Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
File:                     d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json)
Hash identifier:          FjX0VN+TzSlUCz/vB4PdeDrS+01M1HT3kg1GF3fGxN8=
Subject key identifier:   AF:C0:74:0E:14:27:43:62:29:8A:16:58:E1:BB:85:D9:AA:92:DD:99
Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
Certificate issuer:       /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Certificate serial:       094A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
Manifest number:          094A
Signing time:             Mon 16 Jun 2025 20:01:52 +0000
Manifest this update:     Mon 16 Jun 2025 20:01:52 +0000
Manifest next update:     Mon 23 Jun 2025 20:01:52 +0000
Files and hashes:         1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: 0cACLcXsB9AiM9OMK8nh8J1mViCzht2vOJsDiYLK/3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF26, serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
        Validity
            Not Before: Jun 16 20:01:52 2025 GMT
            Not After : Jun 23 20:01:52 2025 GMT
        Subject: CN=68507830-7470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:9b:7d:82:38:b8:2c:2a:83:a6:d4:40:0e:
                    d3:8e:d9:12:f5:01:20:32:23:54:b4:b3:79:25:3d:
                    4b:1b:a7:f0:62:7b:25:fc:00:b0:a5:d2:41:a3:36:
                    33:a6:4c:7f:79:a6:2e:55:89:44:9a:a0:18:78:16:
                    d2:21:2f:ee:4d:85:f2:26:3a:b5:fe:bc:01:9b:4c:
                    36:1d:ca:f4:03:ba:b8:8c:f0:01:4c:0f:7e:af:72:
                    bf:c6:3a:4e:ed:93:26:a8:75:db:58:83:82:61:fc:
                    28:5f:25:41:c5:cd:55:30:a3:00:c3:4e:3b:78:d7:
                    0d:ad:3a:ff:d9:5f:39:17:60:e6:e2:67:a8:54:e9:
                    ce:0a:26:57:08:06:29:8f:1c:ef:4f:04:a7:47:50:
                    11:67:9c:0e:1e:89:ba:78:fc:aa:20:60:74:bb:cb:
                    6a:e9:ce:f4:84:56:4b:44:3c:ec:10:6a:5d:d3:fb:
                    4e:75:e8:30:59:1c:62:4e:61:a6:27:8c:7c:fd:98:
                    f7:f7:55:24:44:f8:5b:c4:c9:00:74:17:fe:40:69:
                    c1:83:6d:54:35:7f:35:a7:68:fc:44:53:fd:44:92:
                    ba:14:e5:be:8e:4e:96:09:08:7b:77:df:62:f7:a4:
                    62:a6:e9:0b:c3:33:d9:f8:d3:d8:4a:d9:5d:44:68:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C0:74:0E:14:27:43:62:29:8A:16:58:E1:BB:85:D9:AA:92:DD:99
            X509v3 Authority Key Identifier:
                keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:0f:18:29:1c:fc:c3:80:a5:b4:ff:d7:dc:c6:db:4b:49:2e:
         04:ea:4d:0c:47:03:03:39:57:66:ee:72:b9:17:2a:f6:72:7b:
         9b:59:b5:8d:a4:c9:eb:6a:a9:88:4d:19:11:e3:87:6c:d4:b7:
         27:0a:9d:75:20:ce:76:1c:23:64:3c:44:2d:b8:aa:28:3f:c4:
         a6:16:4c:cc:1e:5a:82:71:88:86:61:42:61:e9:c5:3f:15:9b:
         c0:5f:c3:9d:f4:79:b9:93:8e:0a:0a:3e:89:9b:8b:c6:63:a2:
         35:38:1f:f1:c7:a2:e7:14:b1:da:d0:5a:30:39:eb:9c:40:f6:
         c0:0f:12:ed:a8:28:17:a9:d3:bd:e4:ef:d3:b6:d8:7c:27:d0:
         54:b6:da:06:31:b1:36:3c:ce:81:51:b2:ca:99:9c:52:dc:32:
         dd:0d:fb:f4:5c:d1:67:3b:91:69:2f:c8:c9:f8:7e:66:8f:31:
         61:92:47:68:83:77:d9:e8:d0:91:7c:5f:2a:ed:48:6b:b1:b8:
         38:11:a4:d5:c9:8f:be:f0:b4:c0:76:6e:b8:b2:44:a5:94:87:
         9d:a4:15:fa:65:d0:98:d7:84:86:f8:3a:92:6f:88:da:4e:f7:
         4a:73:5e:fb:6d:a2:85:10:d4:0e:15:24:26:42:b4:cc:dc:aa:
         24:f4:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:53:53 2025 by rpki-client