Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
File:                     1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json)
Hash identifier:          8CcksaJ2Kskl+jS4ea1L19fWsfZC7q0+2C4G9gkLMx8=
Subject key identifier:   31:C7:E4:04:1E:81:45:B0:9A:F2:31:7E:E2:B8:A1:ED:70:82:87:3C
Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2
Certificate issuer:       /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
Manifest number:          86
Signing time:             Thu 03 Apr 2025 05:49:18 +0000
Manifest this update:     Thu 03 Apr 2025 05:49:17 +0000
Manifest next update:     Thu 10 Apr 2025 05:49:17 +0000
Files and hashes:         1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: Rqm5Xj41a1WH6sMmn38IvLJ+PNOuIzpTRpn7EB5QUDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 05:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB629
        Validity
            Not Before: Apr  3 05:49:17 2025 GMT
            Not After : Apr 10 05:49:17 2025 GMT
        Subject: CN=67ee215e-4fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:cd:04:3f:cb:36:e6:06:ad:22:9c:cd:21:
                    5f:bd:f8:53:df:09:ce:5f:cf:96:d0:99:26:ab:56:
                    23:83:79:d5:44:e3:88:8e:d0:03:00:b5:96:a1:bd:
                    2c:48:03:e1:73:e2:e2:fd:11:ad:8e:15:1e:1b:fd:
                    fe:e2:48:f9:62:7e:14:c7:4a:51:b8:c4:6d:3e:52:
                    d7:23:4d:ea:de:d0:e5:9e:42:45:f9:3b:29:ee:64:
                    ca:6e:56:33:52:e3:b8:c6:db:ab:25:43:72:fd:58:
                    73:54:e4:35:93:be:ff:0e:c5:74:de:8d:4b:d5:68:
                    ba:dc:85:f1:5d:a2:57:a6:76:06:39:9b:3e:5e:9b:
                    65:3c:39:20:72:e4:5c:a7:09:57:c1:e3:d5:0a:f2:
                    2b:12:4b:22:20:7c:81:08:9f:0f:29:5d:3c:a0:a6:
                    ba:95:70:73:a9:e6:62:c4:d7:58:f8:cb:25:9c:53:
                    03:4f:8e:28:ac:e6:db:f7:35:a1:b0:a5:a6:ac:e7:
                    43:58:0e:10:18:c5:e8:eb:21:ff:9a:45:fa:42:88:
                    f2:b6:d4:3d:71:02:79:7c:94:8f:e7:8a:c2:a3:01:
                    30:0c:5d:2c:02:d6:06:4d:29:bb:ac:eb:2e:e4:5f:
                    ca:78:8c:9b:d1:ff:54:34:72:d0:ed:ce:3b:80:bb:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:E4:04:1E:81:45:B0:9A:F2:31:7E:E2:B8:A1:ED:70:82:87:3C
            X509v3 Authority Key Identifier:
                keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:5f:42:90:a3:e0:0e:4b:db:c0:d9:ca:b8:51:71:45:81:dd:
         e7:e9:22:70:01:89:04:ca:b9:1a:e1:46:93:8c:dd:6c:fd:eb:
         31:6a:df:a3:bc:ba:52:7b:3b:20:f5:fd:44:2b:1d:cd:c0:7c:
         84:b2:14:cf:d9:b7:1f:61:44:cd:47:05:1b:60:c5:e3:21:b4:
         af:55:69:78:9f:eb:88:19:bf:13:7d:84:56:80:04:29:56:bb:
         fe:7a:85:92:ef:c9:85:1a:f9:c5:5f:e2:b6:e7:49:5a:92:f8:
         1e:26:1f:af:9c:18:d4:e8:5c:b6:d5:fa:2a:3d:cc:c3:07:87:
         5e:22:de:c9:d7:36:d9:d8:52:6a:13:ab:f2:36:66:8d:b7:04:
         b4:93:57:c8:e3:69:d8:ac:6e:03:bb:0f:35:19:98:67:47:db:
         3c:3c:9c:66:7f:70:d5:13:21:55:43:da:cd:14:74:6a:c2:27:
         09:67:f8:a8:e0:63:d9:fe:51:73:a1:ed:9f:a9:9d:c0:3f:a1:
         54:33:80:90:7b:3a:02:7c:50:c8:7e:79:c5:c1:e9:2f:38:75:
         c0:1c:53:d7:23:8f:37:d7:bc:62:3d:d2:b2:cb:23:19:a7:a3:
         f3:01:f0:49:1d:8d:38:be:27:97:c4:ad:80:2d:20:17:a3:2a:
         b1:d8:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:32 2025 by rpki-client