Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
File:                     voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json)
Hash identifier:          DZtfQUVLKm5OPMyAhk8863aDiwjMwCiPcJgO9W4BUik=
Subject key identifier:   DF:0D:5E:03:93:CD:33:6A:E7:A5:55:8B:B5:AB:48:0F:77:F6:D0:D6
Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F
Certificate issuer:       /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
Manifest number:          078C
Signing time:             Thu 08 May 2025 15:18:10 +0000
Manifest this update:     Thu 08 May 2025 15:18:10 +0000
Manifest next update:     Thu 15 May 2025 15:18:10 +0000
Files and hashes:         1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: ugaPD0nOaw6BSqAmbzucWZVU+EAV+kOxQT0Oqv4wvB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 15:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13, serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
        Validity
            Not Before: May  8 15:18:10 2025 GMT
            Not After : May 15 15:18:10 2025 GMT
        Subject: CN=681ccb32-46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:dd:97:08:c3:47:59:15:4c:1b:f0:b5:91:
                    c8:d1:85:34:84:c2:fd:24:dc:22:d2:a6:fb:58:2f:
                    61:96:37:d4:3d:c8:c3:60:a6:f6:18:3b:df:5f:ce:
                    4d:bb:b1:19:58:cd:86:95:75:e5:d7:e0:e9:2b:a0:
                    ff:1d:13:f5:c9:23:0b:aa:db:87:d8:bb:cd:e3:fc:
                    7e:03:26:6d:ef:04:3c:53:c8:22:0f:0c:17:3c:ad:
                    44:cf:c0:56:5d:36:03:ed:86:05:17:55:cf:4b:a3:
                    af:c7:9f:7b:87:f0:01:f9:46:46:c2:03:38:96:86:
                    9a:f1:be:e5:c3:13:da:3b:2f:90:36:df:bb:fb:a3:
                    e8:1c:03:23:9b:c8:f0:c7:2b:e1:af:78:24:51:25:
                    f6:0c:44:5b:f6:41:df:c3:dc:94:ea:92:9d:17:38:
                    cc:4c:e3:a9:9c:6f:5a:e6:aa:cb:0d:45:e6:52:66:
                    c9:82:96:6f:b7:e6:07:57:7e:a0:2c:f4:c7:f9:cd:
                    ca:b6:05:8a:d2:93:f6:ba:bf:30:de:8d:1f:66:39:
                    77:30:ab:11:b2:ba:30:e6:37:e0:9d:c6:24:e7:4d:
                    d8:6a:24:ca:74:ae:75:ec:65:a7:b5:35:a8:a1:2e:
                    18:0d:bb:72:d1:9a:06:1e:99:61:2e:28:18:d0:1a:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:5E:03:93:CD:33:6A:E7:A5:55:8B:B5:AB:48:0F:77:F6:D0:D6
            X509v3 Authority Key Identifier:
                keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:35:14:8f:1e:c2:44:26:d5:1c:45:e6:1a:6b:8b:24:dd:
         5d:ae:10:5b:15:41:6b:0e:5d:c7:fb:fc:83:a9:5b:e6:5a:aa:
         f3:b2:4e:f3:16:e4:1c:38:95:c1:c1:83:04:21:4e:6d:88:0b:
         d5:3b:4e:42:92:51:4f:2c:f8:95:75:c3:15:48:f5:6c:a9:39:
         73:1d:c6:27:ac:72:0c:b7:2a:00:4d:f4:8f:aa:4c:bc:39:88:
         b2:4a:0f:14:61:81:d5:62:e3:5d:42:e4:01:05:3d:1a:6d:98:
         d4:94:37:2c:0d:1f:98:77:63:2b:1e:bc:e0:a4:a0:b5:ed:80:
         9e:1b:d5:ec:fb:82:05:9b:83:39:51:a6:74:98:48:f3:23:d9:
         7b:7b:22:3d:b5:26:7c:d8:17:cc:50:a8:13:1a:00:e5:64:ae:
         c8:77:96:08:56:8a:e9:f7:85:12:73:35:47:aa:e3:c1:61:16:
         e0:62:c8:79:c5:41:d1:e6:70:41:c3:2a:d4:ae:19:90:ba:a0:
         77:42:d7:24:b2:bb:75:9c:6d:96:c4:be:a7:74:a2:ff:dc:03:
         88:cf:d6:ca:e5:2f:64:72:41:57:a4:72:6c:8a:53:a7:86:6c:
         23:68:53:ec:d1:5a:5b:2c:59:e4:f3:a3:18:a7:e7:8a:18:41:
         36:c3:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:40:40 2025 by rpki-client