Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
File:                     E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json)
Hash identifier:          wM9HBj0MQkgwrbO+6YMvjOFtV1MSa0o+YrdwpaL8Wqk=
Subject key identifier:   AB:CA:97:73:C5:C8:84:27:6A:C6:48:48:53:0E:8C:0F:F8:E3:F8:A6
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
Manifest number:          0932
Signing time:             Fri 30 May 2025 21:02:00 +0000
Manifest this update:     Fri 30 May 2025 21:02:00 +0000
Manifest next update:     Fri 06 Jun 2025 21:02:00 +0000
Files and hashes:         1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: zFm4xGtmI0N/KDS4ZBTkObjx+hrlMdKntVxmdUagHCA=)
                          2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: rmBjNT0g6o5OQJ7VMnQunSAodjeObi4QujloW5TWZhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: May 30 21:02:00 2025 GMT
            Not After : Jun  6 21:02:00 2025 GMT
        Subject: CN=683a1cc8-9547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:ca:0f:5f:bd:00:7b:78:c5:16:b3:33:95:
                    23:40:dd:ff:b0:76:52:a0:2b:25:4f:32:53:e7:b2:
                    46:96:dd:67:03:be:10:bf:4a:4f:a4:b6:be:a2:53:
                    95:35:5d:06:d6:4f:c5:59:69:ac:46:bb:5e:a0:92:
                    eb:b2:f3:65:c1:b7:fa:dd:16:64:30:16:b9:59:eb:
                    59:4c:ad:fe:77:c4:65:c2:5e:5a:54:cf:01:a3:f0:
                    fc:1a:0d:02:fb:eb:0a:8f:3d:06:cd:73:b6:a7:ce:
                    52:55:4b:00:5f:29:d1:bf:e1:30:9c:03:46:b4:41:
                    81:67:8f:5e:ec:ec:fb:54:40:c8:b3:de:20:22:14:
                    8c:28:42:72:b8:9b:bd:8c:65:18:4b:70:4e:e4:0d:
                    f5:5d:65:1d:44:43:b3:2c:32:0f:6f:2d:62:7d:df:
                    11:87:55:13:38:9c:49:5a:73:7a:76:7c:b4:f3:ed:
                    bc:58:2a:7a:73:3b:d4:34:db:12:53:70:68:09:a1:
                    0e:78:99:64:62:8d:90:75:58:28:52:af:a5:f2:ee:
                    0c:d6:c2:3e:66:3a:fc:0d:63:ad:7b:fd:63:3b:bc:
                    c2:ab:41:e8:88:b1:63:a2:76:78:91:06:8c:f7:a7:
                    ba:a1:e8:90:aa:74:e9:f2:a9:f9:ce:48:fe:ab:5e:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:97:73:C5:C8:84:27:6A:C6:48:48:53:0E:8C:0F:F8:E3:F8:A6
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:99:be:d1:09:36:0c:87:97:88:92:5b:85:a4:7a:4d:1e:c1:
         fa:b2:eb:e7:46:20:35:f1:4d:ea:c6:c8:08:66:b8:9b:ee:d1:
         0b:be:b8:01:31:5c:39:9b:6c:aa:da:85:84:6a:bd:1f:cb:39:
         9c:12:af:a8:c2:75:3a:14:df:b9:46:65:1b:3e:7d:b5:c2:9d:
         ec:ac:aa:bb:ef:fc:54:3b:7f:54:ab:f4:38:50:33:4e:5e:29:
         17:1f:ab:6c:21:47:33:97:53:be:46:3f:3d:cc:fb:59:5f:53:
         c9:dd:7f:f4:b9:b9:3a:f9:cd:39:8c:95:3e:1a:4f:18:66:81:
         22:a2:09:6f:2d:cd:4c:0f:18:1e:3b:59:ff:85:18:92:db:c4:
         85:c4:8b:79:7e:fc:9a:b4:5f:34:f2:f1:54:e0:2c:12:e6:c9:
         81:ba:60:e6:5f:48:49:99:35:56:7c:dc:f9:f3:b0:b0:5d:3d:
         2b:98:e3:46:ef:42:91:db:c1:62:60:cb:40:42:78:5b:de:5e:
         38:23:c5:8a:65:f1:90:b9:9d:45:39:64:55:3f:d4:e8:82:f0:
         44:33:3c:f6:ab:93:98:09:3f:6e:85:4d:65:80:12:82:59:7a:
         29:1b:a8:56:0a:c4:e1:15:56:82:d9:5b:a3:5a:b0:42:10:5c:
         56:0b:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:27:51 2025 by rpki-client