Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
File:                     Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json)
Hash identifier:          qqEARDYchabLA/HPvFYOuyUdtSvRUZccnCEgWXnb80c=
Subject key identifier:   E3:C9:18:A5:37:2D:4A:D7:2D:D0:41:B9:16:5D:8C:18:24:DF:33:CA
Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Certificate issuer:       /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
Manifest number:          06
Signing time:             Thu 05 Jun 2025 07:35:54 +0000
Manifest this update:     Thu 05 Jun 2025 07:35:54 +0000
Manifest next update:     Thu 12 Jun 2025 07:35:54 +0000
Files and hashes:         1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: A9ATlIpiXaXxxMzvBHa+l2b5jNXL8AnVfbATvsFeIOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 07:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
        Validity
            Not Before: Jun  5 07:35:54 2025 GMT
            Not After : Jun 12 07:35:54 2025 GMT
        Subject: CN=684148da-ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:8e:05:93:ec:ba:7b:dc:13:78:d4:54:c4:
                    8c:d9:ee:33:17:a4:ca:47:42:99:4f:ed:5b:b1:c1:
                    32:6a:58:0a:40:7e:52:a2:0a:a0:27:b3:42:48:ca:
                    03:1f:de:2e:b2:2a:3d:b7:96:ed:3a:a2:74:7e:85:
                    5a:09:a1:b4:70:2b:b8:e3:db:d8:37:63:11:d7:c2:
                    85:fb:bf:53:0a:29:aa:f6:90:4d:ff:27:3a:04:14:
                    51:36:f0:f3:aa:8b:d3:fb:34:0d:ba:32:6c:83:3c:
                    1b:9c:71:f0:e1:9f:ff:6c:dc:66:8f:03:7f:0f:6d:
                    c5:4d:9e:76:87:9c:97:ee:53:1e:c9:9d:e9:72:f2:
                    43:03:d8:60:f5:b2:ed:cf:b3:59:d8:6f:92:1e:34:
                    05:0f:7c:33:4c:06:a1:36:67:76:af:f0:0b:b3:03:
                    dc:9c:ad:24:82:ff:1b:eb:9f:a4:75:d5:52:c0:fc:
                    58:a6:32:27:13:08:32:56:a1:fb:10:53:5d:f8:52:
                    40:2f:ce:f2:39:fe:ce:8c:05:4d:57:34:9b:2d:3d:
                    68:4c:a0:d4:41:14:c4:5d:4d:c7:ee:12:62:37:da:
                    ab:7c:64:fb:3e:9d:33:6e:d1:72:d2:c1:31:70:7e:
                    73:13:90:29:43:d8:e7:9a:68:de:3f:47:4f:1a:fd:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:18:A5:37:2D:4A:D7:2D:D0:41:B9:16:5D:8C:18:24:DF:33:CA
            X509v3 Authority Key Identifier:
                keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:c5:4a:13:d1:be:35:7c:26:2c:a3:ca:2f:b6:ba:6a:ef:
         21:d3:8a:fe:b2:c8:aa:62:6d:4c:89:7e:8e:ca:4b:f9:de:59:
         67:fd:31:1f:54:fc:89:47:98:8d:41:e9:4c:d2:cc:d7:da:96:
         54:38:89:38:37:e4:79:1f:f3:6a:6a:7f:5b:96:62:3e:bc:dc:
         eb:c5:ef:9d:2c:c5:49:f5:f3:bb:1c:79:d3:8e:d3:1a:0c:47:
         4e:f2:c7:ff:41:23:02:2e:6c:99:3e:03:7e:a9:87:f8:81:6a:
         99:b6:32:b4:97:32:36:dc:88:4a:7e:29:19:6c:b5:da:75:d6:
         71:66:81:50:85:27:de:dd:8b:1e:58:7f:43:94:c8:59:6f:40:
         e1:b0:b9:2c:9c:2f:ef:88:be:5b:cb:65:04:4f:01:11:4e:87:
         32:30:87:0d:57:d1:9a:cb:21:f9:92:45:d9:bd:74:e3:89:07:
         50:0f:14:2a:71:0d:59:1d:ad:8e:ef:a1:b3:70:2f:ca:32:53:
         77:c4:37:8f:a9:8d:4d:9e:8d:e8:35:06:14:f9:50:cf:12:58:
         7f:6b:5f:14:29:86:28:e6:7d:7b:b4:df:7f:8b:cc:ca:39:62:
         e6:5f:b2:b0:fd:91:ad:57:f0:72:5a:d7:d3:bd:68:ca:ab:51:
         95:88:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:02 2025 by rpki-client