Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          YkItmk5yYv+kf3RfsYlQYdrEkX+LLYmTZPnuQfmb2mU=
Subject key identifier:   43:A7:A0:88:98:15:39:81:22:02:5A:A8:B2:E3:99:B1:5E:60:2C:F1
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          03D8
Signing time:             Fri 13 Jun 2025 00:11:11 +0000
Manifest this update:     Fri 13 Jun 2025 00:11:10 +0000
Manifest next update:     Fri 20 Jun 2025 00:11:10 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: kY4ljLcngzbLM+w3/dXkCVTLsTnxuRZnnyuM2gOcIhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Jun 13 00:11:10 2025 GMT
            Not After : Jun 20 00:11:10 2025 GMT
        Subject: CN=684b6c9e-7f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:02:09:53:e7:ae:ba:c2:15:96:c1:ac:ff:
                    e0:91:a5:5e:9c:f4:e8:7a:03:af:63:6b:c3:77:23:
                    d3:22:8b:4e:01:3d:fc:62:dd:b2:87:5e:7f:d7:5c:
                    c1:2b:73:75:b5:50:ca:aa:70:50:22:46:f5:c0:85:
                    f0:e4:17:be:9b:2e:7d:16:05:e1:3f:67:e0:d0:1f:
                    2f:8f:01:a2:2c:d7:0c:9f:9a:61:fe:e0:25:cc:c8:
                    16:15:22:96:07:fc:a9:e8:12:38:7c:83:59:11:e4:
                    a7:44:dd:da:ab:ed:aa:d5:74:96:e3:0b:af:b2:96:
                    34:22:73:e6:42:5c:9f:ab:d0:04:53:d9:6d:b8:b5:
                    22:37:a8:1c:91:86:09:c7:19:ac:02:3c:d7:c9:c4:
                    3d:50:fa:44:51:56:d5:f8:7f:11:2d:d0:39:ef:0e:
                    a2:21:b9:34:7a:c7:30:9b:c8:1f:07:a6:69:0a:43:
                    ee:4f:b3:55:03:81:00:4e:c7:13:48:7d:c8:5f:10:
                    53:55:93:a5:ac:d5:3c:9e:0b:ef:c8:74:94:c0:1f:
                    ee:8c:e3:b3:5a:e0:08:96:7a:52:7c:8b:e1:35:ac:
                    96:a4:c7:52:ec:62:77:e5:e3:da:90:35:ce:89:dd:
                    10:2b:3e:23:5d:d2:69:ad:a4:ab:d8:4b:8f:79:f3:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:A0:88:98:15:39:81:22:02:5A:A8:B2:E3:99:B1:5E:60:2C:F1
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:fc:4d:83:5c:c7:e0:7e:b0:60:2a:9a:42:0a:bb:85:af:
         25:a1:6b:93:a6:5f:e3:5a:be:24:bd:72:6f:f9:4e:39:bc:ac:
         4c:e9:ca:0c:bd:b5:e9:a2:e9:03:63:94:83:ff:31:07:83:23:
         e0:f7:95:31:e3:76:9d:11:bc:49:e6:8d:f7:f2:2b:d1:0b:21:
         c6:b3:eb:8b:d8:bb:3a:6e:c6:6d:78:39:49:0f:37:9e:49:c9:
         0f:27:12:ac:91:d2:4a:52:84:4f:04:26:a0:57:a1:8a:68:1c:
         e4:56:f1:4a:97:5d:46:b9:b9:f6:1a:44:d1:d1:99:ca:9c:5c:
         7f:4b:76:57:b4:87:6e:e5:34:81:89:8d:b8:bd:27:d8:50:37:
         7c:74:6f:e4:b7:7f:47:4e:1f:1e:0d:2d:08:24:4d:49:d6:c9:
         34:7d:60:40:6f:f4:9b:75:ac:62:62:a1:d4:c2:e8:87:bb:81:
         e7:52:53:61:ea:eb:24:a8:fe:ed:d3:3c:99:8f:81:2e:c3:94:
         b3:d3:5c:05:a7:04:dc:7b:8b:27:9a:0a:1d:e4:d4:c8:7f:51:
         cc:76:ab:1a:3a:92:59:54:d5:ed:84:7b:9a:53:82:ac:e1:30:
         af:8d:a0:00:cc:55:48:d6:f8:1e:a1:f5:43:6e:33:31:e4:ab:
         e1:20:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:28:53 2025 by rpki-client