Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
File:                     mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json)
Hash identifier:          BM0AHcYCj27Jg+yQtlfb60vnDHio3w6DS4tEY1ghqEQ=
Subject key identifier:   3F:15:E0:1A:DD:2E:95:81:6F:CE:27:35:DA:C9:D7:E8:3C:80:FD:50
Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D
Certificate issuer:       /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
Certificate serial:       0F92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
Manifest number:          0F92
Signing time:             Fri 30 May 2025 17:43:35 +0000
Manifest this update:     Fri 30 May 2025 17:43:35 +0000
Manifest next update:     Fri 06 Jun 2025 17:43:35 +0000
Files and hashes:         1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: m0iEHZYjcOtLJI5j/utPa2GEzoE+SFCdzi0dhcc9zws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl
                          rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3986 (0xf92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
        Validity
            Not Before: May 30 17:43:35 2025 GMT
            Not After : Jun  6 17:43:35 2025 GMT
        Subject: CN=6839ee47-4f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:7a:20:aa:65:4f:3d:45:f9:64:ae:b4:5a:
                    a3:3f:89:b6:58:85:37:08:11:a0:dd:8a:e9:47:ac:
                    fb:cf:79:96:62:4f:fd:d5:2c:55:34:cb:da:ac:9b:
                    a9:33:4a:1f:e6:5d:f2:0e:5f:23:c1:85:47:f4:d3:
                    e1:35:6c:3b:8b:60:4b:91:8d:33:73:e6:89:20:8b:
                    76:5b:88:fb:66:7f:55:64:13:01:b9:81:db:53:9e:
                    8d:ad:5d:c2:2a:c1:af:60:bf:01:41:d5:8a:f6:07:
                    31:5f:17:12:85:2c:8a:94:75:69:63:e9:98:04:58:
                    4a:97:a8:b1:fe:83:9b:58:cc:fd:03:fb:c3:2a:2a:
                    2c:6f:02:21:58:b0:15:11:17:cf:bb:54:9e:79:1f:
                    40:26:6f:b5:d1:33:6e:11:52:f6:33:bf:cc:24:9d:
                    04:96:0a:d5:80:7a:d8:aa:66:4c:89:62:d3:2e:d4:
                    b9:d6:87:05:a7:5c:3f:66:af:2f:cb:b5:de:46:87:
                    50:c9:92:bf:72:ac:dd:7a:ee:cd:74:3a:bc:04:46:
                    70:74:c2:cc:4a:66:51:4c:37:b2:94:c4:93:60:a4:
                    d6:a8:3f:74:fa:6e:c3:1c:21:3a:a5:ae:32:f7:31:
                    d0:7d:03:f2:de:68:bc:a9:3a:53:27:e1:cd:2f:82:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:E0:1A:DD:2E:95:81:6F:CE:27:35:DA:C9:D7:E8:3C:80:FD:50
            X509v3 Authority Key Identifier:
                keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:91:55:41:40:82:4e:28:3e:7f:39:11:3d:4b:5c:9d:cc:
         8e:86:ef:bb:0a:8f:ff:a6:a3:ee:c7:ce:0d:60:fa:f9:ec:2b:
         40:73:9e:77:a4:28:10:6e:98:52:f4:6b:5e:fd:8b:67:2c:a0:
         65:92:c2:90:52:ac:18:54:51:d5:3e:be:74:f5:8e:73:6f:57:
         b0:77:ac:a9:fe:7e:5b:ff:c0:10:9b:a0:52:b9:a7:07:44:f9:
         f2:ea:8d:27:a2:76:05:7b:b0:f0:27:af:74:86:6a:9d:8e:0b:
         de:18:2d:30:ab:10:c9:6a:ff:d7:11:3f:31:cf:18:42:b6:c0:
         6f:7a:df:09:28:48:81:56:44:07:2d:10:70:b4:8c:43:b8:c9:
         d8:9b:ec:79:ab:a1:f1:7f:80:d5:58:7b:11:0f:6c:1c:02:28:
         d8:55:e5:e0:0a:39:18:99:f7:43:e6:17:69:8f:c1:af:1a:40:
         7f:f5:28:8c:16:51:94:3a:ec:b6:77:80:b5:07:1a:80:c8:ca:
         25:4c:66:f5:89:47:66:6a:76:c9:c9:48:cf:86:21:8c:59:c7:
         dc:80:65:ff:38:45:92:f3:d7:20:e1:8e:99:66:5e:68:cd:9d:
         fe:06:2a:c1:47:01:82:1f:f8:d3:cd:18:ec:69:98:29:af:89:
         d7:e2:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:51:37 2025 by rpki-client