Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          5HYnC/dLCl+sWbC3lbkV3zoZ4f30P0Ersjz/S0aa2Xw=
Subject key identifier:   10:A7:41:34:AD:CD:B9:E5:6D:11:5D:20:B2:08:1F:5D:68:0C:5E:24
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          BB
Signing time:             Tue 17 Jun 2025 04:48:35 +0000
Manifest this update:     Tue 17 Jun 2025 04:48:35 +0000
Manifest next update:     Tue 24 Jun 2025 04:48:35 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: IvjVUCbyJFCdH5Kk5aPb3PoGm1EvR5QDtOkMweNIMo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 04:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: Jun 17 04:48:35 2025 GMT
            Not After : Jun 24 04:48:35 2025 GMT
        Subject: CN=6850f3a3-5563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:8a:7f:56:a9:4d:e8:3d:73:f3:95:03:a2:
                    dd:92:97:d8:55:c0:76:31:01:bc:d2:5c:b0:10:00:
                    ea:af:74:e9:ba:50:43:64:30:26:83:05:a6:59:79:
                    e8:5b:f9:2d:2c:d8:ee:29:e0:e7:6f:75:2e:1d:3c:
                    fc:91:b7:7b:7b:6d:ce:09:d1:81:0f:08:c2:c7:01:
                    46:bd:ab:fd:a1:12:33:03:61:2a:2f:de:d1:2b:c3:
                    b3:f5:ee:a6:ef:e4:99:34:56:50:f7:e0:27:62:72:
                    cf:b7:68:a4:fa:63:42:82:03:17:79:c9:15:f7:a3:
                    fd:b6:7d:2c:9f:2f:77:b3:98:ae:a1:5b:6d:55:ae:
                    76:eb:ee:e0:79:cc:d4:f7:f1:ce:5d:b1:aa:62:7e:
                    91:ab:01:80:bc:8c:c6:4a:1b:5b:04:57:0b:c6:ea:
                    dd:d0:52:9c:65:18:51:82:d6:c9:0e:c7:01:c3:37:
                    f7:98:12:68:c4:99:c7:89:42:d2:5d:5a:27:07:5c:
                    c3:dd:ad:f9:75:71:cb:bd:0c:50:a3:92:96:96:64:
                    7b:89:38:70:5d:1b:98:66:33:a8:be:91:06:35:0a:
                    66:2d:0a:64:bf:ad:de:0e:35:91:ae:ea:e7:49:f8:
                    89:c0:e2:ab:02:23:77:16:9c:1e:96:88:47:7f:7c:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:41:34:AD:CD:B9:E5:6D:11:5D:20:B2:08:1F:5D:68:0C:5E:24
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:88:49:7a:8e:6d:cf:6e:52:23:b1:23:4e:42:63:47:01:25:
         3e:ad:52:51:da:14:73:6f:45:b1:5c:be:98:93:52:c8:b0:fd:
         83:b4:a8:75:e2:be:66:c7:f9:4d:cd:54:54:b0:1b:2b:2d:d0:
         c2:82:8b:65:1d:4a:b3:4a:15:94:5f:77:8c:63:82:63:a7:4a:
         35:d3:5a:53:d8:8d:b4:92:69:4b:bf:08:13:51:3c:a3:84:5a:
         3f:cf:f7:de:7d:2a:5c:45:71:d8:06:25:08:25:85:97:fb:ae:
         2b:cf:f8:24:9f:b8:1e:3a:c6:d9:10:84:e6:94:cf:ea:50:9a:
         b8:ad:b0:11:ca:4d:42:4b:41:97:01:94:4f:c7:5f:81:5b:d0:
         ee:09:16:be:24:cf:8d:d9:19:79:63:1a:6e:2e:ec:32:06:a7:
         cb:ff:6e:e0:3c:06:67:5f:b5:c5:f2:19:db:9b:9d:50:eb:a4:
         2d:8f:11:4a:95:a6:16:aa:a4:64:71:02:b2:0f:14:a3:33:90:
         0c:50:67:1b:c3:ec:ec:f1:7c:f0:c3:d0:4d:4c:df:6b:29:13:
         d1:8a:6c:7d:7a:72:7b:82:0a:f6:8c:2f:00:cd:2d:1a:2c:d9:
         ff:0d:ff:c5:a7:4b:d0:40:82:07:cf:1d:5d:5a:4a:ce:5e:42:
         fd:4e:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:41:44 2025 by rpki-client