Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
File:                     S36_c0WWAv2-dyvz4uxQsutKf2E.mft (raw, json)
Hash identifier:          1g6zVvwfwcprX9L8UNSLPBCQXPF3fSvQCwN7vO1c6yo=
Subject key identifier:   4B:E8:03:3F:65:38:57:3F:2B:55:9F:5A:75:90:24:C2:10:51:1E:F1
Authority key identifier: 4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61
Certificate issuer:       /CN=A91754C0/serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
Manifest number:          EF
Signing time:             Sat 31 May 2025 04:54:30 +0000
Manifest this update:     Sat 31 May 2025 04:54:30 +0000
Manifest next update:     Sat 07 Jun 2025 04:54:30 +0000
Files and hashes:         1: S36_c0WWAv2-dyvz4uxQsutKf2E.crl (hash: m9ldQ8lH1BJOem3HeXwR8TSRQCkcuMraN1l71oDawbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl
                          rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91754C0, serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61
        Validity
            Not Before: May 31 04:54:30 2025 GMT
            Not After : Jun  7 04:54:30 2025 GMT
        Subject: CN=683a8b86-dc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:6f:09:e9:98:86:8c:d6:69:fe:06:17:04:
                    51:27:2a:01:8f:63:7b:6b:c6:55:c0:1a:72:d1:75:
                    e4:9b:ab:0e:65:29:4d:6b:ea:78:1d:25:f6:df:68:
                    8b:2b:9a:19:39:52:66:88:0d:ea:33:01:d5:29:fb:
                    c3:0a:78:39:ca:01:25:df:96:2f:35:4f:e7:a7:3b:
                    8e:e1:0a:87:eb:fe:2a:f0:10:7e:be:07:be:25:bb:
                    1b:92:1d:52:aa:14:f2:e0:2d:55:45:17:4c:9d:49:
                    37:e4:11:2d:78:87:96:64:a2:8d:90:22:3f:f5:60:
                    02:fa:b8:4d:4b:29:9a:71:c1:d2:9d:31:a5:9d:92:
                    3c:63:e8:aa:c3:cf:02:5a:44:80:1e:b4:89:d3:aa:
                    ff:18:8b:d7:b4:ec:23:79:3f:40:8d:42:63:1c:30:
                    ac:05:61:3d:cf:02:a9:3f:11:c4:5f:19:ad:e9:1f:
                    3b:a2:e5:59:a9:d2:76:b7:90:7c:a4:81:98:a9:b8:
                    db:b6:ed:ec:17:22:3d:3d:57:33:00:06:e4:dd:1b:
                    f9:7c:c4:e1:04:25:19:49:10:8d:1b:b3:5a:c8:a4:
                    74:1b:02:fd:2b:4a:b9:20:8c:c7:e3:da:89:a2:d3:
                    0b:80:85:24:7f:75:f7:eb:f3:1d:16:16:13:f5:55:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:03:3F:65:38:57:3F:2B:55:9F:5A:75:90:24:C2:10:51:1E:F1
            X509v3 Authority Key Identifier:
                keyid:4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:1c:92:f8:19:ba:d2:d9:8f:8f:55:5f:9f:f7:49:9a:8d:
         96:0f:1d:a6:7c:be:16:c6:28:c2:7a:f4:00:5c:89:33:d9:4b:
         b7:f1:07:6d:5b:2e:c8:a1:00:57:88:de:1b:82:ad:a1:c8:e6:
         2d:b7:2c:d2:d9:df:b1:1c:1c:34:a8:43:e1:00:f8:d3:8f:db:
         df:0a:d4:56:bd:93:18:6f:31:be:38:e3:9d:8f:0b:0c:06:6e:
         70:48:8b:98:e2:d6:04:3c:eb:71:9b:02:b0:d0:13:96:f9:58:
         e2:cc:a5:99:3a:51:ce:3f:1b:93:f6:d3:13:fd:15:02:45:e5:
         c9:54:af:60:5c:3d:8b:4d:7e:0c:48:33:30:b7:7e:c3:6a:9f:
         24:e8:00:d9:2f:81:99:f6:db:f4:9e:1d:60:9a:d1:9c:40:90:
         41:80:93:e1:20:60:6a:65:7e:fc:a8:1c:1d:85:6c:4c:4f:46:
         32:60:4e:ec:80:94:83:0d:4c:ee:95:81:f4:24:4c:40:c1:ec:
         72:80:76:95:27:f3:d6:b7:f8:4b:fb:7b:b1:56:29:0c:ee:44:
         17:4d:f8:af:e5:12:a4:b8:83:cf:e1:9d:70:45:c9:f5:e6:70:
         69:cc:21:98:79:c1:43:f0:39:8a:db:81:cb:07:a5:01:30:81:
         bb:fe:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:45:01 2025 by rpki-client