Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          0SLlWPdwiqIu+3CTfTTBzhKSw/D45737u/c3ut0sNOo=
Subject key identifier:   CF:51:46:EB:D7:AD:D3:10:8E:15:9B:7F:C0:D6:9F:E5:3E:2C:9B:F5
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          B0
Signing time:             Sun 15 Jun 2025 05:08:17 +0000
Manifest this update:     Sun 15 Jun 2025 05:08:16 +0000
Manifest next update:     Sun 22 Jun 2025 05:08:16 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: H/4q5Zj0vNBLTMwrHC+X7FKDk6rifwh0Qg0HovbFsq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Jun 15 05:08:16 2025 GMT
            Not After : Jun 22 05:08:16 2025 GMT
        Subject: CN=684e5541-0e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:a1:3a:36:c8:d2:7d:08:11:28:6a:b8:b3:
                    12:24:93:1a:c8:10:50:0f:62:c9:61:35:60:97:8e:
                    76:6f:2e:d0:05:c7:d8:25:90:62:23:b9:81:30:bb:
                    fa:ea:59:09:04:3a:4a:52:fd:25:af:a8:65:df:08:
                    e1:25:3a:9d:a0:61:c6:23:73:6d:22:e3:65:b0:eb:
                    e5:88:60:7b:4d:23:6f:4f:b6:b5:3c:8d:df:2b:5f:
                    1f:f5:1d:f1:88:2c:fd:89:d9:1f:6f:35:03:a6:7e:
                    61:e5:f3:7b:85:04:a6:cd:22:22:d4:4c:8c:8f:81:
                    73:38:47:3b:43:d6:1f:b6:1d:ac:83:ed:0c:da:b9:
                    f4:df:99:fe:b4:ec:da:5d:8a:7c:60:ac:7d:8e:42:
                    2e:4f:ba:20:84:bd:aa:ab:80:9b:6b:4f:6d:cf:10:
                    8b:b5:61:a7:55:b0:6a:a5:21:33:24:a4:4f:3c:c8:
                    95:20:ae:32:5e:1c:3b:56:e7:7d:4b:62:be:07:38:
                    09:25:b7:8e:8e:0c:fa:a2:6f:a8:4b:a4:1c:6d:6f:
                    80:1d:51:ad:a3:1b:08:b8:b4:25:ac:78:f5:bc:9d:
                    fd:42:61:80:ea:c8:8e:f6:a7:ac:81:3a:09:95:c2:
                    b3:a7:d1:e0:75:29:99:ef:3b:af:e8:2e:0c:1e:2e:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:46:EB:D7:AD:D3:10:8E:15:9B:7F:C0:D6:9F:E5:3E:2C:9B:F5
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:75:03:79:84:c6:7a:5c:da:34:e4:18:11:36:27:45:80:
         bc:98:98:e6:2d:17:3f:25:7f:b4:08:f1:49:8a:ce:90:74:88:
         d5:64:ac:3d:fb:8d:ed:12:9f:77:ea:22:78:0c:34:6e:58:d5:
         3e:cd:44:eb:5c:8e:0e:8f:7d:c7:65:b1:81:9c:72:76:b9:59:
         da:5f:a6:2e:18:e3:82:68:b5:80:2e:f9:2c:e0:06:fb:e2:90:
         d9:06:e2:07:cb:1c:8d:99:a2:72:1a:e1:64:0a:80:2c:d1:4a:
         d4:d3:ad:c4:e9:47:c3:95:e1:a8:76:bc:8b:e0:d4:a7:1a:e8:
         ef:77:df:81:30:f7:96:61:f5:ea:c5:30:df:52:a0:35:ca:90:
         34:90:de:87:11:1d:c7:1c:3f:84:a4:32:eb:26:70:26:f2:a2:
         f6:4e:93:3c:45:13:7b:6b:2c:37:41:cc:cd:a8:84:10:95:5b:
         18:bf:76:93:bf:85:d1:b5:c8:7f:28:06:ea:d7:8f:eb:93:37:
         90:4a:fa:95:7d:43:8e:ec:ae:db:dd:4b:c0:bc:ce:8a:d9:bb:
         c5:86:f3:15:22:1d:f2:dd:b6:b3:5a:74:7b:d1:6c:7f:40:d4:
         ea:69:bb:cf:5a:9c:82:c9:0b:b8:c4:c2:71:5a:63:f6:cc:15:
         3c:8b:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:04 2025 by rpki-client