Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          WHnpoccnTwtltee8tArGv1Q0d9M6bCRUE1G6Gooo6l8=
Subject key identifier:   AF:13:36:7F:6D:B7:3F:B6:F8:9E:91:D3:25:44:ED:2D:AB:DD:3A:3E
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          06CF
Signing time:             Sun 04 May 2025 21:49:39 +0000
Manifest this update:     Sun 04 May 2025 21:49:39 +0000
Manifest next update:     Sun 11 May 2025 21:49:39 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: dURpDUjPqk7iW82wMZ6HTcje8cZiXLF5yW/CFmFuLHM=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: +fRxqOXyB3e8V6DJsPZloFZurNNVr8ZfU/q63aOPSF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 21:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: May  4 21:49:39 2025 GMT
            Not After : May 11 21:49:39 2025 GMT
        Subject: CN=6817e0f3-f30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:e0:95:23:e3:e8:d1:2b:37:1b:3d:03:52:
                    e8:d7:f4:77:fd:6a:3d:22:c9:ee:b0:f2:32:82:9b:
                    de:a3:01:62:67:4c:9f:af:62:c5:57:4d:06:8f:71:
                    e8:8b:11:aa:7d:fd:94:ed:1d:41:74:7b:6f:b7:e9:
                    1c:ae:1e:6d:31:f6:17:13:40:0b:7b:2b:19:02:eb:
                    2e:8a:97:40:12:41:66:56:2e:d0:64:68:93:e3:d9:
                    87:1d:c7:2a:63:cb:26:be:bd:e8:ad:67:5e:50:2c:
                    89:90:ad:c3:61:8d:c9:d2:f3:de:70:e8:5b:49:40:
                    1f:4d:1b:a7:70:2f:50:81:fa:26:55:c5:ec:66:0c:
                    3b:52:16:9c:4c:5f:d4:04:e5:27:e1:18:ce:11:5a:
                    75:bb:d4:22:ec:72:a1:e5:78:a4:42:a4:21:4f:f9:
                    e2:59:4e:16:40:84:62:aa:dd:49:72:75:37:b0:4c:
                    6c:3a:eb:e0:59:fa:8a:39:d2:75:1a:71:e0:a6:d5:
                    0c:cd:30:e2:d1:c3:74:eb:ac:e0:ca:49:8e:28:6b:
                    cd:14:00:0e:9a:39:43:77:ae:cf:60:9e:01:aa:3b:
                    75:ac:0b:ca:0d:74:28:4f:c0:6a:63:10:c2:a3:36:
                    92:69:2c:4b:6b:3e:24:d9:a8:2e:d3:ec:27:ff:65:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:36:7F:6D:B7:3F:B6:F8:9E:91:D3:25:44:ED:2D:AB:DD:3A:3E
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:81:88:b2:94:53:1a:3e:0a:61:0a:ca:1f:74:b3:28:05:
         2f:96:e0:34:ec:3e:97:3f:80:83:83:46:92:b6:89:91:22:75:
         14:d6:1f:fd:7a:aa:3e:eb:59:30:b6:cf:de:ef:f0:11:27:75:
         ef:9a:9a:ba:fc:9f:21:02:4a:4e:06:cc:f3:98:1b:f7:18:24:
         53:6a:b7:8d:2a:60:d4:03:92:94:0c:3b:cf:d5:fb:c9:32:26:
         fa:6e:29:71:fc:e0:80:98:be:a4:40:b8:f2:94:af:a6:73:0c:
         b1:06:bc:d4:ad:ea:0e:c7:7c:67:1b:59:f4:0e:86:e7:18:e5:
         9c:7b:df:1d:e5:5c:32:9a:92:a5:a7:1c:9f:ef:05:81:21:70:
         4e:65:e0:13:8b:c8:bd:f3:cb:e2:d5:d6:f1:af:b4:a2:f1:c0:
         95:02:a0:43:2c:91:e3:3d:72:bf:3c:ad:d1:83:f0:23:59:63:
         7a:d3:77:f0:24:ec:82:71:62:4e:fb:ed:5c:f7:75:63:f1:8d:
         3f:b1:a1:00:ba:f9:1d:b7:2a:54:90:cc:92:27:c8:48:d3:a7:
         f6:12:b6:8b:f9:ad:19:5d:0d:f9:64:96:32:c7:5f:86:5a:19:
         cd:92:52:27:6d:c7:0e:7f:fe:ea:39:03:3f:23:2b:9f:aa:fc:
         53:80:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:30:30 2025 by rpki-client