Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          ePq2e+lKLs+ceZ4S2cKIsZ8KAtCaUdkkHGGU0DJYXzQ=
Subject key identifier:   3E:A2:D1:56:20:3D:A9:49:6A:DF:E8:4B:57:38:E8:48:95:91:26:B9
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          72
Signing time:             Sat 19 Jul 2025 07:07:46 +0000
Manifest this update:     Sat 19 Jul 2025 07:07:45 +0000
Manifest next update:     Sat 26 Jul 2025 07:07:45 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: xfZRQ60pOZnXP3PI5riQDB9L3NWvUNhcqh2Ex0A4AKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Jul 19 07:07:45 2025 GMT
            Not After : Jul 26 07:07:45 2025 GMT
        Subject: CN=687b4441-598a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:ef:eb:25:22:75:57:69:3c:09:85:7e:77:
                    8f:bb:eb:59:a4:3e:25:7b:27:20:17:65:5d:46:74:
                    3b:3b:cd:5e:88:0c:fc:2a:5a:97:89:30:bc:62:0e:
                    bd:2f:a4:00:df:8a:ab:35:68:04:64:ce:12:b4:e2:
                    43:8c:a2:8d:a7:20:5d:13:90:c8:7d:af:24:56:cd:
                    73:6b:90:bf:c2:35:a2:90:5d:03:ce:18:a8:91:ed:
                    1c:f7:8c:fa:a8:ee:20:b3:3a:27:77:9b:41:0e:41:
                    46:9c:1d:a1:fc:46:82:06:ed:7d:d1:e0:fd:37:95:
                    d1:23:d2:62:cd:fe:97:e1:58:26:da:62:51:20:01:
                    d9:99:46:66:9c:51:61:10:19:a6:70:81:51:97:58:
                    da:0e:7f:a5:f2:a2:4f:0e:94:7a:cd:41:b8:53:f6:
                    8e:f0:37:9d:c5:3e:7c:5b:c2:18:97:c1:87:da:9b:
                    d5:eb:63:4e:a9:8f:a6:3d:af:61:9c:85:9c:2b:12:
                    08:1a:0b:fa:63:62:dd:34:9e:53:32:45:76:df:53:
                    e1:fd:a3:e2:eb:c8:33:eb:57:e0:d5:7a:e9:b5:c6:
                    28:64:c8:1a:b5:71:ba:4c:ac:a9:2b:3c:f1:1b:86:
                    88:e9:d8:3d:fa:74:22:3a:cd:bd:91:73:40:b3:5d:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:D1:56:20:3D:A9:49:6A:DF:E8:4B:57:38:E8:48:95:91:26:B9
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:17:19:a0:2c:f2:71:d4:1e:4a:09:f5:9f:e1:f7:c0:32:ae:
         b0:9e:ea:44:f2:e7:cc:82:c3:3b:e8:fe:2f:91:32:6f:84:79:
         a1:9e:c1:8c:07:ec:2d:f4:af:40:fb:e0:f5:a2:d5:3f:63:a1:
         a2:17:2b:82:e1:27:14:58:4a:a2:43:5b:5d:cc:75:0b:2b:80:
         48:55:22:b5:d3:12:64:d5:41:2d:af:1c:09:4e:17:36:1b:89:
         63:3b:aa:9b:f5:b0:7b:1c:ec:73:be:51:4d:4b:a1:99:b6:de:
         c9:8f:06:58:43:2c:2f:15:9a:d2:d7:e0:21:7f:70:53:81:a6:
         c7:11:a7:35:e3:0c:07:7e:f0:d1:a5:6b:67:65:32:2e:16:99:
         dc:c6:4b:35:1d:fa:e4:b9:5b:29:33:18:c6:8d:e1:2f:93:fc:
         a5:1a:fc:36:bf:35:a6:5c:3c:e4:68:ec:5d:ff:ac:ec:89:37:
         5e:0e:ea:cb:f7:e1:4e:eb:8b:83:c0:08:27:dd:81:20:62:e3:
         f6:58:c1:52:a7:33:ed:63:b8:76:d5:67:ca:61:3f:a4:8d:de:
         1e:38:dd:97:64:79:b3:14:31:c4:0f:5e:bb:3d:b7:fb:d5:bc:
         fe:d4:b1:e2:a9:97:bf:58:d6:a2:99:94:5e:22:cf:30:78:c2:
         0a:ca:9a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:05:57 2025 by rpki-client