Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
File:                     HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json)
Hash identifier:          5g+7H7+uqrd74qnnyjEkcE7JUcMxxOe1iIPJ7pmkG4k=
Subject key identifier:   19:36:7F:21:2D:3B:BB:41:A6:E5:24:AD:CE:57:1D:B4:A4:E5:4B:93
Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
Certificate issuer:       /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
Manifest number:          0521
Signing time:             Thu 12 Jun 2025 23:11:12 +0000
Manifest this update:     Thu 12 Jun 2025 23:11:12 +0000
Manifest next update:     Thu 19 Jun 2025 23:11:12 +0000
Files and hashes:         1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: nqPvCerdbA7MTplGHS4gSeYGMlQvGfcNuBR3lMpuMds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl
                          rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D246A, serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
        Validity
            Not Before: Jun 12 23:11:12 2025 GMT
            Not After : Jun 19 23:11:12 2025 GMT
        Subject: CN=684b5e90-3613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:82:f1:47:28:fb:5e:14:2f:63:9a:de:5c:
                    20:d9:2c:9c:e2:ad:0e:9d:69:4e:bd:06:12:0a:cb:
                    5c:f1:19:c3:d8:0f:c9:5c:e9:fd:0a:31:05:cb:ab:
                    2f:8e:fc:26:2e:0c:35:ee:49:a8:6c:fe:81:9e:8d:
                    81:48:2e:29:30:45:fd:da:71:40:51:95:ae:43:d8:
                    4d:5e:f7:6c:1c:7b:43:7e:71:51:e4:63:a7:fa:b6:
                    6e:ed:59:dd:3c:5d:b4:e0:b2:3f:a8:74:fa:c2:7a:
                    4b:8c:ce:85:69:38:d6:a2:c3:0b:3e:ab:06:b3:24:
                    7b:e0:a4:52:21:24:2b:1e:f5:65:6d:92:fa:d2:23:
                    cf:61:f7:e3:ea:e4:08:9f:dc:01:ff:00:43:40:31:
                    93:fd:5d:f8:53:90:d0:dd:c9:19:79:27:ff:12:44:
                    77:a6:3d:1a:5e:38:0f:0c:b3:3a:31:a4:10:72:5a:
                    9d:ca:f9:99:97:4a:56:b4:e0:7e:b4:00:d7:53:0f:
                    31:8e:f6:59:5d:2e:b1:be:05:e3:36:c0:1f:03:5c:
                    a6:52:14:15:90:a5:2e:86:37:f2:13:40:45:52:34:
                    fb:06:92:ab:a0:c3:06:23:58:e3:b5:4c:66:0f:b6:
                    41:ba:31:57:aa:64:99:b3:6d:88:b7:ca:11:a1:ac:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:7F:21:2D:3B:BB:41:A6:E5:24:AD:CE:57:1D:B4:A4:E5:4B:93
            X509v3 Authority Key Identifier:
                keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:99:a6:1c:d3:80:ab:bd:e5:59:83:8c:db:99:d7:f8:4e:
         fb:dc:76:0e:b6:41:20:6a:69:e5:61:cc:30:9e:96:2d:7c:a4:
         18:d6:a7:0f:ad:c8:b2:7f:88:4c:4c:8b:7d:0e:82:9e:47:a5:
         b8:8d:76:0b:6e:4f:aa:4e:04:d9:99:29:13:36:02:ac:ca:1d:
         31:63:c6:40:64:3c:da:25:c4:6d:60:0d:5a:19:ea:1e:e5:9f:
         02:c9:74:9e:cf:9e:88:1d:da:fc:78:a2:2f:98:e5:13:7f:ec:
         68:ac:ee:86:a2:2a:b8:97:7b:b9:2e:85:3e:66:48:19:a4:50:
         29:dc:19:95:8a:21:b2:f8:ed:ac:11:d2:19:89:78:00:0f:7f:
         34:1e:fa:b4:17:22:57:38:61:39:e2:7f:b6:97:26:1f:86:c6:
         a9:92:a1:2b:17:35:4f:93:f9:9b:c7:cf:a9:a6:8a:5f:18:be:
         e4:4b:96:2b:47:f7:52:4a:d7:e2:23:31:14:d9:cd:cc:cd:05:
         14:ea:58:0e:d0:6a:7a:e2:96:4e:11:2b:d1:f8:ba:76:43:d1:
         4e:45:96:a2:7e:8d:84:f4:c2:6e:b1:92:cf:15:38:84:ac:6d:
         f4:4c:b0:35:d6:e6:3c:c1:89:aa:88:b7:30:31:f4:35:a0:57:
         3e:ab:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:45:42 2025 by rpki-client