Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
File:                     5xDyX0M7YmytODrCnzbCYXy-8Ak.mft (raw, json)
Hash identifier:          OZ4xWoezRnB5SKjgN1BVwcT2+BzHVgyWICPGOV+Sx0o=
Subject key identifier:   B2:E9:D2:5B:CC:D5:6C:A9:C5:30:7D:D3:37:0B:CE:B8:A1:70:B3:7D
Authority key identifier: E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09
Certificate issuer:       /CN=A9184324/serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
Manifest number:          89
Signing time:             Thu 19 Jun 2025 05:51:37 +0000
Manifest this update:     Thu 19 Jun 2025 05:51:37 +0000
Manifest next update:     Thu 26 Jun 2025 05:51:36 +0000
Files and hashes:         1: 5xDyX0M7YmytODrCnzbCYXy-8Ak.crl (hash: 19pkp3WBgxD7egTOClzyHa22+5u9GCLtFSIy0VkqrWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184324, serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009
        Validity
            Not Before: Jun 19 05:51:37 2025 GMT
            Not After : Jun 26 05:51:36 2025 GMT
        Subject: CN=6853a569-50a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:a7:35:0b:2b:52:8f:b9:e7:50:64:90:2e:
                    dc:43:7b:76:7a:22:c3:50:b2:df:1f:67:bb:79:87:
                    00:53:b2:7f:24:e4:35:1b:93:41:7b:9e:10:69:68:
                    7f:60:6a:be:fd:a0:c0:15:b2:3f:03:82:1c:b6:cc:
                    2c:2b:b7:a4:b8:3c:1f:cf:ba:7f:59:91:c4:e7:9f:
                    a4:49:9c:fd:8c:57:40:a9:d8:98:c9:b2:43:5f:eb:
                    51:50:fd:ac:1d:07:d9:cb:5a:11:6e:be:f7:c9:ef:
                    4e:81:f6:0c:dc:10:22:9d:88:3e:26:fa:c5:5e:b8:
                    e5:16:8a:e2:eb:9a:38:09:a7:78:38:9e:26:b0:fc:
                    02:d2:6e:5d:79:21:5e:6a:5a:3f:e6:ba:c7:d1:fb:
                    cf:0b:b2:95:41:39:cb:36:6e:ee:06:88:91:3a:a9:
                    e5:84:c2:45:3b:60:6e:52:5a:f2:94:21:2c:af:0e:
                    df:f4:59:18:5f:2c:6e:8e:f0:7e:bd:1f:b6:2b:aa:
                    b0:98:4d:a2:54:fd:cb:7d:e5:61:21:98:f2:fa:f2:
                    f5:24:63:41:d4:d4:22:4a:f3:16:f0:c4:ba:0e:c6:
                    e2:f4:53:92:97:61:5c:fe:df:b2:99:f0:65:10:7f:
                    23:fc:19:b9:23:9e:39:00:ad:17:5e:10:c9:ac:a2:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:D2:5B:CC:D5:6C:A9:C5:30:7D:D3:37:0B:CE:B8:A1:70:B3:7D
            X509v3 Authority Key Identifier:
                keyid:E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:98:98:22:72:c8:bd:92:b0:70:dc:b3:4b:00:a1:8f:fb:86:
         76:0a:21:01:68:5c:3e:d5:4c:76:42:40:7c:18:ca:6b:2a:42:
         01:34:b4:4c:52:ff:c0:86:c0:bb:f3:2f:cb:ac:f9:a9:22:e8:
         79:72:ce:64:69:31:40:c5:cb:71:7c:02:ce:9e:3b:e3:e9:ae:
         26:30:c7:4e:66:bc:a8:2a:bd:8b:ac:bb:3d:8b:b2:87:d2:61:
         3c:d4:4d:e8:37:4c:87:74:6b:31:53:c7:17:65:ee:ef:f8:54:
         a2:4c:b3:f8:ec:01:67:08:0d:99:b1:44:b4:65:0e:73:16:ca:
         0c:4a:8e:d1:e2:75:c4:9f:90:19:4c:57:21:b8:09:27:cb:f6:
         42:a7:d1:ce:87:a2:d8:14:cd:2a:35:1b:52:a9:3d:f8:d6:f2:
         76:61:16:ea:81:ab:41:81:bc:66:ad:5c:7b:f0:d7:23:0b:11:
         36:cc:20:0d:00:82:ec:9e:ed:34:31:99:5f:c6:01:23:dc:7d:
         d1:38:4c:e7:40:c9:05:d8:44:b2:a3:20:e2:8e:35:fc:3f:d8:
         68:78:ee:6c:14:ca:db:b6:f6:f9:75:57:1f:e0:ef:5f:ab:07:
         eb:97:bb:17:b9:2c:91:a7:52:a1:cb:7d:6e:89:30:61:99:24:
         04:d5:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:51:07 2025 by rpki-client