Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
File:                     m8V5k3xyDN2n11YYtyJj0kza_K4.mft (raw, json)
Hash identifier:          e3oUpo0f7M5Gmoz8mw0f5QpLQr21E9hOmUBR/4SUUhg=
Subject key identifier:   90:35:46:F4:1E:8B:60:F1:BB:4B:C6:63:A1:A3:62:00:9B:2D:2E:76
Authority key identifier: 9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE
Certificate issuer:       /CN=A91396E7/serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
Manifest number:          74
Signing time:             Thu 05 Jun 2025 06:10:50 +0000
Manifest this update:     Thu 05 Jun 2025 06:10:50 +0000
Manifest next update:     Thu 12 Jun 2025 06:10:50 +0000
Files and hashes:         1: m8V5k3xyDN2n11YYtyJj0kza_K4.crl (hash: v26CwX+vAk+lc7e76u337iW/oiOuMhFjUUKkFYrqqww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 06:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=9BC579937C720CDDA7D75618B72263D24CDAFCAE
        Validity
            Not Before: Jun  5 06:10:50 2025 GMT
            Not After : Jun 12 06:10:50 2025 GMT
        Subject: CN=684134ea-5cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:cb:6b:51:c9:e5:9d:be:67:1d:72:7f:f0:
                    af:6a:a6:ca:70:5f:ea:48:c0:78:4e:62:c3:e9:80:
                    f3:8f:cb:7b:47:91:96:f9:42:cb:01:1b:d2:ed:90:
                    4c:af:8a:7b:a7:76:5b:1b:5d:29:56:39:b5:d9:d6:
                    e7:03:98:26:e5:98:bd:59:80:7a:3f:e0:d1:a2:1c:
                    86:af:cf:96:b5:3e:af:f9:16:f1:a4:76:cb:2c:18:
                    e5:ad:1e:3c:6c:ee:b2:21:27:f2:f4:d6:9c:8f:af:
                    49:f5:fe:32:0f:3d:a4:2b:39:e9:e6:c6:8b:d6:5d:
                    f6:70:5b:15:24:e7:a9:d1:03:73:10:79:c2:75:c6:
                    b4:c7:27:30:c8:43:73:b8:37:36:c5:fd:ff:6d:3c:
                    cf:31:d4:ae:29:e1:7f:d1:16:20:d1:6d:c5:65:e9:
                    81:8e:8c:1c:80:e2:4e:10:67:c7:7c:f4:7c:07:7e:
                    f8:8e:0a:14:4f:fa:da:66:0b:65:23:0e:d5:7d:c7:
                    ca:0b:2d:b1:5d:2a:7e:ad:9f:b2:7d:ae:33:79:e2:
                    1e:72:9a:ed:74:7c:41:5b:87:c3:ca:60:ae:f1:46:
                    1b:96:ab:f7:5e:df:cf:d9:f4:cd:84:90:79:01:64:
                    39:fb:ed:a2:0a:11:bb:45:05:33:50:51:e4:fb:79:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:46:F4:1E:8B:60:F1:BB:4B:C6:63:A1:A3:62:00:9B:2D:2E:76
            X509v3 Authority Key Identifier:
                keyid:9B:C5:79:93:7C:72:0C:DD:A7:D7:56:18:B7:22:63:D2:4C:DA:FC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8V5k3xyDN2n11YYtyJj0kza_K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0F388428912511EF942A2B28C4F9AE02/m8V5k3xyDN2n11YYtyJj0kza_K4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:24:01:a6:7b:bb:c9:9c:4e:a2:0e:4f:3f:94:05:a7:03:29:
         c5:bd:44:98:46:7a:21:a8:32:c6:6e:c0:47:15:1e:2b:97:50:
         25:23:9b:4d:d3:fd:bf:48:b8:da:68:a5:41:83:3d:42:be:3b:
         ed:b1:4d:59:07:f8:c4:be:d7:f1:b9:c9:df:23:28:8e:f7:1c:
         5e:10:61:cf:33:4a:8d:8e:65:2d:87:5d:78:e6:dc:b3:7c:ae:
         94:08:40:96:43:7a:e9:7d:a4:d1:c5:0c:57:b8:b4:d8:66:38:
         15:de:68:57:1a:20:16:ef:77:de:56:82:f8:95:91:e2:f7:89:
         dd:6d:fd:e3:f8:29:69:38:e0:37:4a:a0:86:f7:06:2b:cf:0e:
         f2:22:70:06:eb:fa:08:2a:46:f4:51:05:ed:ec:9a:6e:e9:2b:
         e0:fb:b8:2d:c7:4a:ac:13:28:90:8c:8e:8b:ca:e6:40:82:8a:
         b2:75:fc:2b:ce:26:4b:97:8a:75:ec:7d:a6:9b:26:38:d0:b8:
         e5:5b:bc:b1:f5:b0:a8:e9:05:7f:f9:29:a7:97:5c:32:a2:8d:
         6c:1f:37:43:47:94:75:91:03:7d:93:b8:63:05:8b:98:14:f3:
         7f:48:27:a2:19:95:cd:05:27:7b:f3:9e:94:31:59:c7:0b:46:
         81:1f:57:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:54 2025 by rpki-client