
Manifest next update:     Sat 21 Jun 2025 15:10:19 +0000
Files and hashes:         1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: t6ucZW5GL+OttUZFOHMXyRzOtcpXI9raHZm7krDAPm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
                          rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13453 (0x348d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Validity
            Not Before: Jun 14 15:10:19 2025 GMT
            Not After : Jun 21 15:10:19 2025 GMT
        Subject: CN=684d90dc-8e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:89:b2:10:15:a1:37:1f:94:9e:38:d4:bf:
                    6e:19:af:e7:93:91:a7:51:ac:4a:6a:02:54:49:42:
                    c1:44:db:2f:af:af:17:0c:a1:85:22:a3:73:25:ca:
                    0d:dd:cd:cc:8a:06:30:d9:c5:50:ad:43:7c:0c:c9:
                    a1:9d:93:2d:54:3e:c6:a9:0d:f3:9b:9d:2b:7f:3e:
                    15:87:ad:7a:75:5a:a8:1f:e7:14:cf:a6:e5:cc:75:
                    74:06:4c:11:42:54:56:4d:93:0d:18:28:22:4a:33:
                    aa:1b:68:e4:51:41:a1:33:9a:db:ff:6b:53:ec:a6:
                    7b:ca:c0:af:53:0c:07:0e:93:ab:5b:55:06:ca:84:
                    22:66:c6:42:ae:88:00:98:79:6d:3f:6a:61:a0:32:
                    ce:1c:2d:97:68:97:6f:6a:ab:34:40:a4:70:6b:93:
                    31:a7:e4:66:dd:55:cc:05:e7:1a:45:f1:a3:da:9f:
                    bc:18:12:18:f9:b3:84:f2:48:66:95:95:f4:74:d7:
                    2c:c8:f9:75:7a:d1:b3:7e:4d:10:07:24:6f:80:8c:
                    2e:5c:0f:32:da:cb:c2:1b:ea:ac:fa:07:4a:33:78:
                    7f:68:20:7a:60:50:24:d0:18:bd:9c:eb:df:32:21:
                    c9:b1:a7:92:2c:11:0c:81:a4:8a:16:28:e3:34:5b:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DB:16:95:05:9B:F3:EC:E8:C9:76:CD:F8:8B:52:4C:73:1C:1A:70
            X509v3 Authority Key Identifier:
                keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:0e:de:d8:b9:75:9a:06:37:2f:1e:e2:01:af:66:e6:fc:
         b5:69:d9:b7:d9:46:3c:9b:6e:6e:85:d2:16:73:49:eb:d5:3b:
         2e:6a:bf:76:a0:69:cd:55:77:14:0d:6b:67:d4:87:59:e6:28:
         8f:8b:f5:5e:26:32:c7:d3:71:82:0b:bc:c6:2a:3b:30:8f:cd:
         18:bf:e1:c2:8f:83:bf:1e:96:9c:bc:4f:84:8a:80:e6:52:cc:
         0a:b0:a3:2d:05:90:e5:ae:42:fe:fe:4c:25:6c:2c:2d:a2:03:
         94:84:a6:18:65:81:a3:fd:99:be:ff:47:40:db:9b:52:57:c6:
         57:70:46:9a:bd:2b:4b:80:12:8b:83:96:da:d0:da:5b:09:40:
         ef:30:17:64:42:48:89:20:70:81:5a:99:ea:5b:51:f2:6f:dd:
         cd:e3:bb:68:e5:36:4e:cd:f8:d5:73:61:f3:7d:2f:8a:18:45:
         91:58:ad:e2:0e:dc:62:39:aa:24:80:e2:07:26:ee:f3:ce:8e:
         cb:99:bd:a9:fe:fe:6f:05:4b:fe:38:af:22:07:83:b2:b9:b1:
         8a:ec:71:0a:27:4a:c3:81:ac:fb:57:99:d8:3a:fb:22:f3:18:
         04:07:5e:f3:0e:dc:a8:43:36:99:d5:5c:13:33:9d:05:b3:6d:
         ba:bd:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:10 2025 by rpki-client