Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          7aNs4OJYP7VLil7X0mg42B6LV3bJpCpK3OnO6uAZuSU=
Subject key identifier:   79:9D:F9:BB:28:F0:A1:EC:2D:65:43:47:A7:D2:C3:4E:E7:03:C3:FC
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          087D
Signing time:             Thu 24 Apr 2025 22:44:03 +0000
Manifest this update:     Thu 24 Apr 2025 22:44:03 +0000
Manifest next update:     Thu 01 May 2025 22:44:03 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: wQNHdyoUGYzOvVYv2qOSlh78sYglL7JNL/i9aW2OO9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
        Validity
            Not Before: Apr 24 22:44:03 2025 GMT
            Not After : May  1 22:44:03 2025 GMT
        Subject: CN=680abeb3-0a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:3f:26:bd:84:cd:07:85:f8:0e:3a:6c:30:
                    0a:37:85:0a:fd:c5:b4:9e:aa:39:18:0d:f9:57:43:
                    86:5b:62:71:13:7f:e1:bb:ac:c2:90:b0:c5:15:8c:
                    38:5a:66:9d:95:c5:19:e9:fd:f8:99:e1:51:0b:4e:
                    4b:ee:04:d7:fd:dd:03:c7:21:58:ac:af:d9:c1:92:
                    b8:81:03:3e:2e:11:98:cf:94:5e:97:ea:e1:31:30:
                    c8:35:83:d1:1f:9b:19:45:65:8e:9f:66:05:c7:db:
                    05:21:4c:01:c0:eb:a8:f5:be:9e:9c:c6:e2:db:cf:
                    93:f2:36:9b:1c:ba:25:4c:25:a2:ac:50:03:5d:9c:
                    7d:ca:18:0c:df:13:d8:20:52:7c:7d:0c:bf:4c:b7:
                    bc:43:14:54:62:e4:5c:de:c0:e7:83:c2:ce:99:71:
                    2e:77:d3:3a:e6:e6:6e:db:11:04:3b:76:08:1a:49:
                    2e:d2:c5:a1:ac:1a:87:2f:9c:3b:44:c6:a0:5b:49:
                    fe:1e:7e:8f:6c:6b:cc:d1:84:16:fd:4e:84:c5:77:
                    f9:fe:7a:04:c4:63:14:04:d6:07:18:20:8e:a5:da:
                    c1:71:1b:5a:64:1a:c9:c2:ba:3b:a0:a5:b6:0f:e7:
                    c1:a3:3b:28:c4:e6:3e:c1:5b:bd:10:96:43:1b:60:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:F9:BB:28:F0:A1:EC:2D:65:43:47:A7:D2:C3:4E:E7:03:C3:FC
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ad:25:64:3d:f0:b7:90:23:12:d4:8d:4d:e6:92:41:a9:a8:
         45:f8:50:d2:da:50:18:15:0e:23:96:f5:d0:d0:bb:53:43:b4:
         1e:cd:dc:81:6f:68:0b:c2:e1:02:04:0a:91:72:59:04:69:72:
         c3:c4:65:13:4d:64:36:d9:2e:d1:ae:de:2b:a4:da:7f:f6:75:
         16:0b:61:f4:11:68:e0:8a:5e:1b:4a:1d:d3:e9:09:41:32:aa:
         a4:b6:e4:b2:54:42:4c:4f:01:53:4d:56:c4:03:67:39:08:67:
         3e:59:09:c4:ec:49:a7:63:7a:95:02:b3:fd:48:75:d4:2d:e2:
         98:29:5e:83:41:9c:97:d4:9a:0b:d2:ed:fe:19:e0:c3:e4:c0:
         2f:27:58:2a:35:0e:85:8f:ea:61:bd:b2:fa:80:90:75:59:5c:
         7f:52:08:20:0e:a6:b0:cf:f5:6a:a4:4b:33:6f:42:f2:e1:b7:
         45:42:48:f0:84:5b:ff:71:4a:1f:f2:1d:02:5a:fb:7f:69:5b:
         90:1e:39:b2:77:fd:f0:58:55:73:d6:59:1f:48:9d:c0:00:c1:
         91:38:ba:43:7f:31:cd:e8:74:6f:59:12:38:0c:2e:de:ee:79:
         f7:64:a4:41:77:e2:a0:90:c7:1d:92:0b:c6:31:1e:00:35:98:
         56:48:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:05 2025 by rpki-client