Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
File:                     61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json)
Hash identifier:          xNMc/FU1vSj+fR5Fqkaf3Xe44MRteex+ebOz8msaDok=
Subject key identifier:   B2:76:4F:F0:00:D7:B9:03:15:F6:14:21:A8:5E:F1:94:95:B5:4A:2E
Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
Certificate issuer:       /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
Manifest number:          0637
Signing time:             Fri 04 Apr 2025 22:44:28 +0000
Manifest this update:     Fri 04 Apr 2025 22:44:28 +0000
Manifest next update:     Fri 11 Apr 2025 22:44:28 +0000
Files and hashes:         1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: X7QCwZvcTAhgkOUWp6aZgQiobmer+JCrlV/PGPVmHzY=)
                          2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: Lx0/5acw/rTT+uCYraQZRnT94tjJt0V2khH4PhiByaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF7C
        Validity
            Not Before: Apr  4 22:44:28 2025 GMT
            Not After : Apr 11 22:44:28 2025 GMT
        Subject: CN=67f060cc-3be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:cb:62:ee:04:e3:06:98:77:de:1f:b8:c8:
                    9d:b1:9d:43:08:6f:c1:e4:47:06:2f:23:44:d6:4a:
                    33:17:d2:36:87:af:79:ab:b6:97:e2:57:bb:55:9c:
                    ad:d9:3a:57:a2:61:e0:71:7d:6b:24:58:ae:ae:00:
                    15:0a:06:f8:ed:c3:73:8a:03:42:b8:de:17:95:f2:
                    2b:dd:c4:e8:b0:68:b2:3f:40:5c:ee:ef:4f:ce:ff:
                    30:66:10:c4:b9:e2:ac:96:0d:da:ee:eb:b5:17:ff:
                    3b:24:00:da:89:77:69:4e:7c:8b:2d:d3:8c:76:5d:
                    0e:cb:3d:c9:1b:2c:97:48:40:c7:ea:80:77:f8:0b:
                    a1:13:dc:0a:e5:62:01:fc:ed:60:da:94:b7:2a:be:
                    84:b6:f5:ba:5f:fa:23:fe:90:82:0f:4a:4e:d4:3b:
                    82:a5:66:7f:27:9a:c2:27:aa:d6:bb:26:92:52:34:
                    ba:ae:25:61:6c:49:c3:d5:b0:e9:93:3d:c8:77:e4:
                    aa:ac:6c:c2:04:10:62:48:5f:9c:c5:ae:0e:1d:91:
                    ec:1a:d5:b9:67:86:18:7d:c2:b5:7a:2a:60:a4:24:
                    16:31:dc:40:68:bd:12:0d:6c:73:54:8c:9b:b0:a0:
                    4d:0c:2e:75:60:58:64:f3:c2:35:23:b7:48:d0:fc:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:4F:F0:00:D7:B9:03:15:F6:14:21:A8:5E:F1:94:95:B5:4A:2E
            X509v3 Authority Key Identifier:
                keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:34:5c:a9:9c:21:3b:ac:c8:68:24:26:56:49:aa:60:2b:b0:
         28:1d:8e:b6:24:1f:70:e1:2f:95:99:14:62:ac:50:f2:56:9e:
         d4:70:6d:24:f0:00:a8:8e:b8:14:11:65:70:8f:31:6f:70:67:
         ba:83:d8:ec:9f:4e:d2:d2:19:96:98:14:0e:91:c8:20:79:01:
         e0:1d:26:0c:30:09:72:c8:12:d2:e2:fc:95:30:71:76:b8:a5:
         7a:b0:64:35:82:78:58:bf:b5:7c:b4:7e:eb:9f:a8:6a:7e:ae:
         17:95:b4:7f:92:aa:20:cb:37:72:b2:55:a4:2a:c9:80:74:a7:
         bb:31:b5:3e:02:d2:2d:62:71:32:43:c6:8a:bf:dc:9d:28:2e:
         1b:eb:97:27:31:31:d3:88:d8:b8:46:19:b4:97:f4:c7:3b:9c:
         80:1e:fc:60:d8:17:53:a9:87:fb:25:e6:06:f5:ae:f5:c6:f4:
         72:96:61:1f:87:b4:99:60:be:62:4e:0e:4a:33:d5:ac:e6:88:
         e6:1a:86:a7:da:dc:13:c1:71:63:53:f4:56:d6:b1:08:cd:76:
         5b:5f:0f:fc:3c:0d:54:2b:c5:a0:18:c1:08:ac:28:bd:a0:1b:
         8d:92:b2:5f:e3:e2:82:4d:fd:65:60:99:22:a9:ce:54:dc:19:
         b0:f9:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:13:33 2025 by rpki-client