Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
File:                     g_H_6dM06H_0zXVY3e81L-bfIGk.mft (raw, json)
Hash identifier:          w0+5ZDuKVMmCv2jAPuzi9rAUAUL1UGtcYuCGXamYjqI=
Subject key identifier:   14:9B:B2:D5:40:B6:26:8C:42:D6:BE:01:AA:69:4D:DB:77:59:79:E5
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Certificate issuer:       /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial:       0850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
Manifest number:          0838
Signing time:             Sat 10 May 2025 20:30:55 +0000
Manifest this update:     Sat 10 May 2025 20:30:54 +0000
Manifest next update:     Sat 17 May 2025 20:30:54 +0000
Files and hashes:         1: g_H_6dM06H_0zXVY3e81L-bfIGk.crl (hash: PCLEJWlAQ/3qrZL2XqUWhDdZMqTQmhQin3woLPq23Ao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
                          rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 20:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFFA, serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
        Validity
            Not Before: May 10 20:30:54 2025 GMT
            Not After : May 17 20:30:54 2025 GMT
        Subject: CN=681fb77f-6b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:5b:31:aa:8d:49:b9:2a:46:68:f6:c9:ce:
                    c8:9f:16:b8:85:ef:2c:ea:6e:7a:f7:18:36:21:b7:
                    68:4f:92:9d:93:c6:72:5e:23:0d:6f:1b:24:f8:ee:
                    58:e2:3c:79:c2:50:4b:20:af:5d:db:bb:4c:02:55:
                    52:f4:b5:eb:e0:c7:6d:fb:40:c1:dc:a7:db:07:94:
                    ea:5c:15:37:c1:14:f5:05:3e:3c:27:01:ba:df:e1:
                    38:86:13:88:48:39:18:f3:0f:f7:94:bd:f4:e5:dd:
                    43:c9:35:72:d0:ec:10:a6:80:15:e2:fa:14:9d:f2:
                    b2:3e:11:96:34:8e:10:61:d1:74:58:67:d9:8c:26:
                    13:5d:22:12:ff:03:c6:ff:6c:98:8b:0c:67:95:3d:
                    61:77:1a:11:8a:18:59:dd:4c:e2:c7:db:a5:98:0d:
                    5f:00:39:9a:cd:a2:68:7d:89:fc:3c:68:2b:05:8c:
                    d3:48:0b:ad:7e:95:d4:9b:df:c4:5e:14:a8:77:22:
                    46:08:1b:2d:0e:be:b7:68:4f:38:b7:8b:2e:95:0c:
                    fc:31:0a:a8:f0:12:a2:2a:33:e0:93:2f:f8:58:90:
                    a0:db:d9:ad:94:3f:e0:8f:44:0c:2f:20:34:ab:78:
                    e0:a9:86:82:b3:2f:9e:1e:ac:39:78:22:e9:c5:6f:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:B2:D5:40:B6:26:8C:42:D6:BE:01:AA:69:4D:DB:77:59:79:E5
            X509v3 Authority Key Identifier:
                keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0a:3a:c9:1b:3a:bf:15:12:cb:a0:24:ff:61:04:a2:f3:82:
         a5:ce:23:a0:8f:8b:12:f7:9d:e8:fd:46:bd:44:8e:a8:96:16:
         cd:ad:ab:a7:d7:0c:eb:ed:c9:d1:28:2d:b9:48:2d:32:42:e7:
         b9:0f:91:d1:dd:c5:72:bc:b9:12:1b:70:e8:92:79:1c:89:cb:
         9f:48:e8:78:ef:8b:46:0a:a0:32:55:3b:23:d1:7e:47:72:03:
         78:1d:ab:35:67:22:a4:2c:11:0b:49:cd:37:15:f9:98:6b:c3:
         31:b9:d3:9a:cf:c9:a9:84:1a:63:22:31:8e:5b:97:bd:63:f0:
         d1:d6:bd:03:5f:37:4d:dd:1a:47:53:7b:ac:0f:8d:ae:56:1b:
         1e:78:7a:f7:aa:31:c0:10:d4:58:64:58:04:53:f7:d3:90:a4:
         10:87:d5:d3:3d:74:08:3b:e5:e3:04:b3:c7:ef:d8:b5:7e:ee:
         35:12:1f:6d:3d:44:05:5b:99:44:c0:92:01:a0:e1:d7:38:da:
         dc:3a:dc:e9:2a:30:52:66:1f:a0:17:5a:32:a6:aa:75:09:87:
         58:0b:10:d6:60:92:cd:26:94:ab:bf:d6:65:ad:0c:30:9e:0e:
         90:69:16:3d:34:7d:21:fa:13:8f:a2:44:a3:b5:fe:29:d7:c8:
         61:5d:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:53:29 2025 by rpki-client