Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          csi8CRInGU9dOeli4kWB8Vf8P7Z1NcoOpL0C60RBfVo=
Subject key identifier:   AB:86:10:8A:B6:71:BE:A5:7E:C0:69:91:83:70:D3:72:B0:61:78:99
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          71
Signing time:             Sat 31 May 2025 06:25:34 +0000
Manifest this update:     Sat 31 May 2025 06:25:34 +0000
Manifest next update:     Sat 07 Jun 2025 06:25:34 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: kYF2SkqHRqCf5uywNsEDCN+VwV1jd4rOcCVl6qJNB4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
        Validity
            Not Before: May 31 06:25:34 2025 GMT
            Not After : Jun  7 06:25:34 2025 GMT
        Subject: CN=683aa0de-6dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:30:c2:2b:de:f3:a8:2a:5a:4f:56:37:dd:
                    31:15:4e:ac:d9:ea:50:6f:db:6c:d2:75:90:22:f1:
                    f3:08:33:ed:7a:94:c9:66:cb:72:bb:24:36:1f:4c:
                    07:2e:0e:97:48:25:cd:09:a7:79:99:1b:cc:17:0b:
                    cc:d3:25:57:41:94:42:ba:b7:58:bd:3a:1f:67:58:
                    00:9a:7a:67:11:97:34:e6:0e:ad:12:2e:e6:60:b7:
                    3d:4b:ed:a0:c0:2a:98:65:74:ca:64:08:ac:ab:e4:
                    12:57:4c:78:49:80:9e:c5:6b:2f:cf:38:ee:20:0d:
                    7c:79:a6:8b:a6:70:be:a5:50:79:37:56:65:b3:49:
                    2a:c4:2b:60:c2:b3:5c:5a:fa:41:2a:6c:1f:6a:15:
                    54:a7:7c:1a:90:5c:26:93:2e:8b:9e:cb:dd:8b:67:
                    22:81:6f:80:57:a8:df:5d:06:d2:dd:6b:10:35:6b:
                    e1:6e:f3:b7:eb:de:a3:e2:13:65:fa:4f:1c:57:72:
                    55:8c:49:37:0d:30:e7:c5:46:e2:3b:7f:ca:15:e4:
                    3d:5a:20:ee:fa:2a:62:96:c6:b9:a2:ac:25:ac:65:
                    77:c9:41:f9:d4:73:a8:42:0f:b4:9d:ed:69:3e:9a:
                    bc:2f:3c:a8:32:a3:99:fd:20:6d:11:07:5a:85:d5:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:10:8A:B6:71:BE:A5:7E:C0:69:91:83:70:D3:72:B0:61:78:99
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:92:31:2a:09:7f:dd:46:b9:61:ec:77:11:66:92:c4:52:0d:
         94:c0:76:fa:96:93:62:be:e0:78:d7:85:63:ae:55:08:f7:02:
         22:c5:41:73:8a:22:f3:8b:63:2a:83:69:88:28:57:2f:08:ea:
         c6:6a:8e:31:56:15:18:55:3d:2d:ad:2e:db:f0:76:e3:cb:74:
         68:18:c0:16:f0:fb:73:d2:04:ad:d2:9a:54:ea:db:42:8a:03:
         92:21:9b:02:a3:0c:cd:7c:86:bb:a9:7e:2a:64:69:1d:eb:ff:
         8d:74:0f:db:ea:e0:58:c3:2d:51:b4:d9:b2:02:e1:e5:64:86:
         c0:63:72:5b:c9:f1:2f:fd:42:11:e5:73:7a:a8:3f:b2:2c:dc:
         94:cb:d5:29:61:07:89:34:a9:fc:14:37:b1:c1:01:8a:24:5e:
         a6:6e:76:59:7f:4a:a8:3e:59:6b:04:d6:fa:29:ce:b2:2c:b1:
         80:8b:3e:2e:05:13:98:6d:f5:fb:da:bd:41:4b:1d:67:29:28:
         ac:b1:9b:b3:b2:b9:f0:d1:ad:cb:29:44:c1:ec:5a:d7:b0:5c:
         d3:45:3b:61:e9:2f:3f:88:6c:0a:08:36:3e:ce:ba:67:ab:c6:
         41:2b:59:10:85:09:92:8e:e2:35:df:f6:7c:1e:62:42:47:73:
         11:37:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:46:52 2025 by rpki-client