Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File:                     ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier:          eQ8y2J6U3OBGbYHOOigN/AZTME2oL55el8NkzF1r2p0=
Subject key identifier:   94:CF:98:D0:DF:82:B2:85:6C:DF:93:AA:09:FC:0B:88:5D:25:0E:F8
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer:       /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number:          5E
Signing time:             Wed 09 Apr 2025 05:54:26 +0000
Manifest this update:     Wed 09 Apr 2025 05:54:26 +0000
Manifest next update:     Wed 16 Apr 2025 05:54:26 +0000
Files and hashes:         1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: yWSkGNo5Rir5lVsdvEMtZR2CW8KOQ7MnFc9epsZexI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7
        Validity
            Not Before: Apr  9 05:54:26 2025 GMT
            Not After : Apr 16 05:54:26 2025 GMT
        Subject: CN=67f60b92-a30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:24:c3:76:ec:0c:b2:12:a8:b5:fe:55:30:
                    c3:11:a0:00:5b:2c:a9:da:a9:94:2a:13:2f:f5:78:
                    c7:04:01:37:77:c1:fa:7b:45:a1:07:46:8a:8d:35:
                    25:93:e5:70:3c:b4:a1:26:56:0b:08:e0:9d:a2:c3:
                    a6:f2:1c:7f:e7:d6:f6:81:8f:69:5e:50:2f:24:94:
                    67:ec:0c:cb:2d:3f:1d:11:69:92:40:7c:b7:87:73:
                    4a:3e:ad:e8:2a:20:70:32:98:93:ed:f2:77:8d:dd:
                    87:13:1e:b9:ba:1f:a5:ae:3b:77:9b:86:f4:1a:76:
                    63:d7:04:79:c4:0f:4a:d1:24:a2:0f:e5:3a:54:40:
                    b2:7d:31:fe:69:1a:b9:35:2e:b2:16:d8:22:8c:b3:
                    22:69:6c:41:25:39:7b:1e:82:81:ea:9a:b9:5a:01:
                    65:71:98:fa:df:6c:07:93:3c:9f:22:3a:3e:69:66:
                    98:f6:d8:10:bd:b6:ce:c3:e2:39:b7:c9:24:3a:22:
                    1a:b0:1f:8a:4e:e6:23:dc:df:06:3d:0d:f4:2f:51:
                    b0:40:73:72:2d:8f:94:72:e5:a2:0e:72:c3:fb:d5:
                    c3:8e:7f:71:38:a6:72:8a:2c:56:6b:49:d9:f8:d2:
                    56:a8:87:8c:e4:3e:f5:fa:a5:ec:96:ee:d8:6e:ad:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:98:D0:DF:82:B2:85:6C:DF:93:AA:09:FC:0B:88:5D:25:0E:F8
            X509v3 Authority Key Identifier:
                keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:8f:65:2c:b7:78:29:dd:81:87:7b:87:e8:58:12:5d:33:f5:
         5a:21:18:cd:f0:6d:12:e0:fb:54:9d:53:71:fb:02:6d:9c:83:
         4b:24:21:05:8c:d4:78:d8:43:66:3f:38:5d:f8:07:5e:e2:f6:
         2f:c4:e7:a8:93:6c:bf:e9:0e:8d:fa:31:b9:45:9b:3d:72:b8:
         48:a8:d4:c3:f5:4b:b1:b7:55:be:af:1b:1b:5a:25:8f:27:2b:
         ea:8d:e9:8f:3d:5d:b2:d7:63:aa:e6:13:de:14:b9:b7:5a:c1:
         b4:18:9b:5c:b2:65:9b:fd:ba:50:20:a7:51:f5:74:c1:75:53:
         57:11:4e:9a:d5:86:15:bb:76:5b:a8:48:6f:77:26:d2:93:75:
         50:9a:c0:0c:77:f2:b4:25:64:af:dd:64:5b:fa:ae:cd:30:4e:
         ae:39:ef:11:7f:c1:d5:5b:6f:bf:24:fa:f4:c4:38:28:a1:ae:
         61:37:11:ab:09:a7:0b:a2:fe:e2:bb:c6:fb:51:72:cc:2c:07:
         31:77:80:3b:43:d9:4f:ec:7e:f8:1c:63:1f:73:69:5e:17:e0:
         b1:36:b4:ce:23:9d:9d:aa:94:3a:90:98:be:8f:2e:82:b6:f2:
         5d:aa:78:24:df:06:c4:a5:fd:e6:4b:52:1e:55:aa:35:c9:f5:
         37:37:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:46 2025 by rpki-client