Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          Mgy83bbNaT8JkhaJKEqBXemwv6sk06RJ74IlSUi4/A0=
Subject key identifier:   C6:78:97:78:7B:9B:17:EA:30:58:BF:03:A5:DA:82:F1:CB:A3:2A:36
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       347B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          347B
Signing time:             Wed 14 May 2025 14:54:58 +0000
Manifest this update:     Wed 14 May 2025 14:54:58 +0000
Manifest next update:     Wed 21 May 2025 14:54:58 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: pBRo1SbaJFWwuuNIB9SxA+tzly/3u6x7FkzuzAAIg9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13435 (0x347b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: May 14 14:54:58 2025 GMT
            Not After : May 21 14:54:58 2025 GMT
        Subject: CN=6824aec2-959c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:fb:3c:a3:d4:56:75:f4:b9:d9:34:3a:00:
                    29:59:e1:74:bb:ea:fe:47:2d:83:f5:7a:95:fb:ce:
                    02:d3:32:40:b8:64:27:b1:06:5c:78:26:c0:0e:83:
                    98:96:b4:8e:91:5c:75:e8:93:18:be:0a:33:d1:fa:
                    26:ce:37:d4:73:9d:bc:f9:33:24:be:80:74:4a:52:
                    49:6b:42:f9:d5:20:1c:76:94:33:f3:24:e6:6b:5d:
                    70:d8:af:bc:7c:78:bd:e0:db:b6:22:c9:67:41:43:
                    7f:83:89:20:68:8c:73:93:08:52:77:a8:e9:1e:bd:
                    c5:c6:2a:d2:82:1a:a5:32:41:4f:0f:98:3b:70:06:
                    ea:b5:31:c6:2b:9a:4a:a3:7c:5e:d0:10:8b:65:4e:
                    57:6b:95:c6:5d:3c:7f:a6:11:2a:19:84:f9:5d:90:
                    56:d3:49:0f:b3:9f:2d:2a:9b:95:03:d3:cf:87:9d:
                    8d:6c:e5:66:52:c0:ba:3c:e6:f3:ab:1b:fa:b8:51:
                    9b:68:e6:f4:b2:99:87:b7:27:a1:46:98:f7:7c:0b:
                    80:ca:ff:2f:f5:8b:c0:80:d8:56:a6:37:5f:5d:54:
                    df:39:2e:27:fb:d5:ee:b8:aa:48:e9:94:21:16:55:
                    cd:96:98:a1:9d:28:59:e3:75:37:6f:0d:d0:11:e2:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:78:97:78:7B:9B:17:EA:30:58:BF:03:A5:DA:82:F1:CB:A3:2A:36
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:88:1b:72:bb:fe:e1:4e:a5:7e:7e:a6:0a:ac:ee:82:f8:14:
         1b:5b:63:97:f6:b6:fa:5d:e3:3f:dc:58:3d:b9:53:f0:8d:07:
         2c:2a:62:88:01:5e:2d:e4:11:02:ac:dc:03:69:2a:dc:f9:ce:
         46:9d:9a:a2:36:22:39:49:27:76:ba:d0:7b:15:a9:ac:ff:aa:
         5a:d2:bc:3f:61:d3:73:b4:19:90:f6:94:01:1e:70:5b:37:f4:
         c9:de:ee:65:fc:06:f4:d8:20:79:68:a4:6a:a8:dc:56:44:da:
         55:d4:13:ed:47:e9:f4:53:0b:33:f1:52:fc:ff:d1:7f:c9:c8:
         58:2d:a1:3b:d5:7b:1a:c9:29:99:01:d5:eb:4e:24:01:63:f5:
         92:f3:56:6e:df:71:46:e2:d6:d6:d3:1a:8f:42:27:1b:ee:ee:
         a1:17:a7:7c:0b:46:50:50:64:91:70:2b:13:fc:9c:73:bb:7e:
         7c:eb:e1:b7:48:e1:37:9a:f2:e6:be:f4:69:7a:e8:3f:79:e8:
         ce:07:29:ac:04:41:4d:16:84:3b:8e:51:d0:19:13:9c:0f:c9:
         d6:23:43:a7:8c:ab:2f:3d:d7:d6:43:f2:b0:2f:2e:3a:41:19:
         b5:40:6a:9c:77:73:a2:6a:d2:27:2d:c6:f7:61:cc:db:bb:30:
         9e:bc:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:18:28 2025 by rpki-client