Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
File:                     a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json)
Hash identifier:          Ph3q1SPAoOif8yH46RgW2P/dtiw7IOpSvoLgN3xGdoY=
Subject key identifier:   87:E9:32:B7:6C:DC:14:A8:F6:D8:F3:61:16:7C:CF:2D:37:8F:E8:41
Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F
Certificate issuer:       /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
Certificate serial:       07BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
Manifest number:          07B7
Signing time:             Fri 30 May 2025 21:24:22 +0000
Manifest this update:     Fri 30 May 2025 21:24:22 +0000
Manifest next update:     Fri 06 Jun 2025 21:24:22 +0000
Files and hashes:         1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: ugEzgWKtLRKZEsfd96Jz58ryuYY04uptT0ccTWG1q+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
        Validity
            Not Before: May 30 21:24:22 2025 GMT
            Not After : Jun  6 21:24:22 2025 GMT
        Subject: CN=683a2206-3029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:81:40:07:f1:ad:37:8d:d0:69:4d:4b:dc:
                    03:af:11:a1:e7:ac:2d:d9:86:e5:cd:17:5f:a6:3d:
                    dc:78:9d:5b:84:ad:b1:31:91:ec:a4:e1:b3:86:d3:
                    de:4c:eb:28:1f:0c:d5:a3:41:c1:34:00:b5:64:93:
                    07:72:c3:a3:ff:f5:2a:ed:31:be:fb:a8:fa:5d:0e:
                    c9:03:27:27:4c:e9:fd:21:b9:65:2d:e1:fd:cd:c2:
                    f5:3e:b1:86:73:b6:d1:30:69:69:a7:fd:66:75:16:
                    af:a1:79:31:1a:4a:3a:c8:21:90:32:a6:ef:96:21:
                    f5:31:fe:d7:f3:7e:6d:d1:6a:c6:f9:2c:b3:23:72:
                    ec:b2:24:c7:be:ba:f9:1e:b3:c1:41:84:ec:73:54:
                    e1:da:04:06:36:e3:6f:8c:14:f1:b0:4d:3b:ae:52:
                    ee:a4:e3:79:ab:08:08:c2:7a:93:ad:67:c7:8e:de:
                    cc:c4:62:39:75:f4:ae:4e:a4:50:c6:1c:49:75:61:
                    bf:cb:04:4e:c5:30:ed:11:74:ba:9a:04:97:b6:90:
                    a6:2f:02:e9:dd:ea:34:f7:ce:f6:e8:04:c9:50:72:
                    d7:8c:ce:28:ab:05:61:c3:a7:a1:c0:82:26:2c:cc:
                    fe:84:91:29:3f:7c:7f:3a:c6:51:0e:84:27:3b:5b:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:32:B7:6C:DC:14:A8:F6:D8:F3:61:16:7C:CF:2D:37:8F:E8:41
            X509v3 Authority Key Identifier:
                keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:be:8a:50:27:11:1e:3f:be:ec:80:b9:c6:25:62:8a:db:
         73:9a:94:af:3f:45:ed:a1:40:e2:27:c9:03:e3:43:ab:f7:cf:
         65:57:13:e7:a2:1f:b9:a2:2f:8f:dc:31:3b:49:cc:74:a4:ad:
         30:9e:02:9f:b0:f6:5d:4e:18:15:67:04:5b:eb:a4:46:1a:15:
         24:3c:4e:de:56:e5:21:c1:47:eb:2c:81:1a:df:8c:22:09:de:
         b0:27:3a:6e:5b:41:5c:7c:58:1c:5c:e1:b0:91:b6:ae:9e:cd:
         6a:79:44:10:3f:e3:7d:cc:88:6d:6f:42:33:85:a0:2c:9a:69:
         09:79:cb:fe:02:f3:d1:6d:e2:48:88:c6:9b:0a:96:c9:94:6f:
         28:b5:09:ac:79:02:50:4e:7a:26:7b:9a:84:f5:54:ff:04:8b:
         da:55:31:5b:cd:34:83:cd:70:77:6b:1f:ca:50:3a:a3:d3:04:
         6b:cd:5c:48:9c:98:4c:d6:1c:ed:c6:a7:63:bd:33:24:95:7f:
         36:ae:26:47:28:36:e2:c2:5d:47:04:95:92:13:59:5a:97:fd:
         ea:bb:58:38:30:f2:ae:2d:46:0d:40:83:56:db:a9:02:d0:83:
         d0:8f:79:39:dd:b5:d2:a7:4f:90:c0:6f:99:66:2d:bf:49:af:
         63:da:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:26:50 2025 by rpki-client