Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
File:                     6RNroVXdqYLO0enREJ2UGszagj0.mft (raw, json)
Hash identifier:          tnRronzGVWAN3EM/AUF1cEZ2b3cZIeQdnTG0eTfSN+g=
Subject key identifier:   F9:06:82:EE:F4:2A:A4:90:CD:4B:DF:49:E7:98:F5:EC:E6:8B:34:D0
Authority key identifier: E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D
Certificate issuer:       /CN=A915A4AF/serialNumber=E9136BA155DDA982CED1E9D1109D941ACCDA823D
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
Manifest number:          8A
Signing time:             Sat 31 May 2025 06:05:10 +0000
Manifest this update:     Sat 31 May 2025 06:05:10 +0000
Manifest next update:     Sat 07 Jun 2025 06:05:10 +0000
Files and hashes:         1: 6RNroVXdqYLO0enREJ2UGszagj0.crl (hash: iF7K1KIypexjJI8YHWnjaeG83NtcKn4iPgYZNHCmPVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=E9136BA155DDA982CED1E9D1109D941ACCDA823D
        Validity
            Not Before: May 31 06:05:10 2025 GMT
            Not After : Jun  7 06:05:10 2025 GMT
        Subject: CN=683a9c16-78ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ab:f3:58:ab:91:db:e0:8f:48:e2:5c:ed:7f:
                    58:b0:e3:2a:6d:30:b2:1a:77:40:fe:3d:e3:80:b8:
                    9f:d0:3f:2a:42:8c:aa:5e:38:b0:26:b6:83:fc:17:
                    aa:9d:d1:3a:80:07:26:9a:2d:0f:f1:9e:06:a5:f0:
                    d1:b4:ca:28:ac:c9:8d:bf:f9:2f:fc:6b:3e:a9:48:
                    05:b6:34:41:8a:33:d8:e9:1c:df:f2:17:f9:49:62:
                    ff:80:3a:eb:23:85:d2:71:0b:a0:29:69:77:d1:e4:
                    b9:31:ce:f8:82:50:a0:5c:75:f6:c0:b7:f6:95:d3:
                    8c:2a:98:78:be:00:aa:89:45:5d:17:47:89:19:26:
                    84:b5:b0:f3:97:52:bc:ad:ef:ae:6c:80:ff:af:e1:
                    56:4a:bb:3d:e2:fc:e0:9e:2b:9e:16:4e:c6:a6:e4:
                    75:0d:a7:61:e5:79:33:1e:15:44:5e:c3:7b:17:99:
                    65:42:4b:93:ed:8e:4c:46:6f:16:9c:ff:22:a5:4e:
                    80:6d:a1:17:46:f5:b7:6a:9d:9c:24:65:08:cf:bc:
                    10:9a:64:3c:c6:13:b7:4b:ae:f5:96:aa:ed:24:8f:
                    39:11:5b:3b:73:c5:65:54:a1:d7:2a:b2:01:43:f9:
                    e3:0d:46:08:e6:0a:ac:a3:56:be:93:df:43:b6:c5:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:82:EE:F4:2A:A4:90:CD:4B:DF:49:E7:98:F5:EC:E6:8B:34:D0
            X509v3 Authority Key Identifier:
                keyid:E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:71:83:a7:be:7f:bd:af:60:5b:ae:3d:d2:1e:09:e4:c5:
         f3:8f:7b:17:34:4b:a0:a6:9f:5f:c7:e2:2e:77:23:1f:c9:13:
         c0:b9:0f:28:2c:9d:62:c6:f0:42:e7:2b:03:c3:d1:4d:01:70:
         80:14:f4:f0:c0:6b:9e:5f:c4:84:4d:ba:5d:32:39:32:b3:ff:
         e8:77:6b:96:30:d5:24:ce:d5:79:07:01:6f:39:3a:23:60:8b:
         dc:90:05:75:16:07:60:12:2b:5f:34:8c:f1:34:a5:4f:76:e4:
         b2:7d:07:b0:45:d6:46:28:cf:be:6e:a9:1c:79:b3:f8:78:0d:
         05:d6:eb:37:69:dd:ed:aa:75:f3:60:57:fd:c0:3f:6e:94:5c:
         12:7c:fc:23:33:65:fb:cf:41:21:6d:9f:52:62:b7:f0:14:cd:
         e7:93:e3:db:93:90:65:21:6e:7d:ed:b5:fc:11:9c:75:41:ca:
         29:37:aa:64:eb:42:9c:20:09:cd:07:3a:cc:f8:d0:6a:5f:04:
         28:8d:94:bd:42:8e:75:3c:63:07:f7:b2:1b:16:3f:e8:f8:5f:
         5b:56:86:d3:f3:10:66:d9:02:f6:95:de:99:5c:41:c5:15:8c:
         d5:bf:a9:51:f2:02:bb:d8:5f:8b:af:55:4a:e5:d0:b2:c0:9c:
         3e:06:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:44:58 2025 by rpki-client