Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          YjS94e7bcdG6/3bnHVpR54q4YSFG8PfvMOJebIYCJzQ=
Subject key identifier:   C5:B1:F3:CA:15:8F:CA:87:60:54:D5:9F:20:20:AD:C4:33:61:30:3B
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          E6
Signing time:             Thu 03 Jul 2025 05:33:38 +0000
Manifest this update:     Thu 03 Jul 2025 05:33:38 +0000
Manifest next update:     Thu 10 Jul 2025 05:33:38 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: QGRhbi6jkgmAa8Vn9P329haW1q3GLaylZdnzxlbs8aY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: Jul  3 05:33:38 2025 GMT
            Not After : Jul 10 05:33:38 2025 GMT
        Subject: CN=68661632-11b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:51:14:27:0b:83:d8:72:66:21:12:d6:9b:
                    b9:b1:dd:fd:a8:85:33:88:a3:d0:01:1e:c0:f4:17:
                    9a:88:27:da:50:af:69:ff:aa:b5:e7:57:fd:ff:3c:
                    ae:2a:d1:b1:9f:43:5a:87:53:07:ca:91:a0:ad:33:
                    d2:6b:74:03:a5:3a:e3:43:67:c0:c2:62:38:23:45:
                    e9:9b:0b:ff:e8:9c:b8:97:5d:66:a3:58:9d:bb:f2:
                    65:5b:77:db:ad:f3:9f:a5:d2:e6:5d:95:5b:47:e4:
                    8f:a9:b6:cf:84:11:60:1e:2a:79:da:3f:4a:41:68:
                    ab:08:02:1f:de:3f:b8:a8:cb:e1:65:94:ff:40:e0:
                    7e:b4:fd:a5:61:e7:27:69:d4:91:6d:77:40:6a:86:
                    0a:c0:25:55:e4:29:a6:27:79:a4:f5:b5:56:05:09:
                    62:6b:c0:4e:d9:e1:08:16:c8:09:2e:bc:e9:8f:ea:
                    a8:cd:eb:0f:40:f1:18:f3:ea:e1:9b:2e:12:06:27:
                    83:95:bd:50:57:f9:68:fa:6b:f2:19:7b:89:90:81:
                    0a:74:2f:95:29:15:00:88:4e:b9:21:59:23:55:db:
                    d4:ca:fa:cc:9e:48:85:84:4f:d4:02:d5:28:1a:6c:
                    de:b5:27:30:57:3d:72:07:9b:43:51:e5:52:a9:d1:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:F3:CA:15:8F:CA:87:60:54:D5:9F:20:20:AD:C4:33:61:30:3B
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:b8:b2:75:c1:e5:ec:36:d8:d3:a4:c9:40:5a:e9:1e:a2:
         c7:95:77:10:27:e6:05:79:48:da:fe:6b:ac:5f:ba:6b:f9:d0:
         e6:ed:e3:08:2f:4d:27:21:39:0c:0b:7b:b3:9b:92:cb:82:34:
         9d:ab:85:3b:36:cd:b1:87:75:7a:e0:8f:71:e3:24:08:11:17:
         50:33:8a:8e:c5:8c:e2:3c:6c:92:b1:fb:43:25:82:2e:6e:21:
         04:b1:a5:a1:1a:db:8e:3a:bb:60:dc:8d:07:62:fb:8e:0d:2a:
         6e:0b:84:e8:f1:d1:f0:18:89:7f:57:5c:07:a9:ef:0e:3b:f7:
         38:90:43:64:aa:ea:63:e7:28:35:99:01:fd:ea:dd:89:45:35:
         63:80:f8:46:71:ab:32:69:f2:49:59:14:1c:a8:74:ed:5e:4f:
         58:59:90:d0:22:aa:51:0e:2d:1b:db:b5:5d:ad:ae:b8:42:d8:
         89:09:65:91:be:af:c1:6f:b4:d0:9a:5d:39:b5:34:2d:f9:d1:
         5a:14:1c:8b:e6:00:0c:d6:29:93:ee:bd:ce:bc:11:70:8e:fb:
         39:0f:f1:c7:eb:53:a0:d4:65:ec:c5:ac:b3:0d:16:e1:1d:db:
         19:30:60:d2:ce:94:11:7b:62:56:f1:a3:f6:9f:7e:4a:2b:0a:
         57:53:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:00:21 2025 by rpki-client