Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
File:                     96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json)
Hash identifier:          L8ZQlft2u19wdsZ1XHggSOHSxWlyag0NbtQQHUNhlII=
Subject key identifier:   C2:7E:27:A9:6D:25:4B:4B:01:B1:ED:CB:CD:1C:0E:13:ED:2C:84:8E
Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15
Certificate issuer:       /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
Certificate serial:       03BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
Manifest number:          03B1
Signing time:             Fri 25 Apr 2025 00:33:11 +0000
Manifest this update:     Fri 25 Apr 2025 00:33:11 +0000
Manifest next update:     Fri 02 May 2025 00:33:11 +0000
Files and hashes:         1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: HykJ/2daTqZydUd2eqIf8Ogk5kw1WsjbrSmTE/BAVSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15
        Validity
            Not Before: Apr 25 00:33:11 2025 GMT
            Not After : May  2 00:33:11 2025 GMT
        Subject: CN=680ad847-62ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:d8:24:8c:41:24:b9:4c:7f:68:fb:f3:e6:
                    20:42:13:e6:5b:26:32:ba:5f:13:ce:6c:99:83:bf:
                    57:29:f2:45:ba:f1:9b:df:15:17:b5:26:96:95:10:
                    fd:2a:64:06:ed:d6:16:87:34:dd:d7:09:10:f8:a9:
                    85:86:17:e7:55:1a:59:b1:96:85:dc:08:40:b7:a5:
                    0f:04:6c:d1:98:7d:d1:f8:4d:f1:8b:2c:eb:5d:8b:
                    0e:b7:3d:9a:9a:78:00:0e:6f:21:06:f3:fc:3d:1d:
                    b9:0e:53:7c:32:04:ae:10:7f:f6:3e:31:58:cf:04:
                    92:3e:b9:94:1e:81:9f:ab:75:a1:e7:11:2b:e2:0b:
                    91:e8:7d:86:22:16:3c:26:1e:14:43:78:35:2c:d9:
                    e8:8d:37:f3:1a:7f:0e:c8:6d:b9:b8:b5:03:9e:c0:
                    84:d0:44:07:b3:78:18:8c:c5:c8:0d:08:1d:5d:12:
                    76:99:54:36:38:41:76:74:b1:66:ed:9d:23:a2:f5:
                    91:72:ef:f2:7d:51:61:91:64:d5:a7:3a:ee:47:6c:
                    f3:09:1b:84:b4:de:6b:b5:a7:f2:3d:b3:3d:9c:69:
                    12:14:f0:8d:44:67:f8:76:bc:f5:59:a5:cb:39:cd:
                    54:b1:b0:a5:7a:23:4b:0a:d3:4c:91:b7:ed:ce:16:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:27:A9:6D:25:4B:4B:01:B1:ED:CB:CD:1C:0E:13:ED:2C:84:8E
            X509v3 Authority Key Identifier:
                keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:d2:12:9b:a7:ba:e5:81:01:d3:81:f9:26:c8:13:99:b8:
         23:74:0e:79:7e:ac:79:b6:42:9a:9b:c9:ce:5a:a3:1f:02:87:
         26:ee:14:e4:52:9e:22:9a:86:1a:1c:32:65:a6:25:66:86:f9:
         9f:96:57:5d:dc:a1:05:4b:88:db:0e:b7:64:64:01:f2:02:30:
         e1:ce:8e:f3:9f:e3:c2:b2:2c:cf:42:13:b2:80:ed:5e:20:bd:
         09:2d:3d:bd:26:b0:cf:15:7f:7d:55:6c:7c:ca:7e:4b:23:f8:
         43:43:a5:71:a7:ba:a1:7b:21:7c:3b:86:57:ee:28:6c:eb:5b:
         5c:ae:f7:a5:1b:13:5d:07:48:8b:ed:97:09:30:cf:e3:08:05:
         9b:f1:02:c5:22:34:5c:a2:3f:7d:a4:34:c0:1f:00:ba:9d:ab:
         07:35:9d:97:81:37:25:77:ad:61:97:b7:ae:0e:0a:64:f9:66:
         5e:81:57:59:b4:dc:cc:fe:d4:8d:4f:81:ad:53:87:8b:f0:e9:
         2f:43:17:b5:de:fc:4a:67:e4:6a:9a:61:5d:8f:8b:59:21:04:
         41:23:ed:a5:23:f7:d4:d8:4a:dc:f5:1c:20:04:7e:08:e3:55:
         87:ff:86:05:b7:e8:29:74:48:f8:98:f6:01:59:2f:50:05:93:
         19:be:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:10:23 2025 by rpki-client