Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
File:                     n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json)
Hash identifier:          KTpI4aq9K4AWPel9WwnrfuI4q+3cynfR4jthjedy67Y=
Subject key identifier:   58:AF:A5:D0:2F:BB:B6:67:8E:03:1F:61:D5:F3:F7:6F:D5:A3:21:1D
Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF
Certificate issuer:       /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
Manifest number:          01E2
Signing time:             Thu 03 Jul 2025 02:01:26 +0000
Manifest this update:     Thu 03 Jul 2025 02:01:26 +0000
Manifest next update:     Thu 10 Jul 2025 02:01:26 +0000
Files and hashes:         1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: zsU/LkfDRtjxksC4ifEacgjB+zq0RGJ3WEoS3WrOY/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
        Validity
            Not Before: Jul  3 02:01:26 2025 GMT
            Not After : Jul 10 02:01:26 2025 GMT
        Subject: CN=6865e476-e0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:59:43:c8:5d:67:a7:13:57:47:30:3a:32:
                    15:8c:53:f5:13:a1:c0:06:ac:f5:ad:c7:79:89:da:
                    35:31:ae:bc:48:56:d4:b4:e5:3c:6d:29:a6:a9:60:
                    ce:07:20:a7:99:e4:47:2c:e2:23:01:11:0d:b1:04:
                    33:6e:61:57:08:57:7f:3e:0b:53:76:fa:2f:bf:39:
                    6c:22:c3:0d:b3:3f:a8:72:d9:9c:07:8d:bb:b6:61:
                    7e:70:de:85:87:d5:2e:b0:fa:2a:ec:e0:2a:94:a2:
                    21:8d:05:95:37:91:30:22:e3:9f:24:34:70:47:4c:
                    14:3f:6d:54:f7:f2:5d:bc:48:16:40:34:09:b0:6a:
                    ae:0c:0f:00:56:24:8f:f2:67:81:0b:6c:03:16:0c:
                    10:57:25:ca:0a:9a:09:f0:f3:2b:82:7b:07:17:7b:
                    a6:8d:64:bc:14:98:83:9e:6d:f5:1e:ab:a8:c4:84:
                    5e:2e:0c:df:7a:0b:e0:09:00:32:68:82:14:25:d8:
                    bf:9d:7a:e5:1f:84:1a:1c:7e:d4:72:da:f0:41:74:
                    b5:34:73:d9:47:cd:60:fe:6a:50:48:c1:bf:1a:e8:
                    53:24:a5:d0:cf:64:24:c7:df:e8:06:17:e1:ff:b9:
                    f7:87:b0:bc:b5:a9:89:d1:50:c1:b9:e0:5d:6b:96:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AF:A5:D0:2F:BB:B6:67:8E:03:1F:61:D5:F3:F7:6F:D5:A3:21:1D
            X509v3 Authority Key Identifier:
                keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:47:6e:ff:64:34:c5:5d:98:7d:01:04:2a:9c:9f:34:6b:99:
         d7:dd:86:29:06:3b:65:80:17:0e:41:3d:63:90:01:6b:7e:33:
         f5:7b:86:28:2f:b5:7c:54:4d:76:2e:23:3b:ee:30:1b:cd:20:
         1c:46:64:06:5b:cd:18:3f:93:87:e6:54:0b:9a:ce:d0:05:5a:
         57:d5:dc:3e:b6:7f:fa:e4:6e:bc:7f:c6:69:5c:18:bd:b5:b1:
         88:c8:7d:4c:bd:10:b3:86:99:a2:6c:31:51:2c:66:d5:88:a7:
         15:5d:73:53:93:02:6c:a1:b6:ad:6b:ad:f5:e9:7b:88:2c:b4:
         cd:aa:8f:55:15:2e:b7:5e:54:20:6c:82:ef:d1:4c:a7:f2:ff:
         1a:de:dd:bb:ea:ce:8e:0e:6d:3b:db:03:10:c3:4a:4d:3e:91:
         2b:b9:c9:4c:78:de:74:0d:73:49:dc:a9:fe:8f:3c:c0:09:84:
         1a:ee:ac:1f:45:4a:e2:74:89:a8:e8:d0:3d:08:2d:61:5e:0b:
         4c:02:eb:df:6a:26:f7:ef:09:15:15:c5:eb:43:00:bb:99:27:
         ea:1f:68:99:ac:b3:0d:12:72:c0:eb:3d:78:49:bc:56:21:f1:
         d1:0d:37:70:fe:d7:0b:b4:23:08:fd:68:42:b4:8c:65:f7:92:
         0e:8f:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:04:02 2025 by rpki-client