Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          P6j5i/IX9BUc1XH2wmdiJKzNNPGFb1F+pUgDxypN7/0=
Subject key identifier:   5E:A8:F9:3F:3B:40:F8:AA:00:18:1B:2D:9D:31:EE:B4:9D:86:AB:5B
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       347B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          347B
Signing time:             Mon 12 May 2025 14:41:08 +0000
Manifest this update:     Mon 12 May 2025 14:41:07 +0000
Manifest next update:     Mon 19 May 2025 14:41:07 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: W82gtFEhUI2gWnOORr9Csh7KgS0b0J4Zzu++auzc71g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 14:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13435 (0x347b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: May 12 14:41:07 2025 GMT
            Not After : May 19 14:41:07 2025 GMT
        Subject: CN=68220884-2c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:c5:88:e9:80:da:5d:b1:23:1e:98:8a:98:
                    dd:5a:b1:c2:ed:13:1d:7c:e8:34:86:3e:f8:68:71:
                    3a:51:bb:24:a6:5b:99:cf:c2:a2:ec:75:18:ef:0a:
                    ac:e8:77:74:96:80:57:11:6d:77:44:82:7f:24:82:
                    f2:80:49:4f:cd:48:2e:22:9c:4e:5e:bd:a1:74:8f:
                    59:8a:31:5b:f5:58:02:da:d2:97:81:d2:a3:b6:7c:
                    1a:88:c6:ae:cf:5d:c2:e1:67:11:d2:bb:14:98:0f:
                    88:ae:34:4c:e3:ac:83:41:fb:32:e6:f3:f8:17:ee:
                    03:e2:07:99:5f:90:7b:d0:44:8c:ef:a1:9a:7e:22:
                    c8:c9:65:72:0b:4e:aa:70:fa:75:bd:26:24:7a:8b:
                    c2:32:9f:1c:03:3c:0c:2d:d4:8b:68:b7:ee:95:23:
                    dc:3a:61:be:c3:c0:88:66:8a:59:9a:34:6a:74:56:
                    11:a1:4c:6a:5c:89:96:5a:bd:61:7a:81:79:97:c7:
                    46:b9:21:8e:95:16:a6:26:85:07:89:f4:15:6b:6c:
                    a9:45:cd:11:bf:2a:a9:f5:97:26:36:1c:b4:83:99:
                    fd:16:a1:6a:87:8f:15:6e:41:dc:ae:c1:e1:a6:3c:
                    39:f1:b9:a8:f0:e4:92:8d:df:ec:f2:27:88:b1:65:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:F9:3F:3B:40:F8:AA:00:18:1B:2D:9D:31:EE:B4:9D:86:AB:5B
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:40:b5:5c:5b:fd:16:1e:12:a5:78:8d:71:a1:e5:a3:30:f9:
         c7:d1:af:b1:5c:3b:ad:de:5f:20:59:3c:51:bc:3d:c4:b7:d9:
         4b:30:0b:74:ed:f9:92:da:1d:76:ca:8b:8c:67:a3:34:1b:78:
         f2:ad:94:72:40:cf:89:29:51:60:73:bb:e8:c0:77:7c:a7:3e:
         68:01:54:2d:e6:68:b2:cd:80:86:e2:f9:5a:37:17:0e:94:7d:
         df:d5:33:f0:3c:4a:e4:cd:e8:25:f0:52:47:ca:6c:c5:48:2b:
         f9:9f:51:d8:d5:a1:fa:f6:9f:5e:25:b7:c8:b5:18:e2:83:e2:
         2d:2f:d4:4a:80:ea:a4:f7:99:47:32:09:47:9d:50:a7:a3:9b:
         c6:de:40:c8:ea:05:d3:9f:96:6c:33:0c:b7:4f:0a:69:6f:32:
         bf:61:7e:b5:5f:e0:ea:b1:99:14:b8:e3:44:b7:80:e8:ea:1f:
         1b:1e:5f:20:6c:93:af:c7:19:09:ca:b2:0f:7b:24:a2:b0:2a:
         ac:f3:27:14:c1:16:99:fb:c3:c3:63:70:6b:46:e7:1f:60:db:
         e3:da:e2:0e:f3:2f:5c:b8:01:12:8b:1c:4a:f7:c8:f8:df:ea:
         1c:95:a0:c2:2e:1f:b7:50:87:c6:a4:00:e3:20:cf:6e:c3:d7:
         9d:7e:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:51:23 2025 by rpki-client