Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File:                     O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier:          A08yc5+89KnnwcAMmaCfR3oSf1oR0k+Zyfm2AopbHmE=
Subject key identifier:   59:4E:2F:49:A3:03:72:D7:0F:5B:AC:E6:78:61:D1:CE:2E:88:AC:18
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer:       /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number:          0102
Signing time:             Thu 03 Jul 2025 03:12:31 +0000
Manifest this update:     Thu 03 Jul 2025 03:12:30 +0000
Manifest next update:     Thu 10 Jul 2025 03:12:30 +0000
Files and hashes:         1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: JiWf8n9iyDw9uCwAYTzkKhP7VDEXSqF61qcScZYN8p4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
        Validity
            Not Before: Jul  3 03:12:30 2025 GMT
            Not After : Jul 10 03:12:30 2025 GMT
        Subject: CN=6865f51e-1c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:f9:56:df:c6:d6:b0:c3:66:b7:d6:6c:dd:
                    51:f1:45:23:ed:29:ad:3c:07:42:ae:b6:75:07:26:
                    7e:a3:93:d3:73:7b:bd:0c:c7:e0:f1:c1:e1:6d:39:
                    7c:96:c8:ab:b2:a1:46:a4:9c:8a:e0:a6:22:c7:e5:
                    a7:50:3f:0e:04:e2:cc:3f:76:5a:87:10:26:0b:04:
                    9f:8a:20:1c:d7:47:a7:ec:83:23:f4:f6:ab:79:6a:
                    ed:c5:ac:9b:0e:3a:30:cc:8e:c8:0b:97:d0:ef:fb:
                    ef:6f:e2:34:49:12:a1:73:7e:23:e7:dd:69:7e:d7:
                    23:b2:78:42:85:cb:0f:b9:64:7f:49:40:6f:b7:c2:
                    b9:0c:f2:f6:1e:c1:7a:48:6b:f0:cd:3d:81:a2:6a:
                    48:45:2a:1c:df:d4:bc:80:0e:ba:e0:35:ef:f8:ab:
                    41:6a:fd:6a:2b:0b:13:19:3a:4e:60:ca:0d:bb:8a:
                    6a:27:da:b1:16:43:2d:e3:06:c8:11:bd:0f:ef:95:
                    1a:78:31:fa:22:19:6c:6a:3b:c7:02:4d:9f:84:cd:
                    8c:b5:f0:02:6f:af:55:78:44:a3:f7:37:d5:27:dc:
                    b0:5e:71:8c:5f:96:18:56:a1:fc:ba:37:68:d6:43:
                    03:f1:89:9d:e1:96:0c:97:5a:fb:43:b6:eb:23:da:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:2F:49:A3:03:72:D7:0F:5B:AC:E6:78:61:D1:CE:2E:88:AC:18
            X509v3 Authority Key Identifier:
                keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:8a:ee:04:51:28:38:00:8d:8b:da:3b:57:75:2a:b5:62:
         23:20:1b:91:2e:dc:b8:8f:3a:7e:7e:2a:20:88:19:2d:43:e4:
         74:40:ad:e0:15:65:bf:2d:56:c0:a0:b6:60:b9:d1:bc:19:b3:
         28:61:58:fe:99:a4:f3:ab:87:fd:7b:57:d2:93:20:3a:d9:67:
         b4:b0:ff:1a:7c:16:07:a4:ec:a0:99:46:06:28:85:45:97:81:
         e0:72:eb:74:a5:15:ec:30:05:05:fc:5a:74:2e:1e:5c:6a:50:
         e9:cd:3a:72:7a:31:d2:c7:63:a8:03:c1:c6:39:40:27:4f:4c:
         30:2d:c2:50:41:d7:14:97:fd:63:4e:2e:f3:dc:53:40:17:7d:
         6f:82:f0:1b:a1:8f:44:fb:7d:ce:a4:66:6d:9b:f9:02:11:e0:
         10:2d:74:68:b2:17:d6:b8:6b:40:30:67:d7:69:d4:48:a9:c5:
         ec:cc:c1:85:ca:ed:d7:09:c6:50:7e:3c:89:98:44:3f:c2:fd:
         e1:f1:3d:db:a3:52:23:43:9c:19:20:ea:84:2c:cd:cf:42:69:
         17:87:c8:16:aa:00:20:ee:b6:75:b9:93:26:2c:2d:11:8a:ae:
         81:bb:d8:88:6d:b6:7c:1b:af:5c:fb:37:ee:bd:92:f1:8c:a8:
         93:7b:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:51 2025 by rpki-client