Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File:                     MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier:          JvX4e3vpSHYvX0Dz9LzxmaT1CJGiZfcxhTFHwQfe7ak=
Subject key identifier:   8B:01:10:86:EF:74:B1:A0:10:CE:64:B5:A9:71:DB:7C:0B:B5:9D:28
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer:       /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number:          7F
Signing time:             Fri 25 Apr 2025 05:39:45 +0000
Manifest this update:     Fri 25 Apr 2025 05:39:44 +0000
Manifest next update:     Fri 02 May 2025 05:39:44 +0000
Files and hashes:         1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: jrCLRP3DlN2kuccobtNgZz/4T95X+hBMF1QzhDr7Rlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
        Validity
            Not Before: Apr 25 05:39:44 2025 GMT
            Not After : May  2 05:39:44 2025 GMT
        Subject: CN=680b2021-01de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:29:b6:68:84:e9:e7:67:09:4b:5c:6a:36:
                    41:36:05:12:69:c6:61:02:b9:d7:9c:b8:6d:3c:e3:
                    42:55:38:8f:e5:81:19:39:de:ee:66:13:71:08:b2:
                    35:e7:f0:b2:7b:2c:50:c8:99:54:21:b4:84:a3:44:
                    dc:9f:80:00:05:56:27:77:1e:c4:c7:14:b1:28:7a:
                    b6:2a:28:2b:4d:1e:ed:f7:8a:3c:59:d2:f6:d4:9f:
                    e1:56:fa:40:ff:f0:e6:a0:9c:39:fe:9f:eb:20:e9:
                    5a:65:46:63:ba:df:58:29:15:ea:8f:29:73:c6:09:
                    ba:60:40:63:11:a0:aa:0e:5b:63:c0:99:64:e8:02:
                    6c:2c:db:36:c9:cc:d1:07:16:23:b9:af:b2:23:41:
                    02:95:7a:79:ba:6a:85:41:f1:78:99:ee:ec:37:1e:
                    8c:2f:6d:e9:21:7d:85:18:7b:54:4b:47:ec:bf:5f:
                    fa:25:71:ce:f4:fb:3b:48:99:67:05:b3:33:2f:e8:
                    aa:4a:f1:f9:b1:fc:01:cf:5a:f0:a9:36:54:a2:7f:
                    e9:e4:87:99:09:d1:3a:c4:68:c4:8a:99:ca:47:89:
                    81:4b:dd:48:78:cd:14:ad:fb:85:e3:19:9f:76:8d:
                    54:7d:b9:55:d8:04:bf:b9:06:a6:b4:45:08:ba:ee:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:10:86:EF:74:B1:A0:10:CE:64:B5:A9:71:DB:7C:0B:B5:9D:28
            X509v3 Authority Key Identifier:
                keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:1d:91:93:e9:01:fb:e8:53:da:7e:b1:27:d2:2d:f2:79:
         cd:98:08:3c:25:b6:16:7c:ea:88:72:2b:f1:84:4d:f4:13:46:
         c2:0d:ef:5e:76:c1:a1:d0:18:0a:00:4f:fa:3a:17:6a:4f:60:
         25:5f:4c:e3:8d:7f:8f:99:e8:18:aa:e7:68:d7:b4:03:e2:a2:
         c3:7d:ab:38:08:52:d0:6a:e2:95:cd:a3:de:68:9a:e8:90:39:
         5f:aa:aa:b2:6d:16:c9:aa:e5:d9:36:53:81:09:1a:a7:26:99:
         d6:81:96:07:54:99:20:a2:c1:92:88:a9:da:c3:01:51:d0:1e:
         35:6e:79:9d:a9:8f:a2:c7:63:85:49:db:91:9f:7c:c2:6d:18:
         e1:36:8a:06:a5:f8:e2:d5:64:93:1f:ca:d9:9f:9c:7e:c1:4e:
         79:95:b3:ab:af:bf:51:1e:27:78:1d:e3:dd:bb:db:8d:32:00:
         4b:d8:00:15:6c:33:f4:fc:05:43:5e:21:af:2e:eb:4b:f4:0d:
         6b:81:56:f7:2b:17:39:1f:6a:68:35:24:69:da:b0:b8:d3:2c:
         45:03:69:0b:2c:96:17:31:f1:50:4e:f5:8c:2a:f8:c0:2f:cf:
         e8:8a:01:bd:d9:e5:bf:8d:31:34:9b:cc:ff:86:c1:53:6a:c0:
         80:85:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:46 2025 by rpki-client