Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File:                     i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier:          GoHDoQwuXGjFbH5pGC7pncRvHtMS8mjgMKYZwoV2ONw=
Subject key identifier:   69:BE:9C:32:22:44:73:4A:4F:A8:5A:91:B3:EE:96:3F:2A:D8:43:6C
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer:       /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number:          011F
Signing time:             Sat 31 May 2025 04:24:54 +0000
Manifest this update:     Sat 31 May 2025 04:24:54 +0000
Manifest next update:     Sat 07 Jun 2025 04:24:54 +0000
Files and hashes:         1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: 1NspSnEv/ujBNVV7r0aRBGrXaghmnFnNKUsq2pLuChg=)
                          2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=)
                          3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
                          rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
        Validity
            Not Before: May 31 04:24:54 2025 GMT
            Not After : Jun  7 04:24:54 2025 GMT
        Subject: CN=683a8496-6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:46:02:51:96:6c:4a:eb:50:d3:4b:9e:90:
                    dc:e5:86:5b:4d:44:22:59:a4:73:55:5e:36:13:8f:
                    d2:ef:23:c6:21:87:b8:7d:be:64:a2:95:83:91:4f:
                    48:50:c2:b5:ee:2c:29:62:70:65:40:32:35:13:b7:
                    3d:ac:2e:c8:ef:1e:7e:43:ba:8c:7d:c3:5d:b1:e2:
                    81:8f:36:84:03:ee:43:af:de:e3:d5:1d:f4:cf:1b:
                    bf:fc:df:c0:0f:60:27:90:e2:ad:95:72:6e:3c:bf:
                    4c:c0:e5:3b:95:b2:cc:7b:49:38:26:00:e8:6b:fe:
                    72:f5:8c:58:7c:6c:ea:36:8f:7b:25:aa:29:e8:f0:
                    06:49:ff:7e:72:55:be:9d:a1:56:7a:99:af:0c:0c:
                    dd:94:2e:99:bc:7c:ac:eb:2b:ea:0b:81:37:7d:44:
                    6b:6c:60:d5:e6:92:7c:52:82:04:a0:11:97:78:25:
                    7e:3c:d3:0e:c6:b5:52:01:fc:e8:e9:61:7e:32:53:
                    9f:50:6d:ff:ab:73:e9:70:63:dd:e3:c1:7c:52:03:
                    fa:0d:71:2a:9d:ef:09:f8:09:4d:b1:30:9b:02:48:
                    37:58:5a:c5:f1:0d:44:63:a9:ac:40:7e:21:79:3c:
                    42:2a:c7:5d:ba:24:3f:7f:8f:b5:80:ef:16:65:ad:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BE:9C:32:22:44:73:4A:4F:A8:5A:91:B3:EE:96:3F:2A:D8:43:6C
            X509v3 Authority Key Identifier:
                keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:9d:d8:ea:73:e2:e5:d2:76:17:ad:8c:08:ba:c3:ed:d7:
         c9:c8:f1:85:26:ee:9b:b1:f9:bd:6f:f7:66:fd:c2:08:b0:18:
         37:4d:c2:ae:71:3f:b8:ce:91:15:67:c6:da:c1:bb:5e:d8:f2:
         a2:7f:42:c7:ba:16:df:77:d5:b5:8d:1a:f8:ee:76:f5:df:b0:
         da:72:65:c0:37:b1:02:10:2a:a2:0b:cb:e6:2d:96:fa:1c:52:
         b8:22:74:ed:53:85:3a:4d:8e:90:53:a6:e7:6b:b4:54:b3:e2:
         73:4f:f7:a8:a7:d1:ae:db:d3:55:68:a8:1b:d9:7e:8b:a6:8d:
         73:92:79:66:a1:32:fe:fd:9d:6d:39:6b:01:fa:ca:d4:e7:e0:
         88:d8:b9:01:ee:e6:93:48:85:15:95:90:fd:32:9c:b4:16:6c:
         68:2c:88:1d:57:1d:ea:8a:4f:4a:9c:83:a4:f8:1b:49:21:81:
         53:cd:58:5a:c4:e3:1d:c3:92:9b:bd:c6:f7:3a:5a:73:2a:fa:
         de:f2:ef:65:fe:29:1e:1d:57:db:5b:68:91:7b:71:6b:5d:94:
         05:68:93:3f:a9:b2:74:1a:41:ae:16:f2:da:7c:7e:52:8e:b4:
         46:f4:d9:b0:78:9a:53:9d:d3:79:ab:b4:7b:d1:6b:39:bf:cf:
         ec:95:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:45:45 2025 by rpki-client