Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          tT/NjUf06Apg06NPO3r0WDdveCaZNAs6QkdgC+gOh+k=
Subject key identifier:   82:3F:DE:C0:64:F8:D7:23:B2:E0:FB:A0:B5:FE:BA:5A:75:B5:C5:F4
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          023A
Signing time:             Fri 13 Jun 2025 01:22:35 +0000
Manifest this update:     Fri 13 Jun 2025 01:22:35 +0000
Manifest next update:     Fri 20 Jun 2025 01:22:35 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: EfSrb1cHWysO/CfthJJDopXB4Q7m2BQj8ORkPPjz0rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Jun 13 01:22:35 2025 GMT
            Not After : Jun 20 01:22:35 2025 GMT
        Subject: CN=684b7d5b-09f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:f5:12:24:30:c1:32:fd:18:07:d5:33:3c:
                    a2:fb:21:0d:a7:b4:ee:50:fc:2c:29:d2:25:1b:cf:
                    ae:19:6a:be:b9:07:51:81:7b:15:31:63:f9:23:f0:
                    a2:76:f2:8b:3c:33:0e:b8:ce:8d:e3:8c:42:1c:ed:
                    e5:fb:32:cd:a6:45:aa:a7:bc:b6:c3:72:27:18:29:
                    e3:5d:b0:81:14:19:e2:d2:17:57:95:1a:aa:04:9d:
                    8e:61:6b:af:56:8b:83:6b:64:d5:b0:11:fb:15:b4:
                    95:56:98:97:49:12:27:9e:a9:63:1f:7a:e4:37:97:
                    89:08:30:5a:d6:7f:4a:e6:e7:ff:07:14:36:f7:22:
                    9a:d1:78:c2:af:c0:6b:8a:55:d8:fb:85:8e:25:02:
                    c3:2e:c4:e0:ad:28:b2:bf:e1:e8:c3:5e:9f:de:21:
                    f3:18:70:80:de:df:9b:10:6b:d0:50:68:da:0a:60:
                    52:89:4c:ef:15:d6:51:a3:c4:45:fa:e8:ca:f1:f6:
                    27:a2:81:e2:0b:8b:03:9f:44:1a:e5:07:92:50:2c:
                    10:f0:59:57:4c:54:e2:8d:2c:08:39:24:c2:a5:1d:
                    52:8a:46:88:80:42:ae:d7:84:d1:f7:e6:52:f5:0b:
                    e4:17:8d:58:70:80:eb:bd:8d:10:c0:4f:36:16:f1:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:DE:C0:64:F8:D7:23:B2:E0:FB:A0:B5:FE:BA:5A:75:B5:C5:F4
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:72:8c:f9:0c:63:f7:d7:24:c7:3c:7d:39:63:a4:35:73:ab:
         a4:2b:6a:cc:da:42:51:68:8d:5a:d7:08:b9:b8:4e:8b:f1:ce:
         29:38:c7:21:e7:5b:4d:5c:06:12:bb:6d:02:3f:09:a5:d5:27:
         70:c3:c5:5b:a9:07:b5:dd:04:bc:b9:91:78:af:1a:85:43:7b:
         e1:a6:18:e4:4f:41:f7:4c:91:4e:0b:57:5f:d5:a3:ff:2f:49:
         82:e6:91:16:53:fc:7c:20:47:09:b7:56:bf:b8:f6:ce:4b:6e:
         98:7f:e4:22:f1:b6:25:c3:42:0b:23:6c:f6:57:95:0b:c5:b3:
         b8:10:4a:a0:23:38:47:48:e3:40:1f:ec:8a:fc:41:85:94:2e:
         bd:b5:dc:da:fb:45:79:ae:c0:ea:54:64:11:ca:43:8f:60:ff:
         2d:bc:00:bf:cc:bf:4f:67:b9:39:57:c7:10:67:2e:dc:c2:61:
         16:0a:36:4b:07:af:87:ad:e4:62:14:c9:d4:69:b8:61:22:02:
         0a:40:8d:06:5f:a7:4b:4a:a6:1c:76:b6:98:61:0d:74:6e:d3:
         5c:7d:96:65:32:b2:d4:55:de:68:c1:1d:4e:c1:2d:11:5b:8e:
         2f:2c:98:23:88:50:ad:3a:78:aa:8c:7c:58:8a:90:b2:6a:cd:
         1a:e4:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:42:04 2025 by rpki-client