Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          F6ofMtbleKlZ6den7+klFdlOeWju/E7k0z5qENPGk74=
Subject key identifier:   2F:4E:52:0B:96:8D:08:84:46:CA:AF:55:E5:7A:D0:CC:FB:32:43:15
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       1121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1D80
Signing time:             Fri 30 May 2025 17:27:07 +0000
Manifest this update:     Fri 30 May 2025 17:27:07 +0000
Manifest next update:     Fri 06 Jun 2025 17:27:07 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: URubmlOZu5EfKV1eF78dxYSJTTX6egVaQ1kgvHhofjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4385 (0x1121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: May 30 17:27:07 2025 GMT
            Not After : Jun  6 17:27:07 2025 GMT
        Subject: CN=6839ea6b-128d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:73:0d:79:a7:33:2e:b7:cb:81:32:d3:28:
                    f5:55:99:60:ee:41:b1:d2:ae:00:56:fc:0f:ec:4d:
                    f1:c8:f7:b3:1a:c2:67:54:18:96:60:30:06:0d:98:
                    de:a0:f2:a0:8c:21:44:42:01:36:91:01:02:0a:0d:
                    85:53:8b:cc:a4:a1:49:5e:62:5c:6b:c3:c5:2a:73:
                    a1:97:b3:24:62:ed:60:68:ff:47:d4:e6:57:ed:74:
                    b1:cb:ad:eb:64:fb:e6:25:3a:31:00:14:18:2f:0b:
                    a4:e8:10:f0:a1:e9:f5:43:71:78:dd:ce:b8:df:fb:
                    07:62:b2:5c:7b:3e:49:97:20:e1:5e:6b:21:41:9c:
                    c0:d6:8f:cf:c9:55:2f:a7:64:c9:46:07:7b:3f:f6:
                    b9:c4:39:a9:e7:ca:ed:4f:ae:0c:ac:29:b4:34:d2:
                    c8:b7:4b:08:96:d8:dc:ca:3e:88:e3:a4:6a:f5:24:
                    e7:f0:f7:2c:2e:99:4e:11:25:ab:aa:ef:4b:76:85:
                    f6:f4:85:d4:d1:f7:e5:fe:0c:9a:72:c7:42:7c:44:
                    62:3c:5c:04:47:f3:c0:5f:67:79:db:45:e1:71:a1:
                    34:5b:f2:df:69:8c:d7:ed:d8:47:8a:8e:21:8d:bd:
                    08:47:72:89:78:97:bd:5b:12:39:be:a3:c9:8c:c1:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4E:52:0B:96:8D:08:84:46:CA:AF:55:E5:7A:D0:CC:FB:32:43:15
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:c4:0c:84:39:af:8b:33:29:91:f0:17:e5:3d:1b:eb:02:
         50:b2:d2:42:28:82:f7:13:23:a8:99:b5:ea:b9:cd:da:26:1e:
         57:c7:3b:19:c8:9a:02:1f:a7:0c:9f:1d:e8:c8:c9:e2:3a:a5:
         e0:a2:41:3c:b8:d5:fe:46:a0:87:26:22:c5:fd:af:8e:0c:e5:
         bd:cb:ff:9e:51:38:f0:2a:ce:ed:82:59:08:54:11:1d:3d:29:
         c6:74:cd:6e:ac:4d:80:81:08:98:e6:80:2e:35:f6:14:9e:a1:
         e5:ee:04:02:9b:9c:96:d5:53:bc:ad:68:16:a8:86:02:41:57:
         1e:3d:dd:ee:cc:2b:21:0e:33:e0:34:01:05:3e:15:1d:f4:0d:
         9f:d3:d9:fd:45:49:b0:51:d4:52:c1:e0:b0:1c:9c:11:00:62:
         88:78:0c:1c:ea:9a:7b:32:af:80:02:c4:86:a2:b3:12:7c:1e:
         6a:2e:ef:af:32:d9:15:04:1a:c0:f0:ce:7d:8d:e6:5e:00:4f:
         cd:7b:77:e4:3e:75:2a:c5:0d:26:c0:47:31:c2:02:7f:70:e2:
         21:d8:d6:79:d1:df:8e:72:6f:f9:cc:db:f7:26:f0:67:f0:fb:
         11:73:4c:c3:01:8d:ff:03:15:e9:97:05:a5:39:fa:93:1c:0c:
         1c:e7:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:22:03 2025 by rpki-client