Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
File:                     LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json)
Hash identifier:          gv+2POAmonXOL6NePVAohU3Zdn5FrkN129mqdTJxLFg=
Subject key identifier:   75:9B:2B:27:B6:CB:8F:95:D0:26:60:97:19:F2:72:44:EF:3D:72:84
Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
Certificate issuer:       /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Certificate serial:       0F55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
Manifest number:          15F9
Signing time:             Thu 24 Apr 2025 17:34:09 +0000
Manifest this update:     Thu 24 Apr 2025 17:34:08 +0000
Manifest next update:     Thu 01 May 2025 17:34:08 +0000
Files and hashes:         1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: h+F0VX+7YGggRz8tqyy6vIWGxPlNm8U3REqloQ4X0nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3925 (0xf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
        Validity
            Not Before: Apr 24 17:34:08 2025 GMT
            Not After : May  1 17:34:08 2025 GMT
        Subject: CN=680a7610-017b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:a6:18:ab:7e:33:35:b6:93:27:7f:b8:44:
                    5a:ff:08:7e:55:33:33:2f:fe:e8:ed:ff:02:59:ef:
                    7e:aa:23:50:1b:72:ea:e3:40:d1:26:5f:3a:96:b3:
                    f7:d2:ce:08:dd:6b:da:62:7a:c9:83:ae:7e:81:f1:
                    4e:46:13:c1:44:7b:e2:cf:68:88:db:bc:f4:81:5a:
                    eb:42:b5:5c:a8:c9:53:85:77:44:01:cf:2c:1b:4e:
                    78:87:d7:9d:90:bc:08:93:e6:af:c0:41:61:a8:a5:
                    93:a0:d6:8f:89:52:bc:af:b3:72:73:41:bb:11:b2:
                    7f:69:55:b4:08:ea:ef:06:81:98:db:9e:4e:a9:66:
                    b7:c4:54:6a:85:bf:6d:db:d5:57:e2:12:80:3a:85:
                    64:91:ef:da:35:a9:df:1b:5d:ba:f2:55:23:0e:a8:
                    7c:07:61:81:13:c3:b7:a3:95:9e:c4:be:97:89:f6:
                    20:15:24:84:8a:97:51:b1:9b:5a:00:75:ac:e5:ae:
                    06:0a:e2:76:ba:ca:50:4f:e1:01:66:a9:d5:a4:d2:
                    f8:fa:08:b6:aa:4b:9f:5c:62:03:81:de:f7:aa:fe:
                    47:c2:7a:68:d8:ae:59:f8:51:fb:1c:b1:08:1a:c7:
                    7c:7c:7f:f7:26:0d:68:b5:93:fb:6a:67:b9:ff:80:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:2B:27:B6:CB:8F:95:D0:26:60:97:19:F2:72:44:EF:3D:72:84
            X509v3 Authority Key Identifier:
                keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:bf:3d:8f:80:f9:eb:71:8c:fa:1c:d3:34:73:65:e2:9e:
         5d:39:f0:30:b9:a2:7c:91:16:3a:b6:5f:5e:a0:13:e1:c2:5a:
         86:b1:d2:0b:6b:3e:e2:3c:d0:62:32:f0:92:58:92:9a:4a:f2:
         a8:6a:1a:66:d2:6b:b5:c3:39:48:58:8d:4b:b2:93:37:fb:ec:
         29:f4:cf:fb:be:34:7f:78:63:e7:1e:89:ec:00:f2:17:87:f1:
         31:86:89:ff:44:92:ee:e6:5a:2a:cd:47:fc:af:de:f7:36:95:
         ba:6d:be:4c:07:b6:be:3a:c5:5f:ff:c3:02:75:3b:99:15:cb:
         bd:44:51:f4:49:b6:47:d4:4f:4d:86:b4:7d:6e:10:61:f6:2b:
         bb:da:3a:dc:0d:54:f4:88:17:9a:09:3b:bc:8f:78:20:0f:05:
         33:51:2d:6d:8e:ff:a9:a5:46:8a:c3:48:df:e7:42:3b:9c:d6:
         4b:ee:0a:1c:fc:78:57:62:ad:e0:53:4d:12:d5:d4:12:df:66:
         1c:91:9b:f8:54:c3:2f:02:f6:6a:10:86:f6:1c:7a:7f:5e:4d:
         68:71:16:65:53:fe:10:35:9d:73:16:6c:d6:1b:25:33:47:29:
         5b:df:6d:ec:7e:96:1b:42:a2:6e:f8:74:01:66:46:a1:eb:54:
         93:db:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:24:28 2025 by rpki-client