Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
File:                     0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json)
Hash identifier:          AN93BE5dX/bBlcTqAWjVTcI57KzhH/C7izJcNwFUUT4=
Subject key identifier:   10:3C:10:96:79:C5:C9:E4:E6:05:91:95:26:FE:6E:16:BE:BB:C1:A4
Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2
Certificate issuer:       /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
Certificate serial:       05E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
Manifest number:          05E1
Signing time:             Thu 24 Apr 2025 22:44:29 +0000
Manifest this update:     Thu 24 Apr 2025 22:44:28 +0000
Manifest next update:     Thu 01 May 2025 22:44:28 +0000
Files and hashes:         1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: 3v9IVHtVCokzCHVe8rhDkqj4oGnRyfRgWQWDF03ZRQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF27, serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
        Validity
            Not Before: Apr 24 22:44:28 2025 GMT
            Not After : May  1 22:44:28 2025 GMT
        Subject: CN=680abecd-5aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:30:34:82:3c:e9:00:a9:c3:a9:28:42:28:
                    ae:23:d0:b3:51:ea:53:1f:46:cc:5f:f9:9b:07:f3:
                    a6:99:03:bb:37:21:38:bc:56:a5:5f:6b:37:66:d2:
                    93:4c:41:05:47:1d:fe:f2:f3:fa:d7:ba:e2:2f:c7:
                    28:ab:30:1b:f0:ad:9a:5f:02:5e:c6:9e:12:a5:04:
                    73:17:29:2a:b8:ff:b9:fd:d1:e8:4c:97:1a:6c:12:
                    cd:fe:cc:7a:d8:75:bd:5b:7a:9c:01:61:65:de:f9:
                    c9:0e:7f:1e:0d:ce:48:15:ec:76:9f:57:ae:3e:02:
                    b9:b2:b7:ff:94:91:aa:0e:64:0a:43:00:17:e3:c4:
                    3d:50:4c:68:56:a0:ff:6c:23:94:0d:20:cc:45:c9:
                    75:52:89:d3:8c:19:75:d2:61:70:c4:e1:d1:b4:dc:
                    7e:49:e4:60:d9:74:0a:3f:9a:c4:b8:7c:05:54:d2:
                    78:54:cb:e6:54:f1:b1:a4:42:14:9e:a7:ad:55:ff:
                    56:7e:95:21:a6:5a:b0:d3:3a:39:0e:c3:fe:04:1a:
                    e6:5e:67:16:af:7e:60:ef:12:a1:62:61:96:6f:8f:
                    58:cd:a7:79:0d:34:d1:ae:46:00:f9:c0:e1:c9:91:
                    4b:ac:6b:86:58:17:e4:07:f8:ed:f6:d4:df:b4:58:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:10:96:79:C5:C9:E4:E6:05:91:95:26:FE:6E:16:BE:BB:C1:A4
            X509v3 Authority Key Identifier:
                keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:c5:11:70:e8:e5:eb:b1:b1:e4:49:6c:ac:d5:3a:95:21:
         0d:c3:e0:53:9f:db:ba:d4:43:21:15:b5:54:01:2c:8b:c7:74:
         e1:26:49:db:c9:b2:e7:b0:89:a5:0a:69:1d:1d:fb:80:cd:0e:
         da:fc:a3:89:1f:e3:7c:40:82:83:7a:55:44:89:b6:d1:27:30:
         09:54:56:79:17:bc:bd:43:18:c9:07:23:c8:58:7c:bf:c4:a4:
         89:60:f5:72:f6:19:1c:85:7a:29:05:a6:ba:83:49:ec:49:34:
         6e:b3:15:b1:e2:12:23:f0:18:e8:34:a2:bb:25:dc:a1:a2:91:
         8d:26:65:0d:dd:64:5b:1c:1c:84:18:d2:08:07:81:58:c0:38:
         ba:7e:83:db:6c:d4:1c:4b:88:e1:bb:b7:45:bb:e8:bf:18:9e:
         d0:1a:45:25:2b:00:19:dd:73:58:bd:a6:bb:8a:17:7b:53:af:
         5c:5f:6a:45:9e:63:6f:de:93:7b:6a:0d:6d:18:f6:c4:5a:f7:
         12:21:de:70:da:52:bd:ba:93:80:d3:02:ca:ed:26:28:af:51:
         f7:b6:dc:0c:01:98:09:18:4d:ad:8e:92:89:9a:b5:43:18:fd:
         54:17:03:76:71:13:9b:a1:db:40:6a:ed:2a:7a:d4:20:a2:63:
         51:65:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:34:51 2025 by rpki-client