Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
File:                     ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json)
Hash identifier:          cZVm26FNgZAPowromn1T+21BlsXENq+5uXOuKafcjfM=
Subject key identifier:   16:26:8C:4D:B6:97:DF:87:25:AC:F7:5A:FE:59:2F:A3:8E:63:FC:D1
Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90
Certificate issuer:       /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
Certificate serial:       09F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
Manifest number:          1116
Signing time:             Sun 04 May 2025 19:39:07 +0000
Manifest this update:     Sun 04 May 2025 19:39:07 +0000
Manifest next update:     Sun 11 May 2025 19:39:07 +0000
Files and hashes:         1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: WFlBXL23ae6BQFkC5VyGMpFUxP6EgcC/6u8DVJfOxKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
        Validity
            Not Before: May  4 19:39:07 2025 GMT
            Not After : May 11 19:39:07 2025 GMT
        Subject: CN=6817c25b-d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:c6:f7:b3:90:1e:af:72:a8:1b:99:f9:0b:
                    1d:9c:0d:60:80:cf:4a:ac:60:1d:ea:4e:90:1f:47:
                    51:7a:f0:07:1a:65:e8:c7:6e:ac:67:e8:3a:2a:47:
                    f8:67:6a:3c:7f:cd:9e:55:81:4b:c2:6a:3e:87:d9:
                    f6:19:a2:7b:60:32:20:f5:15:3b:79:be:34:88:c8:
                    a5:54:79:b3:32:e1:88:6c:9a:22:65:2d:23:23:28:
                    bf:ba:1d:98:17:dd:75:77:d3:7f:93:17:b6:49:91:
                    fa:6e:cc:7d:23:79:98:ea:92:4a:5a:8b:d3:b9:9b:
                    75:7c:64:28:6a:e3:0f:a4:12:86:d1:db:8a:25:a3:
                    51:ec:f2:53:e5:32:d0:27:41:42:22:87:f5:a6:ee:
                    8a:b8:a4:78:2d:bc:7d:c7:1f:2b:82:67:11:ed:cb:
                    45:24:06:f9:35:28:ce:30:29:f8:23:c7:61:cc:ae:
                    0a:7f:b2:0c:f1:f6:0b:4e:48:fd:a4:a1:8d:57:47:
                    19:b2:d2:76:db:a7:8a:6a:a4:93:00:a7:46:f8:5c:
                    bf:a6:eb:8c:e5:f0:f1:a8:43:fc:c2:ec:7d:a5:c2:
                    c9:77:b3:c8:4c:45:d1:4d:87:d6:30:fa:7c:52:f3:
                    0d:42:b5:c3:4c:d6:10:ee:eb:cc:df:fe:3b:78:18:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:8C:4D:B6:97:DF:87:25:AC:F7:5A:FE:59:2F:A3:8E:63:FC:D1
            X509v3 Authority Key Identifier:
                keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:bb:bc:75:50:29:33:c7:f3:c8:7c:59:50:df:59:64:c3:
         c5:9b:01:d1:99:de:da:bc:c9:8a:58:59:c7:a2:a0:a0:12:9d:
         ac:8d:fa:03:27:62:b8:76:ef:bb:ff:48:09:6e:92:5a:76:e3:
         05:fc:5c:19:1b:8f:50:d2:e9:c6:4b:03:45:72:a8:f6:a8:3e:
         5a:a4:dd:6c:06:5a:7d:f8:59:e8:95:47:24:e2:0e:37:53:e9:
         4f:e2:9c:44:10:88:bd:2c:ff:51:db:91:ca:23:0a:41:99:3a:
         f8:2e:63:97:9f:32:2c:36:d5:2e:3e:85:bd:3e:f0:04:9f:b9:
         74:b6:fa:4f:c1:76:54:5d:c8:12:f3:5f:9e:1a:55:24:24:22:
         9d:82:6d:05:13:e3:50:3d:1d:04:8d:98:92:74:64:39:7a:78:
         a3:3f:e9:0c:19:e6:40:73:92:05:ca:cb:99:27:ed:0f:5e:31:
         a7:cf:54:df:48:17:81:55:25:69:e6:5c:cd:1d:5a:ba:4b:e8:
         e6:06:14:41:85:2c:f6:40:16:74:04:5f:aa:52:28:aa:7e:56:
         89:70:43:da:28:72:1c:57:d7:c8:fa:7e:19:1d:17:aa:e5:7e:
         64:1f:25:7a:58:72:af:db:ad:39:f6:a7:f2:b0:c0:df:8d:3d:
         f7:76:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:54:13 2025 by rpki-client