Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          dvd13Sf8jxDWbEPfq+bzmMwRcF2q+xYKBwQnDt+0wbg=
Subject key identifier:   0F:3D:42:82:49:91:1B:A8:08:58:11:53:5E:D2:7D:5F:7D:09:D3:5E
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       18B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          4690
Signing time:             Sat 14 Jun 2025 15:46:26 +0000
Manifest this update:     Sat 14 Jun 2025 15:46:26 +0000
Manifest next update:     Sat 21 Jun 2025 15:46:26 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: DIZeyQ3brv3GUz66pmYq0M+FPoHk0whqsqcAriMLwZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6327 (0x18b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: Jun 14 15:46:26 2025 GMT
            Not After : Jun 21 15:46:26 2025 GMT
        Subject: CN=684d9952-18a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:37:7a:42:6e:a5:0f:2f:c6:79:30:88:00:
                    d8:1c:c8:10:e2:08:86:49:53:d9:30:e2:04:24:dd:
                    3c:cd:85:6a:60:c7:03:80:39:3b:03:bd:8a:67:81:
                    79:63:c0:76:27:3e:95:d2:ca:3d:be:b4:ff:e2:6f:
                    a3:d1:11:85:ef:09:c3:9c:18:72:78:3e:d5:94:07:
                    2a:cf:c9:96:75:62:dd:0a:e1:09:db:ed:d2:45:31:
                    6f:08:25:a8:e0:e9:41:2a:01:26:f2:7a:9e:48:79:
                    5d:cc:8c:71:dd:20:33:5e:ab:96:04:1d:f0:be:9e:
                    fc:11:00:ab:44:d6:bf:19:40:08:53:52:d5:46:ba:
                    e3:61:c3:20:e2:63:67:c6:73:0d:bc:83:d2:6c:d4:
                    5f:29:4a:46:b0:7f:33:4f:ec:52:ee:c0:48:d4:ff:
                    3b:63:1e:b1:c5:bb:bc:42:aa:4a:cc:e7:21:45:4d:
                    4d:78:af:4d:9d:11:3f:d5:95:c3:aa:ca:6c:54:d1:
                    16:73:15:67:cd:6c:17:9f:71:57:a4:6a:bc:5c:d6:
                    38:a8:a3:2f:ee:09:43:30:db:a1:b5:51:39:56:87:
                    29:60:54:9b:f4:4a:24:8d:5b:e5:84:e4:a5:4f:ac:
                    97:13:fd:5e:98:3c:9e:31:3d:6e:8b:70:19:5b:bd:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:42:82:49:91:1B:A8:08:58:11:53:5E:D2:7D:5F:7D:09:D3:5E
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:36:99:b6:87:e6:36:4b:fd:ce:a5:f8:29:09:05:4f:a9:
         4d:25:3e:b3:5c:ce:0f:43:34:99:61:74:af:8d:e3:33:d0:4a:
         b8:d1:fd:5d:39:3d:e7:05:6f:7a:c6:09:3a:dd:33:92:dd:f8:
         82:a8:dc:44:27:95:11:e9:8f:27:bf:a7:bf:f1:dc:57:82:95:
         82:12:3f:bc:08:66:a6:5d:93:15:ef:af:0c:9f:6b:ae:91:60:
         99:72:a0:22:0e:25:2b:c4:ee:49:51:cd:a4:a8:fc:6d:1d:c7:
         ad:b5:93:66:b2:1a:ef:a8:7a:eb:c0:01:f6:2a:5c:96:e2:8b:
         fd:1c:3e:16:4e:dd:b4:9a:ca:1e:de:b2:04:ad:bc:ac:e9:2c:
         01:24:0c:4a:ef:42:54:01:3f:2b:85:c2:a5:20:a0:6b:ad:a9:
         9d:01:ea:4a:30:25:34:d2:90:96:26:78:60:07:28:74:f7:f0:
         47:fd:ca:ec:4e:45:bd:15:2a:aa:88:f1:38:8e:45:29:48:00:
         34:00:24:90:85:af:1b:55:fc:42:af:c3:87:d9:9e:86:ff:52:
         63:2b:3e:58:f6:c1:5d:c0:8b:c3:c1:85:04:a9:92:3d:24:33:
         57:38:69:14:52:8d:07:56:28:7d:35:74:b3:bd:bb:1e:07:8c:
         30:51:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:43 2025 by rpki-client