Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
File:                     rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json)
Hash identifier:          syU7nY/TiI4QTI7nMyknMN/MYapKudd6Urc+Qj9wlr8=
Subject key identifier:   48:E9:12:E2:6A:08:1E:0F:69:9C:0B:35:25:A2:D9:EB:75:AC:22:B7
Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83
Certificate issuer:       /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
Manifest number:          B7
Signing time:             Fri 13 Jun 2025 04:57:12 +0000
Manifest this update:     Fri 13 Jun 2025 04:57:11 +0000
Manifest next update:     Fri 20 Jun 2025 04:57:11 +0000
Files and hashes:         1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: XCksK7c6cPlNJHqHLM8CxaVIpTva7KyyLIScosRebYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl
                          rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683
        Validity
            Not Before: Jun 13 04:57:11 2025 GMT
            Not After : Jun 20 04:57:11 2025 GMT
        Subject: CN=684bafa7-3524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:1e:18:24:05:33:ec:5b:35:f4:b6:27:4e:
                    03:89:4c:7e:85:88:64:3b:f4:6f:a8:13:8f:92:3f:
                    07:ca:22:69:46:51:4c:d6:6e:6c:24:cd:bb:d0:15:
                    d2:75:bd:1e:27:34:49:00:6a:f9:f1:27:43:e6:cd:
                    57:cf:86:63:f9:6b:81:0e:e3:3a:c6:bc:84:9c:eb:
                    8f:c8:27:65:b7:12:a3:9c:8d:be:2c:d9:ef:00:57:
                    f2:d3:4a:cd:44:70:9e:ae:43:4c:ab:92:e3:8a:98:
                    f0:c1:28:3d:89:6a:81:1b:12:14:67:23:4f:69:fb:
                    93:b9:cf:af:2f:a4:6e:2b:55:f1:c8:bb:9b:a2:56:
                    71:60:fa:00:2e:e5:b5:45:00:30:57:a4:6b:50:8d:
                    50:08:a6:b0:af:f3:fd:bd:e8:d6:d9:6b:4c:dd:72:
                    9a:4a:87:eb:63:5e:86:54:08:f9:b8:f5:49:45:74:
                    a2:93:ca:f0:78:79:56:7a:85:44:e8:c5:c3:8b:33:
                    d1:58:08:31:b1:8b:0d:3d:14:02:6c:41:8d:04:be:
                    0f:10:f9:e8:b3:05:13:21:4f:b5:20:d6:1e:9b:8c:
                    cf:75:17:7d:23:ae:ac:b2:59:18:ce:4b:d9:bf:4d:
                    29:74:da:2f:8d:9d:13:06:f7:0e:05:e8:f7:ee:1b:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:12:E2:6A:08:1E:0F:69:9C:0B:35:25:A2:D9:EB:75:AC:22:B7
            X509v3 Authority Key Identifier:
                keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:5e:ab:87:14:db:34:9b:47:6a:73:2e:7f:e4:9d:ac:28:
         fe:82:f6:36:34:e7:26:b8:2c:8d:f2:0d:71:c6:9f:89:a2:18:
         c1:88:79:31:88:06:88:d9:62:71:12:28:f4:3a:b9:c7:1d:de:
         a9:ba:09:93:7f:e4:d1:fb:bf:e5:52:0f:23:a2:9d:4e:60:10:
         0a:16:b7:44:ba:24:23:a3:9b:95:4a:17:b3:b6:f9:a0:7c:aa:
         2b:4c:e4:78:c4:18:d3:dd:e9:cc:8b:c9:75:1b:14:9c:76:f1:
         a3:03:da:a0:0d:02:0d:76:bd:77:35:a8:81:b2:ee:58:db:66:
         bc:ca:50:0f:a2:88:22:a5:d2:98:eb:33:4d:3e:cd:68:4c:f4:
         fc:f0:78:38:99:41:be:87:d2:a5:fc:cc:18:5d:1d:ed:bd:d3:
         4d:22:38:85:43:b9:f7:3a:12:63:fd:dd:3c:07:29:8f:ea:fe:
         de:90:15:38:c5:d6:88:36:88:fa:0e:14:18:73:15:25:25:d7:
         eb:f9:28:66:e9:7c:cc:ef:62:1f:04:d7:cd:b8:83:9f:91:e6:
         4a:b5:a7:bf:1a:09:81:d8:af:85:c2:e4:0f:c8:d1:46:b0:1e:
         a5:fe:2e:bb:9f:b1:08:8d:da:7c:5b:00:c6:09:53:03:66:77:
         c8:6e:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:18:50 2025 by rpki-client