Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
File:                     V6UulqV__YXyDDjsMV2kB_6mhqg.mft (raw, json)
Hash identifier:          KLCbD43LORhI396s1EWTcFRA0yCZKdustqZO4gNZeSE=
Subject key identifier:   A0:D5:A2:98:6C:79:60:38:19:7D:97:D6:A1:6F:43:FD:7E:0C:6A:A9
Authority key identifier: 57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8
Certificate issuer:       /CN=A91AEBC2/serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
Manifest number:          0571
Signing time:             Thu 24 Apr 2025 23:04:47 +0000
Manifest this update:     Thu 24 Apr 2025 23:04:46 +0000
Manifest next update:     Thu 01 May 2025 23:04:46 +0000
Files and hashes:         1: V6UulqV__YXyDDjsMV2kB_6mhqg.crl (hash: t0vtP9PWCpURz+T+7nq5b6S5c+3uRLtiF8V6gncwY9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.crl
                          rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBC2, serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
        Validity
            Not Before: Apr 24 23:04:46 2025 GMT
            Not After : May  1 23:04:46 2025 GMT
        Subject: CN=680ac38e-10f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:70:b1:60:2d:87:28:9b:ff:66:55:6f:03:
                    42:f6:4a:b5:ff:47:4b:59:b8:de:8b:21:16:d5:86:
                    76:5f:90:fe:ac:24:e1:f6:ab:13:bc:13:df:73:4b:
                    d3:cd:52:f0:2d:6a:b9:29:c6:5b:b8:65:b3:69:92:
                    dd:db:6e:57:ec:b5:f6:36:a4:e8:52:34:11:60:e7:
                    27:c7:73:1b:f8:d4:53:1c:d5:36:27:3a:29:76:b2:
                    f9:02:2a:68:23:02:9a:dd:e0:ca:65:c7:aa:d7:fe:
                    46:2e:09:64:8e:27:79:66:0f:36:2c:a9:fa:d1:0d:
                    5d:32:f2:0e:3d:ee:98:9c:a7:c5:81:c1:c6:30:85:
                    dc:31:6d:09:8c:e1:a1:f2:c9:02:3a:d4:b4:f6:54:
                    e3:11:71:04:7f:0a:8b:dd:97:67:34:61:15:41:f0:
                    22:7e:cf:f6:c9:ce:87:59:c5:0b:c3:cb:7d:40:a2:
                    6a:1b:f9:a1:9c:2f:d8:17:71:a1:9e:0a:9a:08:40:
                    5e:33:16:c2:d8:7a:cb:3c:d6:71:73:3d:8b:09:e6:
                    a8:10:e8:f3:00:9d:ba:f5:b4:41:59:a1:20:35:be:
                    e1:37:c8:53:70:ce:e5:bf:81:82:44:2c:f7:a9:6c:
                    07:65:51:49:c4:a1:2d:ca:73:80:ec:32:8e:2e:87:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:A2:98:6C:79:60:38:19:7D:97:D6:A1:6F:43:FD:7E:0C:6A:A9
            X509v3 Authority Key Identifier:
                keyid:57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:a9:39:b2:61:62:16:25:da:b2:86:c5:91:2b:4d:b6:8a:
         1a:3f:24:9b:09:fe:39:f8:b7:08:bb:3d:ed:86:c7:31:ed:9a:
         a1:9a:9a:15:ae:d3:76:f4:8e:90:f1:2d:b5:10:a1:7d:99:f0:
         01:f2:04:c7:20:95:d9:ba:da:09:fd:9d:e3:0e:54:73:c7:d7:
         5c:af:48:4e:84:66:3b:25:d3:ff:3c:41:bf:4e:39:1b:52:8a:
         f8:21:18:2c:a6:25:c8:e8:fc:bd:99:f7:4d:43:28:6f:52:e5:
         b4:8f:81:f8:bb:b4:bd:2a:53:e7:57:50:28:51:71:3f:e6:be:
         67:75:21:9f:ca:99:41:e0:34:36:6f:34:71:d4:cc:fb:54:2e:
         57:ec:3f:6e:8d:4f:e6:c9:48:f7:73:a4:2c:80:c1:5c:1c:1d:
         e9:17:aa:bf:0f:f5:84:b4:65:3b:0e:8f:f7:8c:06:b9:d0:8c:
         b8:ce:57:91:75:f8:8d:30:87:a6:84:f2:a4:12:a9:d9:1c:24:
         ab:e1:e9:36:a5:db:a9:d4:96:b2:76:21:12:16:08:aa:27:7f:
         00:42:4b:20:d6:22:3e:7e:a5:9e:c7:3a:70:5c:50:cc:4f:47:
         66:6b:27:74:97:2d:38:5a:83:57:a0:9c:8e:49:83:34:50:e2:
         21:41:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:19:14 2025 by rpki-client