Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File:                     uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier:          d0dBL9sJMwaxmWUsr9PmeBed4v1ogPs2YLWlbDsPsCM=
Subject key identifier:   04:F0:92:98:13:67:A4:F5:C6:71:2D:24:D0:86:01:0F:12:0E:42:19
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer:       /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial:       0769
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number:          0ED1
Signing time:             Sat 31 May 2025 21:35:45 +0000
Manifest this update:     Sat 31 May 2025 21:35:45 +0000
Manifest next update:     Sat 07 Jun 2025 21:35:45 +0000
Files and hashes:         1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: tUAt4WrJ6vrNBKNeLuUOvQxY/TZxxWPzkVxZ+LiNY9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
        Validity
            Not Before: May 31 21:35:45 2025 GMT
            Not After : Jun  7 21:35:45 2025 GMT
        Subject: CN=683b7631-6faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:be:43:56:16:b5:e0:19:b5:e7:b7:29:79:
                    fb:d8:23:e5:f7:10:a1:98:40:a6:de:90:1c:b7:63:
                    78:95:a9:ff:2c:05:cf:ff:61:9f:c9:fd:48:d5:f2:
                    3a:b9:b3:15:91:4b:e5:44:75:00:e9:7c:cf:1e:b6:
                    16:04:74:bf:36:fb:d3:ed:61:d8:05:28:18:48:7b:
                    37:aa:6d:30:76:1f:22:19:e1:1f:64:e2:9c:60:cd:
                    76:5a:95:fb:ea:84:06:8d:e3:f3:39:41:a1:ad:9e:
                    88:0b:da:e3:9c:b3:4d:5a:94:da:46:2b:17:a0:2e:
                    dc:68:66:5c:d9:75:93:0e:ef:1e:70:ab:83:00:24:
                    f6:81:b9:d9:e4:f8:9d:79:8c:e3:a8:de:5a:83:be:
                    4c:86:a6:73:c7:0f:b3:32:df:80:12:d6:f3:5f:e4:
                    4f:fb:bb:e0:7f:b7:ad:81:85:ee:fa:88:c8:6d:30:
                    0e:9c:3e:e6:27:d9:91:3d:0a:cc:c0:bd:ad:47:20:
                    a0:c4:1c:c2:65:f4:56:6b:57:30:16:20:47:2d:99:
                    2a:d3:b1:58:5c:e8:ae:b4:47:ae:d4:72:6a:8e:18:
                    cd:f7:83:b3:95:1e:71:c1:d5:79:a9:29:a8:a4:d5:
                    cc:e6:0e:d2:36:26:be:bd:d1:9e:e5:a4:40:e8:e5:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:92:98:13:67:A4:F5:C6:71:2D:24:D0:86:01:0F:12:0E:42:19
            X509v3 Authority Key Identifier:
                keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:51:1f:ff:76:47:b1:5e:46:c2:c8:b6:cf:8e:84:46:44:
         a7:a0:64:a8:84:44:ba:2e:9e:38:9b:02:dd:4a:c5:b3:ea:2b:
         2d:70:08:3b:da:9d:da:88:a1:52:a9:2d:fa:b4:ab:3e:2e:ba:
         72:55:06:29:d9:d3:1c:35:f4:cb:78:b9:60:11:c7:bd:c4:df:
         66:29:c6:16:f2:b5:0e:e0:c8:20:57:e3:0c:10:17:8c:06:fc:
         fc:aa:9b:1a:fc:b2:20:93:56:cc:26:f9:5d:e1:09:14:03:f8:
         1c:a3:6a:46:9e:a7:87:e5:d6:1c:2f:dd:f2:9a:18:a7:46:e9:
         69:6f:0c:1d:f9:3f:71:0a:66:47:3e:11:6c:01:9b:e3:81:5a:
         b0:c4:07:73:16:03:72:82:98:36:29:05:db:5d:2c:52:53:af:
         32:31:cd:65:d0:6e:4d:ad:7d:b2:99:4d:4b:b3:9f:f8:6a:22:
         7e:9c:99:02:ae:fe:9f:af:f1:c6:cd:75:b2:a1:22:24:fb:34:
         e9:95:98:9d:99:b8:a4:d4:79:e8:90:2f:eb:d2:a8:78:47:42:
         1e:de:64:23:0e:e4:2f:2e:27:e9:71:d7:f7:88:c7:71:6a:3b:
         42:9c:a7:1f:15:53:71:f3:80:be:49:96:21:1c:f4:c7:0a:86:
         47:0e:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:09:53 2025 by rpki-client