Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft
File:                     XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft (raw, json)
Hash identifier:          U1HoMJkeZrDIZ+OgLhDghJa1shGxUYhkJ/WRLgzdwRI=
Subject key identifier:   5B:01:24:B4:DB:72:19:5F:60:73:66:BF:BC:3F:BC:7C:47:92:AE:32
Authority key identifier: 5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5
Certificate issuer:       /CN=A91D318A/serialNumber=5CF55B88A669DC7E82115F806069F3C93CE65CB5
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft
Manifest number:          FF
Signing time:             Thu 03 Apr 2025 04:18:10 +0000
Manifest this update:     Thu 03 Apr 2025 04:18:09 +0000
Manifest next update:     Thu 10 Apr 2025 04:18:09 +0000
Files and hashes:         1: XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl (hash: 7zI9aT9Ib5/xk6TfWQVN28sYvKifzPbLQPBVC16sIEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl
                          rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D318A
        Validity
            Not Before: Apr  3 04:18:09 2025 GMT
            Not After : Apr 10 04:18:09 2025 GMT
        Subject: CN=67ee0c01-30ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:8d:dc:1e:bc:cd:5a:ff:f4:cb:6f:e0:56:
                    30:09:14:90:2c:d0:81:bf:43:82:7b:65:b9:d3:28:
                    8d:fd:16:4c:61:5d:fb:15:80:8f:ab:d8:08:8f:be:
                    e6:d7:23:4a:58:04:ac:9f:cb:2e:9a:40:57:03:dc:
                    09:d6:c3:7c:2c:1b:e6:56:2d:f8:34:a7:d2:1c:8a:
                    a1:64:7c:ab:6f:4c:db:11:be:66:4e:ff:ca:87:cc:
                    0e:f5:3b:cf:20:24:2f:55:d2:bb:0a:f0:fa:be:31:
                    8a:42:bc:f6:26:70:53:6a:6e:9f:b2:6d:9d:f4:55:
                    59:11:3e:76:8d:d8:16:d9:63:62:68:56:6b:15:05:
                    ce:c3:6e:8e:b2:c1:a0:80:3d:55:c9:1e:1d:f3:05:
                    8f:c4:0a:95:cc:54:55:5c:24:10:b0:86:58:63:dd:
                    0c:0e:32:19:bd:94:b2:70:f2:6f:d7:4f:44:86:34:
                    ef:2b:bf:df:5c:13:f4:52:1b:8f:a1:ad:40:d7:77:
                    a2:16:e7:65:fd:7e:c1:d9:4b:67:53:db:a4:07:70:
                    70:a0:51:45:d2:36:b9:be:17:aa:42:38:34:ff:f6:
                    4a:51:e5:39:6c:c1:7e:46:58:7c:64:be:20:c6:23:
                    bb:3e:e9:f6:c5:36:ae:62:c7:b1:69:5a:62:95:1f:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:24:B4:DB:72:19:5F:60:73:66:BF:BC:3F:BC:7C:47:92:AE:32
            X509v3 Authority Key Identifier:
                keyid:5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:51:2a:15:07:14:ce:69:86:dc:2f:fe:b0:f1:ca:cd:db:
         2a:d7:b4:21:3a:9e:46:8b:90:c2:e5:6f:22:a5:47:d7:6a:bd:
         1d:af:b4:e8:43:08:8b:b2:c1:39:79:7c:92:a3:bf:ad:52:c8:
         58:c3:ce:79:50:43:2d:dc:1e:d5:50:12:96:c6:22:7a:ea:33:
         35:2f:7c:de:88:00:4b:58:0b:43:c7:34:72:4e:4a:ea:95:27:
         91:56:17:ba:c3:a7:a3:d1:7d:23:3f:52:06:c6:cc:21:ab:0b:
         29:54:d5:45:07:2e:3e:c7:36:9f:42:9f:54:bb:a4:a6:c4:a4:
         cc:40:3d:da:5f:01:8a:1b:f8:5a:da:47:ee:d8:a8:ea:41:39:
         4d:09:24:1b:71:8b:ce:c4:d8:eb:d2:2f:e9:1c:46:36:64:b8:
         4f:51:5e:2b:d1:06:e1:7c:92:35:7c:13:44:05:4a:0d:aa:bc:
         2b:7f:61:e1:67:62:46:d9:ba:c9:95:51:73:65:81:b2:79:c9:
         ef:93:e8:76:0a:35:56:97:17:be:90:a4:3e:1b:80:57:c8:06:
         cd:9d:94:71:f5:85:7f:24:a8:b6:d3:ef:11:d1:db:06:fa:7f:
         51:94:f2:97:13:bb:39:16:32:40:3e:e5:fc:3e:88:4e:8c:6b:
         6e:54:28:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:13 2025 by rpki-client