Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
File:                     5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json)
Hash identifier:          kaDx6S7evPncjGYmA5+HqCDknAAcDeiKTNheiWTGzRg=
Subject key identifier:   15:54:74:FA:A1:A0:86:A8:14:C4:C7:58:11:4C:4F:9B:3F:90:35:B2
Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37
Certificate issuer:       /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
Manifest number:          07A2
Signing time:             Sun 08 Jun 2025 20:54:35 +0000
Manifest this update:     Sun 08 Jun 2025 20:54:34 +0000
Manifest next update:     Sun 15 Jun 2025 20:54:34 +0000
Files and hashes:         1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: EA1sgJTJqTynU6JcSPZAebT8QVUo6ZdWGBYUBNZCKIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl
                          rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 20:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
        Validity
            Not Before: Jun  8 20:54:34 2025 GMT
            Not After : Jun 15 20:54:34 2025 GMT
        Subject: CN=6845f88b-b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:50:a2:d1:eb:f8:5f:da:77:eb:95:ca:37:
                    25:85:2a:93:3f:2d:13:54:ed:94:e9:3a:37:52:ec:
                    3d:60:ba:3f:fb:d2:bb:3e:e1:e9:ec:9d:56:59:60:
                    ec:f4:f8:96:ad:2c:8c:4c:a6:4c:a5:aa:33:7e:df:
                    4a:1a:38:28:69:c4:55:b4:0d:a1:80:0d:91:ca:ab:
                    e3:c7:4b:f8:bc:0c:bd:75:c8:77:ed:0e:18:da:d3:
                    40:df:61:86:07:bb:62:e3:27:fd:bf:d7:d1:55:91:
                    70:ac:52:86:1a:a0:2d:ac:c5:f5:99:80:42:64:76:
                    19:64:fd:e5:19:d6:23:45:c2:75:61:cc:42:ae:33:
                    47:82:35:a0:4c:07:5d:f0:dc:f4:86:e8:28:21:a5:
                    83:79:18:e9:fe:41:69:69:aa:9e:ea:64:a0:fa:c8:
                    98:0b:ab:38:ff:fb:20:e3:2d:0a:c0:3c:f8:14:0c:
                    5d:24:e9:6e:dd:15:06:c5:d9:89:70:81:fd:d8:cc:
                    1f:ee:84:dd:db:93:27:22:2b:19:fb:35:e3:43:96:
                    6b:1b:04:99:dd:78:9c:e1:55:11:75:ce:c7:98:22:
                    28:ad:dd:ca:0d:de:ad:2d:9d:06:e9:b4:93:ad:e6:
                    32:65:c1:30:b4:1f:48:c0:98:7f:95:21:57:7d:d4:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:54:74:FA:A1:A0:86:A8:14:C4:C7:58:11:4C:4F:9B:3F:90:35:B2
            X509v3 Authority Key Identifier:
                keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:c1:3b:23:8f:51:d4:fb:85:43:2c:a3:e7:19:e2:ea:bb:
         cd:b1:0a:8c:d2:0a:3b:a4:cb:b5:0d:13:44:91:a2:47:93:93:
         e8:3d:c7:d9:f2:12:b2:a7:53:26:17:52:ac:b9:9f:24:a7:b7:
         28:33:62:17:d0:9d:11:7d:3b:5e:c3:f1:ce:77:6a:d8:16:f6:
         ad:6a:3c:cf:5e:80:61:a7:02:4a:20:ad:48:d2:9a:ff:c0:9f:
         8c:2a:67:30:ca:2f:06:8c:32:2e:73:24:c8:f0:4d:c2:7c:1c:
         b9:96:59:90:07:ec:13:1f:ae:32:30:8b:78:a7:8d:85:9e:1b:
         4d:c0:b5:90:8a:89:99:96:3e:a8:9d:f1:b9:67:1d:e7:42:52:
         a6:cb:3d:68:de:34:2a:a0:39:8a:86:8b:37:65:ba:fa:71:67:
         05:69:f6:15:60:d5:b2:a2:1b:80:06:73:bb:8b:c5:78:e8:7c:
         6d:2b:19:37:66:33:3f:c6:8e:de:b1:25:ed:eb:13:1f:2d:88:
         b6:e7:b7:f6:e4:d8:3d:39:f8:0e:c7:60:67:41:a5:1e:d4:30:
         2c:58:45:1e:4c:fa:b5:b8:b1:57:82:f2:43:c3:7a:9a:60:97:
         05:e8:63:f9:85:c2:87:01:2b:4f:36:2e:72:6c:bb:5e:91:b9:
         ba:b9:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:36:39 2025 by rpki-client