Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File:                     IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier:          i3A92xQ4voxcOzT9OvLrL5Iq1DjJVhKtECAcbUZjnjw=
Subject key identifier:   20:64:4D:E9:37:07:B0:26:56:35:48:FA:81:B6:A1:A4:2F:3B:CF:6F
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer:       /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial:       150C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number:          2B8B
Signing time:             Sat 31 May 2025 16:49:18 +0000
Manifest this update:     Sat 31 May 2025 16:49:17 +0000
Manifest next update:     Sat 07 Jun 2025 16:49:17 +0000
Files and hashes:         1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: mMFDADH9IqtT6BDdU6lZkC9l01PfwpFqmwG4Pgid5No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5388 (0x150c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
        Validity
            Not Before: May 31 16:49:17 2025 GMT
            Not After : Jun  7 16:49:17 2025 GMT
        Subject: CN=683b330e-7039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:06:61:35:b9:7d:4d:ca:b6:02:e9:7c:ba:
                    99:ad:3f:9a:6b:18:c9:b1:8c:84:4f:7d:89:db:42:
                    4f:02:40:57:f3:eb:0d:01:57:2b:ac:fe:05:26:03:
                    a9:f2:0a:02:f3:7a:04:b4:b7:04:62:1e:39:71:b6:
                    c2:79:6d:93:64:e2:21:f1:4b:0a:c1:4c:52:a5:cc:
                    00:83:3a:a4:5a:2b:86:84:2d:83:c9:d4:0d:2a:d8:
                    fc:58:a3:fa:ba:3e:f5:5b:71:75:a7:27:52:9e:7a:
                    43:68:1e:3e:c5:1f:bd:dc:36:85:c0:69:8f:e7:c1:
                    2c:7e:87:ee:fc:f4:92:78:c8:12:5f:07:4b:ce:41:
                    93:31:48:77:eb:f7:7d:f7:94:76:29:94:3e:00:4d:
                    51:ac:80:a9:d9:a2:ea:82:d1:d0:9c:54:74:be:9e:
                    2e:ae:03:6c:ea:72:e3:bb:d9:89:6d:14:2e:1e:6c:
                    99:af:48:7e:a7:45:52:ac:e1:60:30:6a:b1:07:3c:
                    9e:cc:7a:57:8e:12:94:69:1f:ba:c9:d2:a7:2e:28:
                    3c:05:32:90:84:ad:17:04:4f:1e:ef:53:d0:6e:a0:
                    2d:f6:11:a2:8c:70:f4:09:2c:f7:0d:cd:71:2f:fd:
                    9d:f1:19:fa:00:7b:51:3c:23:9c:19:94:ca:86:4a:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:4D:E9:37:07:B0:26:56:35:48:FA:81:B6:A1:A4:2F:3B:CF:6F
            X509v3 Authority Key Identifier:
                keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:a4:d5:90:fb:64:f5:6c:54:a9:d6:0e:37:d3:3d:fc:a3:
         3a:bc:66:49:2a:14:b8:c0:60:3c:d5:2a:65:0a:95:a9:55:c0:
         33:16:16:34:ff:86:a4:0a:b6:39:96:14:aa:26:b4:48:9f:71:
         32:82:c2:76:9b:83:0c:d7:37:8d:8f:2a:36:42:02:de:14:ff:
         4d:d0:eb:52:bb:f8:cb:f6:d5:ac:d7:de:f9:2d:56:03:6c:cf:
         0f:55:72:73:4b:99:3b:72:d3:47:4d:83:e6:81:45:63:b5:58:
         d6:5b:61:ce:1c:01:48:74:d7:62:55:43:48:24:4f:28:2b:2d:
         7a:32:b1:ee:b2:5d:eb:6f:2d:b5:cb:c9:fe:ec:ba:de:4d:ce:
         09:b2:c2:15:2e:3e:bf:f3:3b:10:9f:25:89:d9:50:e1:2f:a8:
         c7:ce:66:fe:37:88:d4:5b:dc:2b:69:be:4b:b4:15:77:5d:88:
         27:b0:c7:64:c5:fb:4b:43:09:b3:9c:47:df:02:fc:a1:2b:f9:
         70:db:bc:32:c4:d4:0b:2e:0a:bb:ea:b1:08:49:de:1b:de:2b:
         37:eb:80:c1:c1:04:12:d4:40:fb:3a:d6:a4:e1:64:8e:7b:e4:
         3c:b9:37:d8:85:ef:e7:20:77:dd:fd:f9:75:37:c0:c6:82:26:
         62:4d:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:59:40 2025 by rpki-client