Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          riGzwQEAweOaUUgc3CJjUs8+uHVGhf8DA0YEyDV9uPw=
Subject key identifier:   DE:C7:36:01:7B:71:73:EA:48:4B:C1:CC:51:55:45:FF:F5:05:95:44
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          0597
Signing time:             Mon 12 May 2025 23:00:30 +0000
Manifest this update:     Mon 12 May 2025 23:00:29 +0000
Manifest next update:     Mon 19 May 2025 23:00:29 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: nQey3Kjk500O5TCuqwbP+0CL1jTTs+LXCitAJq8ndKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2, serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: May 12 23:00:29 2025 GMT
            Not After : May 19 23:00:29 2025 GMT
        Subject: CN=68227d8d-163e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:9a:14:c7:64:ed:fa:c8:ee:10:37:f8:04:
                    31:3c:51:a2:70:66:ac:77:16:64:c9:be:e4:4e:9c:
                    e1:09:85:59:d3:f8:6d:da:47:fd:6e:9b:c0:50:67:
                    b7:4f:b7:97:6f:ef:44:6c:66:fa:58:ad:ca:8b:2c:
                    e0:ae:e5:02:44:66:bc:7f:3a:71:2c:24:fb:e1:00:
                    1a:68:e1:de:85:5a:d4:d3:01:6c:15:fa:78:c4:85:
                    0a:a2:35:87:75:7e:e2:d5:93:44:c3:73:cf:53:41:
                    f9:5c:98:2c:04:ae:fe:24:71:e3:99:2e:32:a1:24:
                    ca:6c:e8:7b:fa:60:f8:8a:83:64:30:58:af:4f:1b:
                    1d:a9:56:a5:41:90:dd:13:52:1f:70:d5:68:77:10:
                    a7:ae:ff:62:9b:cb:90:6a:e3:68:67:09:e9:82:32:
                    4f:27:99:35:dd:fd:ba:1b:cb:94:60:62:1d:d8:74:
                    76:19:c0:11:6e:2d:c3:ec:e1:f5:d9:61:c3:5a:4c:
                    30:bc:ef:f4:40:e5:e2:30:5f:4e:58:8a:47:cf:af:
                    d1:46:b0:df:8f:5b:a9:d9:0f:8b:82:62:f8:0a:92:
                    67:b8:d7:b6:f3:11:77:50:5f:16:62:a8:a2:a3:ad:
                    7d:71:96:00:47:2e:ad:50:1c:37:3a:58:8c:68:0a:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:36:01:7B:71:73:EA:48:4B:C1:CC:51:55:45:FF:F5:05:95:44
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:d2:72:7a:e1:f2:32:fd:33:7d:07:d8:4d:e7:e3:9c:66:
         fe:39:ad:c1:75:64:78:93:26:8c:1e:3b:f9:a3:08:8b:19:8d:
         1d:ad:70:09:5f:07:a4:38:a7:5a:25:2c:8a:76:dd:40:20:15:
         85:fb:e0:24:99:ec:6d:d2:08:a8:44:7c:84:db:d4:95:79:69:
         9a:0b:59:a1:ea:a4:6e:1c:0b:01:c2:d7:76:db:3c:93:2d:5f:
         d0:9f:ef:f0:c3:9d:4d:27:5b:14:7a:5c:36:7f:26:86:ed:46:
         c9:aa:43:12:da:9f:3c:55:ec:91:c1:27:89:b7:f3:fc:81:c5:
         fb:b5:dc:73:eb:54:8d:e1:34:1a:6e:53:d7:51:5d:9a:dc:a1:
         17:c6:08:cd:b0:14:04:12:0c:29:7a:5c:13:4b:25:b8:ab:a9:
         fa:eb:1b:d9:37:75:9e:e0:dc:76:17:e6:29:ee:a8:f9:3e:18:
         09:7f:57:29:d3:59:bf:ab:09:0a:e6:23:22:73:85:35:61:ea:
         6a:80:0a:d5:73:24:62:ea:f3:02:97:ac:55:1c:ff:ac:b7:96:
         b7:41:79:5f:f0:f7:73:35:8c:f6:6f:7c:75:75:d4:c6:73:20:
         f5:db:cf:b0:b2:a2:6b:2c:cc:2e:41:39:49:8b:e1:2d:b6:a2:
         4f:fc:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:20:08 2025 by rpki-client