Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          2so38buR0oV9YlXzwkAH3OXcTr9U+y6G7M1crP0zZWk=
Subject key identifier:   A7:1D:B2:32:8F:93:4B:EE:21:8A:72:8D:20:41:FE:96:B1:27:31:21
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       18BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          46A8
Signing time:             Mon 30 Jun 2025 15:50:52 +0000
Manifest this update:     Mon 30 Jun 2025 15:50:51 +0000
Manifest next update:     Mon 07 Jul 2025 15:50:51 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: iRq/DDy/iUHjkYrDDd4ssHCU/VPVkLS6HN+vU3qMFfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 15:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6335 (0x18bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: Jun 30 15:50:51 2025 GMT
            Not After : Jul  7 15:50:51 2025 GMT
        Subject: CN=6862b25b-d91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:c0:4e:89:56:f9:01:60:fa:eb:57:51:e5:
                    e8:7d:7b:3b:4b:9f:73:15:ca:50:e2:7e:cc:cc:ab:
                    17:9c:67:69:bb:62:53:6b:43:95:de:ad:cc:fb:9d:
                    f8:09:84:16:01:26:ab:a6:2b:2f:4f:8e:17:0c:db:
                    82:a2:17:aa:27:1a:80:88:d7:a3:12:2f:0c:bb:14:
                    fe:6f:44:26:66:3b:e7:bd:6f:6a:09:10:f1:de:cc:
                    92:f9:ad:05:a0:ee:91:fd:f4:25:fa:71:bb:0e:80:
                    56:6b:2c:a2:a4:63:33:5e:f0:fb:57:52:9d:0a:00:
                    a1:81:99:96:ec:8a:b5:74:7c:00:54:4d:23:df:24:
                    39:94:05:fb:ee:78:61:6a:5e:b8:8e:c6:76:83:07:
                    87:00:23:08:b8:e4:1e:98:d2:e8:39:d6:3e:bc:89:
                    b9:65:e7:7b:36:19:73:41:b9:7f:00:c8:31:d8:2d:
                    da:20:31:d8:5d:f6:dd:3f:be:bc:10:27:fa:fd:d4:
                    f8:4b:4f:b7:7f:04:27:8d:cb:a9:69:83:c5:26:34:
                    fa:04:5c:a0:7d:94:5d:ea:f1:e8:be:08:76:49:1a:
                    91:a5:d8:bd:f0:ae:09:28:3a:f5:77:4b:77:90:26:
                    ee:dd:96:32:17:4e:c4:d8:e1:b9:e2:25:3d:52:dc:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1D:B2:32:8F:93:4B:EE:21:8A:72:8D:20:41:FE:96:B1:27:31:21
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:14:b0:4e:5a:34:cf:5c:df:9d:57:78:6f:d0:28:91:65:5b:
         36:19:d2:48:f4:65:22:b8:8f:cd:f0:a5:37:0f:a0:25:ac:b4:
         f9:4d:f7:50:f1:59:25:c4:e7:89:42:0f:43:ed:7a:6e:f0:be:
         d1:1e:7b:92:2d:2b:27:a5:93:91:ae:0f:0d:34:cc:00:f5:70:
         97:ab:ff:a8:d1:49:43:ec:8f:2f:e2:f5:b0:08:15:ef:15:44:
         83:46:0f:db:98:35:ec:e1:06:43:1f:3e:4b:5a:f7:58:b9:0d:
         c8:5d:dc:2d:f0:9d:c3:87:1c:d6:bf:ad:62:66:0b:97:99:dc:
         39:16:33:16:e4:4e:05:96:bc:c0:c7:38:75:85:6a:3e:c2:cd:
         ea:b5:3f:dc:6d:40:37:9f:4a:7f:eb:78:7e:92:00:a7:f2:ad:
         cb:6a:77:16:73:e1:da:bf:be:14:58:d7:4a:b6:23:75:d3:2f:
         e2:61:de:be:e3:0c:c9:4a:5f:67:11:ab:4d:d6:50:df:4a:ac:
         be:b5:dc:ec:13:4b:69:05:d3:6b:21:59:06:ae:b0:5a:f8:5d:
         02:f3:e2:46:1e:9a:e7:e7:1d:ae:6b:df:20:90:24:66:d2:9e:
         33:de:09:33:4e:28:c7:32:18:0a:46:54:f7:fe:bd:cf:be:ad:
         3a:ed:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:41:39 2025 by rpki-client