Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File:                     5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier:          Ne1sKZ+7uxpp92bNtBjv2EvfSQNVYNayGFhLskpGglA=
Subject key identifier:   76:1E:43:10:0B:91:EA:B4:5C:98:F4:25:C7:F9:7E:5B:2D:83:3C:BC
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer:       /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number:          41
Signing time:             Fri 13 Jun 2025 06:21:31 +0000
Manifest this update:     Fri 13 Jun 2025 06:21:30 +0000
Manifest next update:     Fri 20 Jun 2025 06:21:30 +0000
Files and hashes:         1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: PhOGTtYED3x4/wW/vWKeptiAj5BVfCOFSflhvFom+XU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
        Validity
            Not Before: Jun 13 06:21:30 2025 GMT
            Not After : Jun 20 06:21:30 2025 GMT
        Subject: CN=684bc36a-f3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:f7:6e:65:c3:57:7e:62:72:4a:43:83:3b:
                    70:3e:59:5b:34:d6:72:59:cf:01:dc:8c:a4:5d:6d:
                    f9:23:f5:0b:ce:11:57:50:9d:cc:a6:e5:2f:de:ec:
                    71:5d:27:b6:79:1d:7d:cf:c9:0d:6d:55:10:ec:13:
                    79:7b:b6:dc:45:f7:ef:c0:98:86:67:df:51:a6:c0:
                    71:7a:0b:4f:ae:b4:dd:3b:40:22:d3:64:ec:bc:ca:
                    aa:17:9a:92:e0:f4:6c:5e:69:49:0d:94:e9:c3:1f:
                    18:c8:c6:85:6a:ac:c9:0d:4b:d5:25:8f:ca:41:46:
                    e3:96:ff:a8:78:e0:ea:31:20:65:49:3a:ca:e1:79:
                    03:19:67:26:c3:a3:75:e8:b6:aa:b7:17:53:09:c8:
                    3a:30:57:d7:52:73:20:76:7f:25:5a:87:5a:eb:7f:
                    58:4c:f4:fd:65:23:a6:97:a7:52:1c:0a:94:a3:5b:
                    19:5e:fc:a5:21:d1:16:20:f3:27:97:ef:bf:3b:ad:
                    e2:e2:88:d3:fd:42:7c:82:c4:86:c4:ee:4d:a3:7a:
                    ee:13:2d:7d:8d:b9:76:b1:82:c9:49:0d:0c:1f:91:
                    e4:77:d2:a4:ac:2c:46:3f:cf:4c:2a:c7:7d:69:14:
                    88:be:f7:4c:d5:94:37:c6:29:2d:51:45:66:9c:98:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:43:10:0B:91:EA:B4:5C:98:F4:25:C7:F9:7E:5B:2D:83:3C:BC
            X509v3 Authority Key Identifier:
                keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:56:d1:7e:16:f9:bd:b9:ae:47:a9:ed:26:21:e8:44:ea:
         b8:6c:25:61:25:81:c2:5b:3e:20:28:9b:47:98:a0:84:23:a0:
         82:a5:2b:c1:bf:99:c0:2b:b3:ec:09:4f:8b:a1:83:4c:b8:09:
         5b:94:40:d7:20:c6:2c:4e:e1:89:a2:f4:01:6b:24:0c:d6:ef:
         04:87:ae:e4:e1:27:0b:16:44:9b:f7:cc:9c:8b:09:c0:f4:4f:
         26:ef:b0:d0:ce:0f:e2:03:d9:c0:9d:4f:39:df:01:b0:f5:e1:
         59:68:d9:77:09:5b:a6:c6:9b:d6:d0:c3:6a:8b:f4:24:2d:81:
         0d:a6:d9:84:8b:35:9d:30:a2:80:94:bd:96:28:f6:57:ab:d5:
         36:12:45:47:6b:f5:61:e0:d3:16:d1:8c:74:6b:87:cc:8e:4d:
         02:13:22:61:c0:87:0f:62:93:d9:aa:77:78:79:e8:e9:2a:4c:
         8e:ae:28:8b:2f:c0:5a:6c:59:0f:16:73:84:f5:ea:47:65:bb:
         46:fa:48:dd:e9:03:37:6d:7d:11:99:62:8a:fe:15:80:d3:2e:
         33:c4:09:f8:af:f5:e4:e2:0f:8b:dd:f4:0f:7a:d2:0d:8f:ba:
         67:b2:78:c8:f5:4d:17:26:67:9b:b5:fd:fd:1c:52:7e:c6:96:
         86:95:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:03:57 2025 by rpki-client