Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          9nsxRTOEgnNU2GU3MKZFYhtrvfH8YS85D0Ge9Sxgwqg=
Subject key identifier:   1C:A2:C2:D4:37:4C:81:08:25:09:C5:78:70:EF:99:72:68:60:42:49
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0BE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1480
Signing time:             Wed 02 Jul 2025 19:01:00 +0000
Manifest this update:     Wed 02 Jul 2025 19:00:59 +0000
Manifest next update:     Wed 09 Jul 2025 19:00:59 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: Mt3d2xv+iDcDLrZe+lrVuYYIQErZdfQ2KwP/7NtJZJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3049 (0xbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Jul  2 19:00:59 2025 GMT
            Not After : Jul  9 19:00:59 2025 GMT
        Subject: CN=686581eb-ce0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:1a:60:03:1a:ec:37:ca:e5:f5:fb:d4:76:
                    f7:87:d5:4f:e1:1f:73:3c:18:34:36:1d:f6:a6:64:
                    5a:25:c7:af:47:83:55:fd:b2:20:5f:c8:2b:12:2f:
                    9a:3c:73:c5:92:0c:01:f2:0f:63:15:91:c2:67:38:
                    92:08:43:47:6e:bc:a3:48:ca:bb:98:f7:4f:8e:2c:
                    76:5d:e8:15:c3:44:06:5e:88:3f:07:9d:79:91:f1:
                    ae:63:1f:71:32:09:e5:b1:56:22:e5:6d:5d:2d:15:
                    98:5c:13:82:8f:29:97:e8:da:f3:56:bc:20:6e:c3:
                    49:14:aa:23:83:e3:aa:41:3a:22:09:fd:6d:e9:24:
                    8b:08:2a:4b:3c:5b:9c:b7:f9:95:87:c9:ec:c4:30:
                    64:e7:62:48:e3:9e:e3:3d:11:48:9b:93:d9:e2:de:
                    4f:bf:96:90:f8:13:0c:56:d8:05:bf:3d:2e:5e:41:
                    2c:aa:00:9d:5c:9e:d2:0e:c4:b9:59:e8:83:ea:f6:
                    03:93:73:64:d5:5a:98:87:ae:28:a0:bb:2d:b5:8a:
                    44:7d:96:85:68:12:b6:fc:50:da:ee:d6:3e:92:5a:
                    52:03:4d:52:42:09:3b:f6:90:c0:4d:0f:bf:29:cc:
                    4b:6b:d3:a0:bf:aa:1f:56:4c:bb:f2:84:89:c9:7a:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:C2:D4:37:4C:81:08:25:09:C5:78:70:EF:99:72:68:60:42:49
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:28:3f:62:58:36:76:cd:24:03:61:d8:f0:f7:fb:c3:a0:
         df:8a:e8:ef:1d:c1:24:6a:49:dc:41:fa:f1:2b:37:a5:97:d3:
         f4:a5:97:6b:c7:b6:dd:3c:2a:53:db:fa:74:17:b7:2f:73:47:
         ca:23:49:c3:d3:93:a5:00:4e:a3:02:9d:97:ae:04:24:b4:4b:
         de:ee:51:2b:b5:4f:aa:72:b5:49:3b:5d:c3:d9:ec:df:41:a4:
         cc:ce:53:b1:eb:de:d4:05:0e:ff:b8:2c:95:8c:95:41:d5:ad:
         18:b1:8d:a4:54:bf:1f:ea:8b:31:b3:1b:32:f7:12:e0:a9:69:
         e8:63:ff:29:67:8e:a9:9f:9f:56:4d:be:27:41:c2:d9:1e:64:
         41:8a:eb:f4:3f:53:78:d5:7a:79:b2:58:db:ce:a4:60:ea:2d:
         aa:ff:f2:fc:a4:7a:37:8f:ad:b8:71:0f:58:bd:06:3c:27:d5:
         6a:f1:72:98:d9:2e:d8:06:86:34:77:50:40:c0:12:eb:82:04:
         47:25:64:c9:8f:e7:ad:32:50:52:05:3d:ce:2b:03:c3:26:68:
         28:43:e3:e5:f0:d4:73:85:08:eb:0e:72:54:91:3a:82:be:1d:
         24:b6:5d:27:1a:52:7a:95:7f:da:4b:b0:91:d9:4a:9c:72:b0:
         a0:db:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:09:34 2025 by rpki-client