Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          HCGcq6J2Q2poD+QGV+ZausqEP1HZBRyyOahpJNMMxEQ=
Subject key identifier:   F3:6E:A0:70:F6:F2:12:1F:0B:99:96:AF:C5:02:F4:40:9E:83:12:E5
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0B27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0B21
Signing time:             Fri 30 May 2025 19:24:05 +0000
Manifest this update:     Fri 30 May 2025 19:24:05 +0000
Manifest next update:     Fri 06 Jun 2025 19:24:05 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: ut+GsFhFAsqmctZniJqc79TeQim7OU+W8WISUEyRg7E=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: dhmOvv7uMkUQoCzxXTfQXJHUTAQuNuYH/MTOVQ2M8Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2855 (0xb27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: May 30 19:24:05 2025 GMT
            Not After : Jun  6 19:24:05 2025 GMT
        Subject: CN=683a05d5-5752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:41:22:74:4e:a4:10:1c:65:5a:e7:7d:e2:
                    d3:e4:13:4b:85:97:8a:db:20:4e:df:c4:e6:e0:2e:
                    35:05:b8:88:a2:df:f9:77:77:7d:e1:ae:d1:3c:6f:
                    af:ad:c4:da:e8:1b:9b:bf:2a:09:84:01:4e:8c:ba:
                    be:84:ba:5d:9e:00:1a:99:00:5b:05:ef:f1:d2:c0:
                    32:ec:b9:a8:ca:57:a5:9b:80:70:10:cc:93:17:4b:
                    c3:a8:32:a4:06:3a:ad:ca:73:69:b9:ac:3a:f2:db:
                    e6:07:12:6d:b8:a7:ac:dd:14:16:0c:9f:f0:00:52:
                    24:5f:be:83:63:d8:94:7b:58:4a:c5:e7:dc:68:19:
                    43:19:c7:5e:85:c9:49:9b:a4:1f:32:dd:4e:a0:c6:
                    50:05:bf:fd:6e:fe:45:a4:c1:8b:4b:89:ec:d9:83:
                    25:c4:de:81:77:bc:cd:92:26:a9:c2:5b:c3:99:05:
                    aa:e9:07:64:cf:14:28:f8:ba:d1:57:0c:4f:b0:09:
                    53:fb:9d:24:07:04:56:5a:05:5e:01:06:be:7a:89:
                    13:44:09:ca:61:aa:f8:dd:20:85:ed:a5:e7:4b:c8:
                    2c:58:83:b3:4c:57:01:22:48:69:7e:8c:43:a4:b2:
                    c0:dd:17:a4:63:af:30:6b:b8:47:bb:06:f2:ad:c4:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6E:A0:70:F6:F2:12:1F:0B:99:96:AF:C5:02:F4:40:9E:83:12:E5
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:be:8c:1b:cb:29:3d:96:c9:ef:0f:56:59:c1:8e:ca:c9:35:
         96:ae:0f:0b:1e:b3:01:25:5c:83:82:e2:0a:2f:3f:22:e6:41:
         c3:81:a0:29:09:27:12:9a:e8:f8:ba:64:8b:cf:dc:d1:ae:bf:
         8d:d2:c3:85:56:b5:e7:fc:2d:57:8d:59:70:08:d7:c2:cf:b2:
         aa:87:75:d0:41:91:79:47:49:81:c2:b3:34:34:69:ab:dc:e2:
         5d:43:15:46:b8:b4:f4:c1:7d:54:8c:5a:92:b4:ee:66:2b:10:
         b3:75:81:b7:3a:e7:b8:6d:16:75:cc:e2:f2:87:0c:fc:9a:07:
         aa:fc:12:d6:71:73:9a:ea:3b:70:99:15:e4:5c:5e:cc:2a:e8:
         8a:b8:b1:6f:05:c9:29:89:48:4f:95:f2:b6:75:f8:aa:fa:f0:
         74:49:e1:69:3e:9c:15:06:87:53:f7:13:03:f4:ef:af:cb:a6:
         6a:46:88:01:a3:d0:de:8c:dc:d4:72:f8:56:50:24:d8:83:d0:
         0b:1d:e4:40:65:42:c7:98:1e:73:33:3a:84:2f:74:cd:5d:f2:
         e0:3d:33:f8:d0:d2:00:2c:fb:e3:24:8b:0f:67:e2:8b:23:19:
         ed:46:1c:14:f0:ef:d1:d4:4c:f4:e7:89:0e:69:c5:04:47:77:
         1c:5c:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:14:36 2025 by rpki-client