Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          C7/g2wRCGizekbCo8pG89gLMDKalgBFQonYjUNt2GUk=
Subject key identifier:   C7:6F:5F:8A:60:9D:F2:5C:7C:3E:3D:73:DA:23:9F:67:D8:32:D4:7F
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          0238
Signing time:             Mon 09 Jun 2025 01:27:39 +0000
Manifest this update:     Mon 09 Jun 2025 01:27:38 +0000
Manifest next update:     Mon 16 Jun 2025 01:27:38 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: u9oMYaeun40iM1X2NDltg6YywQFTvo7ja3bYTJztYmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 01:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Jun  9 01:27:38 2025 GMT
            Not After : Jun 16 01:27:38 2025 GMT
        Subject: CN=6846388b-b65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b5:fc:45:43:69:31:9c:ca:53:71:23:6c:5e:
                    1a:68:62:21:98:32:0b:c9:2e:77:ef:19:fb:60:30:
                    60:a0:8d:db:e2:e5:2e:c8:35:c8:a4:97:3b:fe:6b:
                    19:68:62:9b:43:7a:3a:17:e9:f0:94:2f:92:6f:9c:
                    a3:8b:3a:4f:ac:7e:ce:08:d4:34:1a:0a:06:b3:a5:
                    2b:4a:59:d2:e4:11:18:b6:98:f2:73:d8:97:78:b8:
                    1c:e6:21:1b:40:62:a2:5e:0a:d1:2e:0a:02:20:09:
                    57:a3:40:20:0e:7e:f1:c1:73:d4:fa:73:7b:44:38:
                    bc:64:be:d9:57:da:03:ce:2a:57:4b:e5:43:d6:60:
                    9c:fa:a5:b3:1e:31:d9:3c:b8:50:9e:7c:1b:3e:2f:
                    99:7b:69:b5:46:a6:ab:3b:46:96:64:b4:ae:8b:7a:
                    b3:0b:67:4b:4d:08:cf:89:43:e7:79:cb:f5:a0:a3:
                    a2:96:d5:8f:62:a1:79:34:7b:c0:22:ff:7b:37:3a:
                    8b:c5:c6:89:b2:d7:42:af:1c:bc:a3:26:b5:ef:7b:
                    f8:2c:c8:34:3d:5d:03:c6:bd:f2:ad:83:e9:e0:4d:
                    64:84:4e:e9:fb:f6:b3:14:52:68:b3:fb:26:d3:ba:
                    b0:e5:98:94:bd:92:75:a9:40:c5:ec:a2:34:2b:3c:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:5F:8A:60:9D:F2:5C:7C:3E:3D:73:DA:23:9F:67:D8:32:D4:7F
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:24:2d:52:b0:3c:b8:9a:ab:6b:db:60:0b:29:75:20:eb:
         0d:f2:a4:41:ed:62:9b:db:f2:6e:3d:75:fb:8d:a2:94:f3:70:
         61:58:9a:82:a4:f9:c3:98:e4:27:6d:e4:28:05:0c:2f:87:4c:
         32:1d:f5:6a:42:b5:86:d1:db:0e:a4:f8:98:d7:c5:7f:3d:63:
         51:cd:b8:12:2f:c4:53:d4:93:68:94:03:e7:8e:39:62:e6:e0:
         f1:00:e5:84:fe:75:e5:f0:9a:05:93:a3:39:ff:9f:f5:8b:af:
         71:c6:4e:1c:a7:14:01:77:f7:29:d9:bb:16:31:1a:9f:c8:a3:
         2b:39:ee:2b:29:e8:80:cd:d9:ac:e9:a5:aa:26:76:6f:36:3d:
         5f:c8:29:79:4c:80:72:61:33:ab:e0:71:1a:a1:c9:fa:3b:94:
         cc:5d:3d:8a:1a:ec:05:62:5a:12:ce:82:a8:bd:06:4e:95:41:
         6a:16:b5:a3:c1:fd:16:e1:76:f4:cb:73:47:69:0e:d6:e8:d5:
         b7:81:bc:ea:f2:5d:34:4d:dc:5e:3a:6b:94:94:26:6b:87:6c:
         11:3f:ce:cb:c7:e3:3c:99:70:e7:a5:c2:09:2e:53:b4:cb:94:
         28:44:98:d7:60:9c:f9:6f:f8:4b:bb:1a:ad:e0:96:0b:94:98:
         7a:4b:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:33:15 2025 by rpki-client