Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          PjeaPdHDsk0kcSkQ+Xqndww0tDM+iP1290P+VY2W7+0=
Subject key identifier:   93:C9:19:FD:49:EC:BD:C0:86:BC:DF:75:10:65:0E:77:E6:DD:B2:F2
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       3498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          3498
Signing time:             Wed 02 Jul 2025 15:05:32 +0000
Manifest this update:     Wed 02 Jul 2025 15:05:32 +0000
Manifest next update:     Wed 09 Jul 2025 15:05:32 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: LgcZ3y17iFgtgGYFwBs1iJK2l+BFsgrWLMU5MWrcj4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13464 (0x3498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Jul  2 15:05:32 2025 GMT
            Not After : Jul  9 15:05:32 2025 GMT
        Subject: CN=68654abc-3aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:8a:b5:90:61:73:65:9f:f7:4e:6f:5f:f5:
                    4d:25:36:98:11:fd:d9:d4:34:2e:18:d5:e9:1e:ab:
                    ad:c6:3a:7b:72:df:5f:81:c2:80:3e:03:8d:2e:f4:
                    a1:8a:1e:78:ce:76:6f:1a:ca:81:d9:52:a2:f3:56:
                    c2:2f:a4:60:20:78:24:0d:d3:1f:ac:01:30:fb:f3:
                    90:b5:a0:10:17:38:0a:b8:65:e6:a0:c0:f7:43:6b:
                    54:1e:32:54:f1:2b:0c:19:d2:94:a0:64:be:97:01:
                    26:cd:5e:04:68:89:f4:a8:a9:c6:bc:bd:14:4f:13:
                    3f:05:79:e8:55:e9:c8:d1:96:1f:32:e4:73:4b:c2:
                    9b:8f:2e:3b:bc:91:b0:3e:da:80:ca:92:7e:04:27:
                    05:3c:41:2f:4a:48:52:6f:6a:41:0e:6e:85:d5:41:
                    c3:39:5a:a7:ff:14:ca:e0:42:b2:20:a0:2d:92:36:
                    39:b8:3f:28:69:1a:07:21:ab:3b:bd:7e:fd:5e:af:
                    66:12:cd:2c:bf:74:45:4c:70:e0:8f:c4:2c:3f:ae:
                    c0:e4:df:f7:59:e6:a9:60:28:2e:c3:fc:b8:8c:62:
                    57:cc:74:de:33:81:53:55:21:0c:f6:63:66:ec:8b:
                    29:a4:5e:17:77:9d:9a:4e:8d:21:8e:13:4d:14:16:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C9:19:FD:49:EC:BD:C0:86:BC:DF:75:10:65:0E:77:E6:DD:B2:F2
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4b:fd:52:b6:b7:f0:49:02:6b:08:c6:24:6c:05:1b:d6:8c:
         5d:e9:7f:15:f5:71:0c:52:ec:14:df:c7:71:66:37:57:73:62:
         c9:59:7e:0d:00:f8:f1:f8:51:36:5a:16:47:2b:1b:15:d1:d0:
         07:45:28:85:43:1f:b8:be:8d:59:b8:03:19:09:07:5a:72:fa:
         98:b9:b3:8e:03:42:bb:64:e7:73:a1:f0:78:3a:a5:5a:58:98:
         ce:07:de:17:31:fa:ae:1f:e7:cf:e3:52:8a:aa:13:1e:75:0e:
         1f:e1:69:84:4e:a4:c5:85:fc:a4:87:55:9b:f0:bb:ba:bb:2c:
         74:9d:9b:75:40:62:cb:c4:be:a4:b3:3d:ee:47:25:a0:52:34:
         25:7d:51:37:f4:b7:25:43:b3:a5:ff:40:c5:b4:fe:42:25:11:
         0a:ba:d0:27:1e:38:ef:4b:d2:62:0b:1e:57:80:b7:9d:39:43:
         85:9a:e5:e8:c2:ac:69:f4:ee:d4:c4:22:fa:a9:e2:f7:bd:f1:
         73:93:af:a3:ae:07:16:a3:d1:80:d0:eb:f0:f5:c4:72:ce:cd:
         49:46:7e:2e:6b:d1:87:2e:cb:50:b5:ee:59:62:e7:65:54:42:
         2f:a7:3e:5e:ac:85:33:7a:55:1f:86:bb:c8:60:87:18:e7:5e:
         90:33:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:52:18 2025 by rpki-client