Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
File:                     8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json)
Hash identifier:          +QssK4md30uZmT8kGUQVYqEF2Wyi235CAQ82mIbK7Cc=
Subject key identifier:   DF:FA:8A:FB:D1:2B:1A:86:F4:E9:A0:3D:43:20:D2:DD:AE:59:26:BE
Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89
Certificate issuer:       /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
Manifest number:          0495
Signing time:             Sun 08 Jun 2025 23:34:25 +0000
Manifest this update:     Sun 08 Jun 2025 23:34:24 +0000
Manifest next update:     Sun 15 Jun 2025 23:34:24 +0000
Files and hashes:         1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: LwLZOWGKyTNjNswCMxS/vkK3+fFBD9CoCGtpgBHe49Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl
                          rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 23:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
        Validity
            Not Before: Jun  8 23:34:24 2025 GMT
            Not After : Jun 15 23:34:24 2025 GMT
        Subject: CN=68461e00-49ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:57:b7:f7:74:96:c9:80:e8:08:5b:13:78:
                    f9:ed:75:79:32:1d:90:0c:e5:9d:25:28:c0:91:bb:
                    40:ec:b0:5f:ba:b9:67:ff:5e:b4:a7:44:80:7f:f3:
                    6a:11:bf:2a:9d:d9:b9:48:57:af:b4:3c:c0:cd:81:
                    0c:45:d3:00:8d:39:1f:55:8a:f2:b4:e0:31:4a:42:
                    2f:cc:2c:ac:3b:b6:df:33:61:14:90:bb:d5:a4:52:
                    28:b9:90:03:96:a8:34:84:b7:3f:59:f8:a9:68:04:
                    49:9c:fb:f0:5c:47:1c:64:73:fd:ae:a4:d7:d4:dc:
                    27:68:fa:9a:1a:a6:83:34:60:96:b1:d0:18:7a:df:
                    fc:83:a4:e4:22:00:31:09:56:4b:85:99:e6:4d:8e:
                    33:7e:e2:02:01:c1:7a:f5:4b:9d:e7:f2:e0:5e:aa:
                    67:88:98:aa:53:3d:89:1a:af:42:0b:b3:26:4c:b9:
                    47:2b:ec:08:2c:95:bb:d8:e6:a6:38:e1:c3:88:62:
                    61:ba:1b:70:d8:8d:fc:29:bf:8b:33:5c:19:a4:90:
                    9c:3f:7e:b0:2b:be:81:52:6c:22:d0:c2:fc:a1:7a:
                    c7:07:2f:a4:ac:2d:90:f2:3f:60:60:ba:f3:cc:a5:
                    0b:d7:14:07:b3:df:58:86:33:0b:b7:46:88:de:53:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:8A:FB:D1:2B:1A:86:F4:E9:A0:3D:43:20:D2:DD:AE:59:26:BE
            X509v3 Authority Key Identifier:
                keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:07:ea:c0:52:18:ac:a9:cb:60:be:e1:95:b7:e1:94:81:
         d0:af:cb:72:11:47:39:36:ac:2b:23:23:65:ae:80:76:ec:5f:
         ef:e0:56:87:72:6d:b1:78:30:de:45:1b:65:ec:a7:fc:f4:c5:
         fb:e5:9b:42:d4:e3:03:53:e9:da:2f:1d:f4:f1:00:19:c6:89:
         c2:7d:e6:eb:42:6f:8b:e8:85:91:e2:83:4a:b4:9c:07:6a:a2:
         ef:46:4d:2e:fc:8b:32:8f:24:17:88:bb:25:80:46:4f:a4:bd:
         60:36:5e:97:39:33:ab:2b:7e:7c:23:8e:f2:bb:bf:47:33:9b:
         76:bb:a4:33:dc:07:7c:55:8b:e8:e3:f8:e3:de:e3:c3:cc:e3:
         29:c6:98:28:f6:92:f6:1a:85:ef:1f:24:ee:da:df:06:83:00:
         63:60:23:71:c0:e2:e2:94:b3:c5:bc:ca:82:b7:e1:cd:74:3c:
         cb:36:1e:29:e4:11:41:4d:db:c9:a9:41:de:23:a6:93:81:25:
         e4:5d:6e:28:32:58:3c:34:15:f7:e3:fd:99:8f:d4:cb:7e:89:
         d4:2c:a7:0b:41:75:ce:bd:40:c7:4f:88:4d:75:c8:22:6c:0f:
         6b:23:1b:f3:fe:05:f2:1e:0a:26:ab:05:2a:41:94:e3:06:2e:
         c5:41:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:36:39 2025 by rpki-client