Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
File:                     sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json)
Hash identifier:          xOurraeaoHPwQ+LrYMOCTqUeDs0i6ADgY906RShh7o8=
Subject key identifier:   E6:E9:51:E6:8D:46:C0:BE:0F:8E:08:9A:93:D6:9B:E8:B1:A1:4A:0B
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Certificate issuer:       /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
Manifest number:          0272
Signing time:             Thu 03 Jul 2025 02:08:48 +0000
Manifest this update:     Thu 03 Jul 2025 02:08:48 +0000
Manifest next update:     Thu 10 Jul 2025 02:08:48 +0000
Files and hashes:         1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: p5lHsxO9IIHyN1L/nTjfekclhLNqUXwKMQiUM+agCrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
                          rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9327, serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
        Validity
            Not Before: Jul  3 02:08:48 2025 GMT
            Not After : Jul 10 02:08:48 2025 GMT
        Subject: CN=6865e630-417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:d3:9f:54:53:2c:83:32:36:54:18:c5:2e:
                    75:8e:2f:44:3d:80:75:29:15:21:58:5f:8f:ef:59:
                    e1:b7:77:9e:7e:a5:7d:88:ff:84:c6:dd:f8:f1:d6:
                    4b:72:b4:c2:6d:58:b9:b4:db:8c:a2:17:80:1c:bf:
                    ab:36:7b:fa:77:7f:a8:2a:7a:c8:25:33:5a:ae:44:
                    1a:33:fd:b9:fe:cb:3d:08:15:63:1c:51:a3:44:2d:
                    19:11:f8:07:d0:66:30:f7:87:a9:d2:ec:b1:3a:98:
                    0d:22:7d:2c:db:33:6c:1d:00:30:6c:e5:55:ea:36:
                    c4:0c:fe:91:2f:f3:10:79:73:30:70:c1:01:1d:7c:
                    c3:d1:04:64:18:7b:09:a7:b3:a6:da:c9:76:da:1f:
                    06:b3:47:03:25:65:2a:05:0f:be:a3:3d:74:ba:3a:
                    88:41:04:7b:d4:11:62:42:7e:ed:c7:ef:8f:21:b1:
                    73:da:f1:0a:b8:79:d0:96:c3:3e:97:41:a4:a9:25:
                    e0:2c:e8:e1:b9:c7:31:4b:27:32:66:34:8c:d1:fe:
                    cf:e3:9c:6f:78:30:d9:f4:c2:96:16:b9:ce:42:00:
                    df:22:4d:98:42:e6:a2:10:26:98:9b:d1:b6:c5:f8:
                    7e:01:6c:b2:35:47:3c:95:68:65:52:af:4e:80:4b:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E9:51:E6:8D:46:C0:BE:0F:8E:08:9A:93:D6:9B:E8:B1:A1:4A:0B
            X509v3 Authority Key Identifier:
                keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:80:b6:04:37:66:17:50:8c:3f:52:3e:a4:91:bc:7f:eb:7a:
         4b:21:aa:c8:5f:51:5d:60:0e:69:19:61:50:71:4b:23:47:38:
         c7:94:f0:6a:d9:aa:d2:fc:05:f4:f5:36:f9:4b:fc:42:46:8b:
         b1:ff:f8:01:b0:5b:0a:f0:c4:0d:46:fb:77:fe:27:9c:b6:91:
         2a:91:13:6c:5a:eb:a2:81:3e:d8:3f:82:be:31:08:9e:21:5a:
         b9:eb:77:f5:03:78:a0:e2:5b:81:4e:36:f7:d2:8a:75:78:13:
         d0:4a:31:c7:29:df:54:80:f1:9b:84:95:9f:5f:f4:b4:d8:23:
         e2:ea:89:76:cc:dc:be:47:85:1f:71:9b:ef:5a:ab:ef:e9:a9:
         da:01:73:69:49:0f:4b:4d:21:dc:f4:96:e0:8c:db:fb:81:a6:
         7c:27:63:ac:08:67:93:b2:78:a2:b0:f3:14:da:93:ab:bf:9c:
         96:f1:17:ee:ee:07:50:75:50:5e:ff:c0:6d:04:65:de:2a:50:
         06:68:8b:ec:90:b6:29:1a:79:d5:93:68:3f:a0:6b:28:7e:29:
         ce:59:26:29:9b:ac:bf:ac:f3:c6:6e:0a:03:58:e8:5f:95:ce:
         e8:e2:f1:9a:db:61:4b:ef:2c:8b:cc:60:28:f4:47:e5:13:04:
         a7:eb:88:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:46:20 2025 by rpki-client