Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File:                     C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier:          nu5e6SJDDIOMhmL6y4o3lnVqX/cVxrG0TrYJwweX69U=
Subject key identifier:   BD:26:B3:99:46:41:87:E5:A6:9B:B2:7B:02:63:EC:B0:33:48:22:CE
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer:       /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number:          5C
Signing time:             Thu 05 Jun 2025 06:31:59 +0000
Manifest this update:     Thu 05 Jun 2025 06:31:59 +0000
Manifest next update:     Thu 12 Jun 2025 06:31:59 +0000
Files and hashes:         1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: qpi4vWOuEb2IpB495+tF3RQViCPuOJBNHsJvy6eiYuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 06:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
        Validity
            Not Before: Jun  5 06:31:59 2025 GMT
            Not After : Jun 12 06:31:59 2025 GMT
        Subject: CN=684139df-6eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:43:21:9c:14:79:93:fb:87:ea:3d:79:1a:
                    d6:3c:17:0e:eb:19:78:36:42:a8:7b:2a:a4:e9:41:
                    17:14:57:df:78:8a:60:6d:db:af:df:44:c3:e5:c2:
                    de:9a:af:1e:c6:cd:19:4b:ac:a5:8b:af:50:c6:4d:
                    59:91:08:47:42:57:e1:22:87:bb:45:29:3d:67:96:
                    2b:38:63:86:63:20:8f:b5:f4:87:d4:49:be:55:0a:
                    e4:66:50:11:7b:f8:7a:53:ff:0d:d1:21:68:f5:76:
                    f3:f2:df:ef:eb:8d:4a:89:d6:a8:c0:75:38:f3:23:
                    fd:ac:54:54:73:6d:1d:ed:0c:8f:d8:68:48:50:9c:
                    a8:92:f9:06:e6:fe:16:d4:de:bc:47:31:9c:b1:13:
                    f7:cd:46:82:af:07:e3:79:4a:f5:a2:8e:09:94:49:
                    4b:0c:55:b4:2f:35:b1:ae:23:49:c3:58:84:c1:a5:
                    e7:65:0c:1b:df:99:b4:ee:bf:bb:5f:57:0e:76:4c:
                    19:d9:77:d4:6c:99:3b:f2:3b:ec:bb:35:a6:28:e9:
                    59:8d:14:80:db:14:57:e5:95:bb:90:03:b2:73:99:
                    62:7b:0e:d1:3c:36:78:bb:1f:15:32:47:18:30:f9:
                    a6:ab:b2:2d:c8:40:89:ab:ee:73:ec:be:e9:a5:94:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:B3:99:46:41:87:E5:A6:9B:B2:7B:02:63:EC:B0:33:48:22:CE
            X509v3 Authority Key Identifier:
                keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9b:f2:bb:f1:97:a1:d1:15:ff:73:73:ab:17:ec:f1:61:94:
         79:74:4c:23:29:fc:6f:ea:3f:14:94:9d:13:75:66:ab:82:c7:
         9b:d9:6e:d1:92:d0:bf:44:73:19:a4:af:f4:2f:b5:9b:ea:f6:
         1d:cf:64:85:22:b1:90:46:29:de:32:a6:42:09:1e:17:9f:e0:
         13:97:3b:ba:d4:b8:20:2e:87:bc:66:9c:bf:54:dc:8f:eb:5c:
         e2:5b:8e:45:73:4e:80:7d:e3:38:7d:b6:5a:3c:eb:a6:94:43:
         12:72:d7:e5:da:f0:dc:fe:d0:0f:77:0b:a5:42:a4:f1:67:3a:
         3b:b5:55:6f:9c:41:f3:99:02:d4:23:1b:0a:23:3d:d2:5f:64:
         3d:32:e2:c7:ad:65:7b:19:43:91:be:45:6e:1e:8b:5a:2c:e3:
         46:5f:8d:bb:47:a2:93:65:33:54:5e:56:e1:2f:c3:75:33:bb:
         28:d8:2d:a9:5f:06:25:26:38:a6:25:5e:14:ea:a2:15:37:b3:
         27:f2:ba:4d:e2:fc:1d:10:82:eb:d7:b5:9a:2e:be:2d:5e:c4:
         6b:a2:73:9a:f3:ac:5d:c9:0e:81:b8:0e:41:2c:dc:f1:74:02:
         51:61:35:e2:51:84:b1:28:cc:12:a9:ac:e0:fe:1d:3e:15:8f:
         10:50:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:20:50 2025 by rpki-client