Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
File:                     F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json)
Hash identifier:          zXFryXlhoDkrZGbnm3hpQ7N/Id2jLQ3aovS/1B8RNaE=
Subject key identifier:   19:3E:35:A4:C0:05:F5:3A:CB:9F:2D:1A:75:C8:27:E1:2F:92:9C:DC
Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68
Certificate issuer:       /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
Manifest number:          0563
Signing time:             Thu 12 Jun 2025 23:13:59 +0000
Manifest this update:     Thu 12 Jun 2025 23:13:59 +0000
Manifest next update:     Thu 19 Jun 2025 23:13:59 +0000
Files and hashes:         1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: l8G9JiCJ3f6bzG9MsXm23HQjYtWG5gOXybncWyhgXec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl
                          rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
        Validity
            Not Before: Jun 12 23:13:59 2025 GMT
            Not After : Jun 19 23:13:59 2025 GMT
        Subject: CN=684b5f37-e4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:5f:fa:04:06:fd:d0:4e:50:6e:40:02:f0:
                    3f:8b:d9:79:e0:cc:ea:f6:47:eb:fd:a0:86:4f:ab:
                    1b:5c:ff:fb:5a:9c:2c:70:ea:d3:85:19:59:61:48:
                    6b:c8:ba:ef:f8:84:80:c5:b2:f2:e6:24:f7:63:06:
                    de:47:ab:3b:f8:6f:f6:e8:f0:8e:28:1d:f9:56:5d:
                    55:87:40:75:ff:5b:0d:df:7a:d3:ba:22:f6:fb:12:
                    c0:6f:e6:b7:f0:17:d0:38:98:7f:63:9b:70:7b:1d:
                    b2:5a:d3:31:89:00:b0:5c:36:9b:53:90:fb:92:1a:
                    6d:64:1d:0e:93:a0:96:89:d8:6e:92:c6:4b:5e:0f:
                    c9:bc:bb:60:6c:e1:0a:9f:90:cb:cb:f1:df:2c:d4:
                    50:45:b9:db:9b:b9:6c:d4:d7:80:0a:dd:aa:92:dd:
                    33:b0:ec:ac:1f:2e:a6:78:86:9f:e1:cd:b1:4a:83:
                    60:fa:64:ff:2d:2f:ed:1c:aa:2f:5d:9f:b1:14:92:
                    49:23:5b:b9:d4:4f:8c:57:cd:3a:8e:d8:2a:ea:9d:
                    b6:6a:e7:17:ed:6b:cb:5c:79:4c:05:29:85:2f:2a:
                    53:a5:cc:5d:4f:da:07:9a:77:01:15:9f:78:1d:88:
                    44:96:9b:c8:89:e8:da:9a:6d:d2:6b:6b:41:08:31:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:35:A4:C0:05:F5:3A:CB:9F:2D:1A:75:C8:27:E1:2F:92:9C:DC
            X509v3 Authority Key Identifier:
                keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:fc:0f:06:62:56:58:ed:13:df:38:c7:42:aa:fb:b6:31:
         2c:5d:7a:2d:ea:0f:78:31:84:60:59:e3:ea:9e:85:13:da:51:
         d9:eb:2d:7f:68:8c:9f:21:73:9c:09:09:f1:fe:90:f0:15:a9:
         37:0b:f8:db:0f:15:ea:88:24:69:fe:34:05:b0:40:14:b6:42:
         37:b5:7f:74:79:e9:f9:88:a8:a4:02:22:95:c7:11:c7:da:9f:
         23:77:a5:f5:7e:c8:f6:6e:00:3f:64:a8:b2:23:5b:b6:3a:61:
         11:1f:da:a2:e6:ce:6c:a1:10:33:20:ed:5d:fd:3b:32:f7:d3:
         bb:14:92:67:5b:44:f3:ad:a6:19:85:b5:fb:67:a2:4e:fa:8a:
         04:34:58:36:08:f3:99:f2:20:ff:e0:20:bc:42:21:e5:5e:c3:
         17:d6:37:97:67:c2:d9:b7:7f:32:00:3e:f1:fd:34:5d:da:37:
         ba:b5:08:1a:05:ab:89:66:23:f1:07:f6:19:7c:0f:ab:0b:9d:
         6d:a4:51:1e:4c:4b:ef:5d:57:dc:94:aa:62:c8:06:1a:73:71:
         9f:da:6b:8e:80:80:2b:c2:b0:4f:9c:9c:f1:c5:19:c1:10:1b:
         18:f8:86:2d:b1:89:13:99:79:4a:c1:bc:12:8a:f9:37:a2:c4:
         60:09:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:51:10 2025 by rpki-client