Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          kTRcQNm8dbXIEXad4woyrtzVYgm/coF1tjhfRiS7xdw=
Subject key identifier:   E0:2F:B5:36:78:2F:24:DD:4C:A3:DA:12:CB:66:0F:40:3E:68:65:73
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          59
Signing time:             Sun 15 Jun 2025 06:14:58 +0000
Manifest this update:     Sun 15 Jun 2025 06:14:58 +0000
Manifest next update:     Sun 22 Jun 2025 06:14:58 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: /ybENP/tQR6UUrr97PKrEuZSCFQt0CzOQMmGP+HBAQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Jun 15 06:14:58 2025 GMT
            Not After : Jun 22 06:14:58 2025 GMT
        Subject: CN=684e64e2-f7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:5b:f7:6a:9d:d8:8e:fb:7c:9a:fa:76:bb:
                    3d:9d:5c:d9:aa:e6:84:bb:e1:0b:b7:29:f8:d6:90:
                    d6:aa:25:84:cb:c6:82:d7:7e:64:62:92:bf:5f:1a:
                    8e:6f:6c:d1:f0:fd:db:f3:84:aa:75:bb:2b:90:23:
                    f2:99:65:0e:49:7f:83:9c:34:28:dd:40:5d:b8:ba:
                    75:87:52:65:cf:98:85:9f:60:53:19:96:11:44:b7:
                    10:2b:cf:72:51:9c:54:16:64:18:9b:16:08:6a:3e:
                    50:be:31:cc:5a:56:da:63:ca:b9:d6:4c:2b:ff:ec:
                    4f:9b:e0:82:44:f5:40:43:2e:15:0e:e5:20:6b:76:
                    34:6d:be:25:c1:60:03:5d:89:36:b4:7c:a8:f0:4f:
                    44:94:e0:26:5a:fc:d5:6a:b5:62:23:94:7d:89:ca:
                    eb:4b:0b:4b:98:2d:59:91:5f:d0:fe:31:35:c5:44:
                    6d:94:a1:20:68:9c:01:fd:fc:58:3d:89:20:d0:d6:
                    9f:8e:50:75:41:fb:1f:43:45:d5:a4:cd:9e:a4:2c:
                    fe:9b:2d:a1:58:52:54:b4:c4:f3:26:15:63:d7:6f:
                    af:16:be:ff:60:d4:33:cf:4c:41:a2:9d:21:68:60:
                    ba:14:a2:02:40:e4:de:44:22:dd:93:26:a0:02:51:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:B5:36:78:2F:24:DD:4C:A3:DA:12:CB:66:0F:40:3E:68:65:73
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:40:65:0d:2c:59:3d:c1:7d:d1:a7:39:6a:39:74:4c:f8:f9:
         06:3c:3d:48:e4:b5:99:f2:bf:03:9b:d0:e9:c9:d0:dd:f7:ff:
         7d:27:db:18:ee:09:69:0b:f1:b0:3d:33:26:21:db:64:62:48:
         2f:11:a4:db:c8:0a:8d:50:83:b9:67:fc:a6:49:3a:66:a1:fb:
         9c:90:c3:e2:dc:5a:40:82:e4:a3:85:93:a9:af:d8:c7:95:ea:
         e6:71:22:46:fd:32:2e:62:ac:32:65:fe:cb:26:75:5b:37:8f:
         cc:02:65:28:40:2c:c6:94:b2:ea:ff:c8:59:fd:ad:79:7b:d6:
         98:3e:38:23:cb:40:ea:7a:3f:f5:f9:80:36:e3:92:b3:09:3e:
         20:6c:42:92:a5:a7:18:e9:65:2e:21:9a:6e:ec:0a:2a:51:d4:
         72:6b:10:20:cc:55:d4:ae:c3:e0:3f:cc:68:bb:aa:81:69:6e:
         dc:10:2e:bd:a6:53:04:13:1a:18:ea:7f:44:7f:d1:b5:64:3b:
         69:4f:b2:74:84:b1:04:e6:f3:cb:39:85:53:f3:b1:fb:a4:cf:
         de:2f:7c:92:04:88:86:15:b7:b6:a8:45:5e:61:b7:ca:9e:dd:
         25:87:76:68:81:a1:1c:84:ae:2a:5d:ef:29:4f:3e:9c:26:39:
         48:cc:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:38:48 2025 by rpki-client