Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
File:                     u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json)
Hash identifier:          HHESIfqXTbJu0qRLBIWPrio3hc1otMIJPIMoWsrUyTk=
Subject key identifier:   A3:13:3E:D5:AA:F8:10:68:F0:74:42:04:FC:67:92:77:49:3F:40:CD
Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59
Certificate issuer:       /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
Manifest number:          56
Signing time:             Sat 05 Apr 2025 06:28:53 +0000
Manifest this update:     Sat 05 Apr 2025 06:28:52 +0000
Manifest next update:     Sat 12 Apr 2025 06:28:52 +0000
Files and hashes:         1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: VLoKv0JUDX+bByh6VUKyEAMINLXihaO3CSDqZsh9SfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E1C
        Validity
            Not Before: Apr  5 06:28:52 2025 GMT
            Not After : Apr 12 06:28:52 2025 GMT
        Subject: CN=67f0cda4-8ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:fd:a5:a3:c3:30:73:5f:75:ea:fa:ca:56:
                    0e:1c:c8:39:13:da:2f:68:b3:2b:07:8f:88:97:ab:
                    bb:49:b1:36:26:8b:08:63:94:ac:fc:82:54:8d:d7:
                    03:69:e0:9b:86:00:2a:7c:67:c2:9e:42:7d:76:21:
                    5a:7f:33:7b:a7:ac:1d:39:f9:ea:30:e0:6d:ce:0d:
                    39:6e:80:eb:7b:b5:2f:10:de:b5:c0:69:39:f4:4e:
                    35:79:0f:86:8f:6a:18:79:07:f6:7a:9f:a6:0c:69:
                    b9:6b:43:9b:e2:12:53:ca:71:b9:58:b7:6a:07:86:
                    bc:34:03:e7:c3:ef:27:2f:8f:72:f1:2a:78:a1:4d:
                    b8:e7:a9:19:b4:92:0b:fd:4d:17:e5:a9:97:21:a8:
                    f6:ea:c8:d5:56:3e:35:cc:e3:50:4c:73:2b:c5:ab:
                    9d:c4:c1:ad:83:7e:71:b7:2d:37:1e:df:17:1c:eb:
                    bd:23:b1:da:3c:1f:7a:bf:07:97:df:67:b6:6d:fe:
                    73:b2:a5:f5:0b:ae:ea:c6:51:0c:7b:77:7d:84:74:
                    8e:53:ed:9e:1f:22:1f:94:c3:30:a2:d4:e0:ff:30:
                    2c:4e:94:cb:75:a0:f0:16:d0:b2:d5:f1:2f:90:78:
                    b8:70:2f:f7:4c:fc:61:c7:55:ce:44:d1:9a:2b:59:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:3E:D5:AA:F8:10:68:F0:74:42:04:FC:67:92:77:49:3F:40:CD
            X509v3 Authority Key Identifier:
                keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:7b:46:f9:6e:21:f3:05:d8:35:13:c1:24:23:cd:65:b5:
         6e:6a:af:da:04:a6:6b:15:ab:be:dc:08:11:a6:f1:2f:a2:73:
         6a:e7:83:e0:06:6f:d8:da:74:56:be:6a:35:9b:67:5a:01:11:
         d2:05:56:f8:4e:21:ca:8c:17:b3:81:b0:c0:93:17:8a:07:9f:
         d2:c1:b1:c3:c4:df:e7:a7:05:bd:b4:ed:a1:00:89:ec:c0:87:
         58:0e:e0:51:6a:3f:d0:3f:1c:ab:68:5c:12:31:91:68:c3:d3:
         f2:60:f2:21:7d:ff:77:5e:28:6d:fc:49:9d:b1:c9:11:e9:51:
         70:ba:71:fe:9e:55:d0:94:a2:45:d9:da:b3:02:49:a5:86:43:
         a1:ef:97:1a:65:cb:f1:6f:7e:83:29:f2:5e:39:4d:c3:5c:d2:
         f1:3a:b8:fc:d2:28:2b:c3:f7:8b:ec:d7:96:be:fc:8b:75:5e:
         92:77:6d:34:9f:d0:f9:eb:25:6f:6f:90:1f:2a:1e:2e:6d:ee:
         a9:1d:27:29:51:15:52:19:3d:b0:08:00:dc:f4:f8:5c:f1:73:
         ca:eb:9a:d3:43:87:e0:0a:a8:3d:16:9d:e0:4d:b6:3d:e8:3a:
         49:2a:0a:32:be:72:67:a9:dd:59:6c:3a:57:2a:ab:a9:04:a4:
         e3:81:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:25 2025 by rpki-client