Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File:                     K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier:          bWV7M1+84sozmdnK/dPjGIPPVzcqKKRzc/9QsgxdKqw=
Subject key identifier:   46:AC:DE:F1:1B:E5:7D:16:82:4F:FC:91:71:3F:0B:19:52:07:5C:6A
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number:          BE
Signing time:             Fri 25 Apr 2025 04:57:15 +0000
Manifest this update:     Fri 25 Apr 2025 04:57:15 +0000
Manifest next update:     Fri 02 May 2025 04:57:15 +0000
Files and hashes:         1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: 3v09L5dryCRZG1eSAq7h1+RvlYJlxDYFasrtXod4l34=)
                          2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: Apr 25 04:57:15 2025 GMT
            Not After : May  2 04:57:15 2025 GMT
        Subject: CN=680b162b-89d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:15:9d:ff:39:80:49:55:5b:c4:54:40:2d:
                    dd:a2:53:63:79:fd:38:d6:e8:0b:1a:9b:b4:e3:a3:
                    2d:51:66:38:8f:7f:af:6a:fe:04:97:d6:f6:67:60:
                    0e:d5:a4:46:05:8a:a4:8d:f3:51:5d:90:29:94:04:
                    f8:40:2f:94:c3:cc:14:e5:cb:4d:62:09:9e:8e:96:
                    b2:11:e5:bf:45:9b:eb:31:9c:2c:f8:c6:2c:59:2b:
                    01:74:64:b3:ad:d9:85:e9:9a:03:6f:b8:f0:52:07:
                    f1:eb:7a:3f:e6:95:a0:6f:b0:22:d1:3e:f2:18:43:
                    9c:89:40:da:e7:6d:96:a1:e4:87:5e:6b:9b:b9:31:
                    ad:a3:21:84:5e:aa:4e:1f:9a:b8:64:16:e5:0d:8a:
                    30:60:a1:91:06:2f:fe:42:71:1f:78:d4:55:41:10:
                    cc:b4:06:5e:f1:94:46:8e:58:98:32:b4:b8:a0:ed:
                    80:21:53:d8:06:58:e5:a7:09:48:6a:cc:10:de:01:
                    86:6c:27:7e:97:25:e3:a7:14:ed:da:dd:c9:08:12:
                    54:04:8e:08:42:f1:72:46:65:c3:b2:3e:c0:35:64:
                    3e:0a:00:ee:9e:22:21:0a:b1:a3:fe:56:1b:f1:6d:
                    e9:47:50:dd:5f:7b:7d:d0:d1:25:89:d7:74:3e:70:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:DE:F1:1B:E5:7D:16:82:4F:FC:91:71:3F:0B:19:52:07:5C:6A
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:d5:78:82:96:16:12:94:c2:0d:39:70:fb:ff:4f:d4:97:
         77:42:fe:fb:51:5a:e0:2d:22:76:b9:13:f0:fb:45:e8:4f:55:
         c1:0e:05:42:9d:a3:30:b3:37:c1:8e:e7:ff:e2:16:58:4f:34:
         4f:29:b7:15:62:64:22:ab:bb:70:95:01:e2:20:e1:52:e6:a1:
         88:1b:47:f6:2c:12:05:b6:bf:8b:61:67:55:35:90:03:ba:12:
         80:7b:c6:d2:3b:50:6b:8c:99:c5:f2:ad:7e:5f:38:3b:6b:88:
         a9:e2:91:35:14:74:e1:42:20:0c:d2:54:3d:b2:b4:72:e5:1b:
         a3:1e:9d:7e:13:52:9f:00:26:e1:60:c6:fb:5d:5e:c9:08:b2:
         32:50:64:36:a3:91:f9:ec:e8:1e:38:64:ac:53:9f:f4:f5:6f:
         07:ca:fe:1b:b3:6a:e6:21:b1:8c:c2:1b:09:ba:a9:e1:a3:be:
         a3:2d:8f:cc:d7:66:bd:81:af:34:d2:70:ac:cf:fb:73:ca:62:
         d9:fe:8f:72:59:4c:6a:12:93:12:59:e6:0c:49:83:ea:04:6f:
         44:c1:f8:2d:76:4a:33:75:7b:91:c4:f0:2f:ad:b8:94:92:51:
         4f:61:52:2d:60:8b:ff:dd:ba:b6:c8:80:5a:b9:46:d2:23:a3:
         8c:1b:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:31 2025 by rpki-client