Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          gVYaSYpvnjgtKz4r59LicJFzeQjCciRSJaqmTYJMMKE=
Subject key identifier:   E3:FB:1E:26:CF:47:78:33:02:FD:C5:88:80:EA:31:3A:1E:58:0F:DE
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       05FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          0866
Signing time:             Fri 04 Apr 2025 23:05:16 +0000
Manifest this update:     Fri 04 Apr 2025 23:05:16 +0000
Manifest next update:     Fri 11 Apr 2025 23:05:16 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: eEJ+JvJIlX9mHIHoPmQdmXQ7COYnwO+iMj32Vn70j6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F
        Validity
            Not Before: Apr  4 23:05:16 2025 GMT
            Not After : Apr 11 23:05:16 2025 GMT
        Subject: CN=67f065ac-7094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:56:67:87:94:b8:fc:9c:c1:c9:5e:1d:1c:
                    5f:68:8c:b4:84:d0:0a:90:dd:05:9f:0f:72:d3:2d:
                    bf:b0:4d:eb:63:20:15:e0:7c:df:8a:2e:86:6e:2b:
                    b7:9b:36:55:6d:bb:a7:9c:d7:31:85:76:44:0b:99:
                    c9:98:9c:f8:3f:61:c3:fa:24:3b:0f:b6:47:e5:31:
                    c2:08:34:e7:89:5a:c9:e0:ec:f3:7c:ed:ac:06:a8:
                    e4:b0:11:91:11:62:f4:e5:ff:60:1f:20:35:c7:f6:
                    f9:0d:e5:75:a1:f7:c4:08:eb:05:f5:a3:bf:04:76:
                    5e:9a:33:76:82:c1:5d:be:50:70:f1:47:7f:3e:e0:
                    2f:ab:9b:d3:b0:2a:af:1c:c0:74:73:5e:1c:43:33:
                    5c:00:b6:83:25:b6:d2:d8:15:93:49:a3:a5:a1:2e:
                    42:fe:29:a1:1d:74:e0:05:6e:cd:f2:26:98:f2:03:
                    a7:56:81:76:37:9e:bb:49:31:c8:51:35:79:6f:44:
                    49:a8:b0:1d:50:ee:fd:99:de:dc:44:cf:ae:5e:fd:
                    e9:c4:61:99:f4:61:25:0a:72:f9:5d:3e:53:03:61:
                    c6:b0:bb:4d:1c:c2:95:43:27:0d:22:54:f7:69:e5:
                    71:81:d8:52:51:c3:d0:9e:05:7b:00:dd:eb:37:46:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:1E:26:CF:47:78:33:02:FD:C5:88:80:EA:31:3A:1E:58:0F:DE
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:59:cc:24:f3:ad:6f:ca:32:39:54:43:a6:5b:85:53:71:
         55:01:19:fb:d3:6e:14:de:8d:5e:0e:f5:41:ef:13:52:01:65:
         44:de:dd:2f:01:d1:d2:55:d8:85:f8:c6:c2:e1:03:a6:28:05:
         21:01:d2:47:f9:c4:14:5c:f7:f8:0b:cd:6a:c2:3f:69:1c:ca:
         86:19:f6:6f:a2:17:f3:ac:9a:9f:44:91:e4:e0:13:fd:a9:30:
         68:fa:d6:07:85:7a:2f:c7:8e:3f:70:bd:bf:53:1b:87:7b:a3:
         30:d4:4a:c3:3b:a4:26:ac:af:3b:63:18:4e:2a:8f:25:94:da:
         4d:bc:62:de:de:68:72:0d:21:d5:55:76:cb:69:df:e0:d9:24:
         20:83:af:c0:01:67:b8:02:b3:c5:ee:05:d2:83:df:4f:9b:22:
         b3:3d:c5:84:15:9f:c5:ad:4b:4a:02:98:0f:5a:7a:a6:75:39:
         e4:46:30:39:63:b3:1d:2c:03:96:03:0c:0b:1f:63:e2:d8:3c:
         c5:55:fe:eb:49:2d:4f:fa:88:5e:9d:73:a8:f4:e5:ba:b6:fc:
         48:7e:a1:ae:62:19:c8:d6:e3:40:b8:37:16:c4:06:4f:fd:1b:
         63:fc:a3:5d:33:b8:24:bd:ba:9c:2b:1d:41:3a:61:7b:63:86:
         2d:63:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:47:08 2025 by rpki-client