Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          dZk5+EfGYOG7U8UZhOFL5wnvHhhEScpjffvwwTs0QCc=
Subject key identifier:   A2:2E:45:11:30:D5:9C:90:57:30:12:E2:A3:18:AC:43:40:55:DB:10
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       0856
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          12F6
Signing time:             Thu 24 Apr 2025 19:24:24 +0000
Manifest this update:     Thu 24 Apr 2025 19:24:23 +0000
Manifest next update:     Thu 01 May 2025 19:24:23 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: +dj+YxBl23av0w2g78/z2uQsg5IdcUhHPRuf+NsYUU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Apr 24 19:24:23 2025 GMT
            Not After : May  1 19:24:23 2025 GMT
        Subject: CN=680a8fe7-2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:91:6f:16:25:c1:8d:f1:45:62:c1:dd:08:
                    e7:ec:cb:c9:e9:0b:2d:3d:f2:3b:be:1d:2e:46:75:
                    b5:b0:d5:6e:68:6e:a8:4d:46:8b:02:60:a3:e1:dc:
                    6f:f5:0c:43:da:e2:2d:ba:3f:5a:36:ef:30:89:1f:
                    64:44:45:91:7f:ed:de:b0:0c:84:f0:ea:46:85:23:
                    0a:18:2a:fb:ee:7c:b2:b7:44:3d:c6:b1:4d:e9:c4:
                    16:f9:85:e8:8d:02:5c:ee:86:62:b0:d9:11:f9:ab:
                    6b:27:8b:39:fb:13:52:83:b7:6b:2c:a6:cc:7d:95:
                    64:a8:29:34:a2:79:9f:da:97:8f:4e:f9:06:1f:3c:
                    7f:5c:98:9a:80:56:a8:63:b3:f8:f0:84:7d:5d:bb:
                    7d:5f:fd:fe:a8:b9:83:7c:01:7e:ec:c7:3a:76:cb:
                    5b:f3:db:d2:b0:35:cc:82:00:7e:52:a7:8b:3b:22:
                    35:d4:a0:11:08:11:f3:f8:cd:c2:91:fe:be:5f:c6:
                    8a:20:0d:92:7c:e1:08:80:3b:b7:9f:cd:09:8f:7b:
                    46:d4:1b:d7:4b:29:f6:b2:ec:0a:08:76:eb:8e:cf:
                    33:e0:0c:58:50:1d:cc:b8:ce:93:d1:f0:41:86:ef:
                    0b:be:9f:ab:cd:65:43:35:b9:50:a9:a0:4c:00:28:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:45:11:30:D5:9C:90:57:30:12:E2:A3:18:AC:43:40:55:DB:10
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:57:a9:ec:fb:07:f0:64:c6:9b:61:bb:19:08:c0:e1:ff:
         7c:50:76:68:f4:63:93:bd:d3:f3:f6:c2:08:cd:74:75:dc:67:
         c7:48:80:81:b4:9c:ca:2b:1a:24:a4:4d:2c:0f:48:b8:0d:b8:
         e7:27:b2:b2:16:46:cb:3e:7c:c4:c2:60:e7:55:14:f9:69:3f:
         88:79:58:17:99:69:e7:07:ab:bd:8c:8e:47:45:10:a5:6d:ff:
         5b:ed:0a:ef:2c:b2:ac:0c:55:ee:43:9a:fc:42:17:f2:87:3d:
         10:96:de:29:c1:26:53:2b:7a:0c:6d:45:5a:23:d4:06:01:22:
         b4:57:99:79:09:27:d7:96:3f:35:a0:bd:55:07:4c:fb:94:21:
         22:90:61:1a:af:70:1f:ba:e0:73:ec:e6:b2:2f:f9:ec:03:b6:
         99:77:a1:2b:9b:9f:bd:a2:9d:26:f6:13:87:1a:ff:09:2c:b9:
         db:f0:83:ca:50:e0:d5:be:0a:cf:92:bc:4c:4c:ed:5f:c3:7a:
         1b:d8:df:40:a5:64:07:e9:bd:fd:57:c4:c5:23:aa:4e:2b:63:
         8d:f9:42:e2:36:76:30:e9:1a:11:3c:7d:9c:08:fc:2f:8d:10:
         a7:3e:f8:29:cc:3a:48:36:8c:49:ba:68:1a:59:12:cd:0d:7d:
         ec:04:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:19 2025 by rpki-client