Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File:                     neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier:          bZ0/50cFnfJaCU7JpLZBz09J2izFC+R9ZX8sbP2hxr0=
Subject key identifier:   B1:06:7E:E4:B2:47:0A:C4:72:13:E1:F9:27:71:49:46:30:76:73:A5
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer:       /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial:       06A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number:          52B6
Signing time:             Wed 02 Jul 2025 15:09:11 +0000
Manifest this update:     Wed 02 Jul 2025 15:09:10 +0000
Manifest next update:     Wed 09 Jul 2025 15:09:10 +0000
Files and hashes:         1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: FVItP6vdMh1jh5VF6EZe5qAOfY7FpM4mgIZzyqpzKBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
        Validity
            Not Before: Jul  2 15:09:10 2025 GMT
            Not After : Jul  9 15:09:10 2025 GMT
        Subject: CN=68654b97-9b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:91:ab:74:c2:f5:e4:5a:cc:65:81:1d:dd:
                    4c:e2:49:94:ec:28:a9:9e:84:d6:19:e8:62:f2:3b:
                    a3:24:67:82:cb:fe:3d:81:f3:df:d5:7f:c3:85:10:
                    24:3d:6a:f6:98:3a:19:2d:ae:a8:4e:7b:4b:92:00:
                    9a:16:d2:fc:fb:19:b6:ba:65:3e:b8:ca:b1:1d:fc:
                    16:56:e5:ac:6d:03:d9:db:fd:00:87:90:32:70:2a:
                    ad:77:87:4a:dd:1e:77:d1:21:38:ff:b1:b4:4d:20:
                    96:96:0c:89:60:01:d6:3e:dc:1d:cf:8d:ed:e9:f9:
                    70:cf:75:74:34:3d:df:be:fd:0c:67:d5:48:f1:39:
                    41:fb:e0:83:08:60:c7:eb:71:e2:f3:c4:68:7d:6e:
                    27:55:e6:ce:a5:f2:83:e6:c9:e9:5e:ca:10:ea:38:
                    2a:25:33:bb:3b:57:40:1d:8d:f7:54:d7:e9:77:6b:
                    3e:88:7c:0a:af:96:fa:95:ef:46:29:09:4e:0c:10:
                    12:26:21:74:f3:3f:a5:a2:f4:70:5c:f6:bd:8e:dc:
                    5d:c0:e8:c7:72:70:5f:07:d5:36:aa:00:e2:32:df:
                    22:46:94:5a:32:ab:4d:a1:ac:df:a6:ee:6e:c6:f2:
                    14:62:16:3d:82:1c:09:74:8d:8b:ca:32:d3:55:5e:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:7E:E4:B2:47:0A:C4:72:13:E1:F9:27:71:49:46:30:76:73:A5
            X509v3 Authority Key Identifier:
                keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:16:44:ba:a4:9f:42:75:18:b6:4b:38:fe:e7:50:aa:bf:
         50:1d:50:1b:52:a3:76:80:9b:f8:6b:92:ad:53:d7:42:41:cb:
         da:c4:d0:81:d5:3f:57:86:2b:73:4b:e5:e5:27:1b:7f:80:03:
         fa:08:ab:d6:a1:e4:69:f1:c0:c0:90:5b:1e:ed:32:68:23:d7:
         81:33:08:07:58:e8:16:cc:4f:f5:b3:bb:6f:56:27:05:84:cd:
         1c:b3:2b:c8:b3:c9:c0:13:00:4d:e4:cb:4c:89:4c:47:48:f9:
         45:be:96:69:67:66:0c:53:b7:57:74:ae:95:68:2f:71:5e:a0:
         9a:3d:e5:da:96:26:d5:ab:99:73:9a:06:9e:85:90:87:67:af:
         7d:86:f4:a8:4c:d2:7c:b0:b1:97:b8:1b:8a:e1:7f:79:fb:55:
         da:0c:41:0a:b7:05:ab:69:bd:51:bd:9c:1c:9b:bd:92:29:89:
         14:9c:c7:0a:a5:ce:6b:0c:a7:bb:aa:fb:d4:63:8c:23:30:b0:
         d8:84:9d:c9:20:1d:a9:b8:6b:4d:eb:97:df:05:51:e4:c7:26:
         4b:85:97:47:fe:44:f5:7b:72:50:96:83:38:d4:08:3f:f2:fb:
         ba:54:43:08:47:6e:19:d2:9f:2b:19:af:09:ff:2a:36:88:58:
         5a:f3:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:46:52 2025 by rpki-client