Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          3KqZaiN7agKbgiBG472FPi4FmrlAH+tF3ZdpDOmiJig=
Subject key identifier:   50:D1:64:74:D4:58:5D:4E:30:B0:95:EF:38:9A:AF:F0:ED:16:27:3D
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          012B
Signing time:             Fri 09 May 2025 03:40:07 +0000
Manifest this update:     Fri 09 May 2025 03:40:07 +0000
Manifest next update:     Fri 16 May 2025 03:40:07 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: VYOvJSMq98Mo+0aLeeHssjymnVsq8YDb67GFh8UgO+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 03:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: May  9 03:40:07 2025 GMT
            Not After : May 16 03:40:07 2025 GMT
        Subject: CN=681d7917-d720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:d4:ec:98:46:21:58:87:4b:e7:5a:87:0d:
                    f3:50:07:04:19:d4:8d:4b:bd:ec:45:d8:fe:22:ba:
                    87:05:b4:dd:d4:38:da:0c:75:74:35:88:8a:53:26:
                    75:6c:f7:fe:a5:bf:0e:db:d0:42:62:f1:ce:94:e0:
                    4e:d6:8c:22:c9:df:d9:7d:75:1d:47:01:c9:80:ce:
                    0b:b8:13:12:d5:d3:37:dc:68:9e:67:4f:82:81:d7:
                    ce:61:2e:fd:78:c3:38:e1:38:6f:9f:18:26:ed:05:
                    7b:c4:f9:18:a8:63:33:4b:70:71:de:22:b1:ec:00:
                    94:79:ee:f0:1a:89:96:64:2b:25:53:d6:6c:e7:63:
                    b1:0c:85:9a:b2:34:44:e0:e7:2b:3e:96:04:08:93:
                    c9:48:9b:83:bb:78:3a:52:3d:9c:9f:3a:a1:94:c0:
                    aa:a1:1a:fd:93:b1:50:02:df:75:5c:ce:a6:89:04:
                    79:74:82:c0:66:ee:44:5b:21:8a:a5:66:fa:27:d4:
                    8d:66:b8:12:14:b1:d4:19:28:d2:41:32:c2:a1:ab:
                    c0:67:71:d9:50:1b:9b:27:46:5d:2f:25:c2:ef:62:
                    d2:8f:c1:ce:75:82:ad:ed:fa:e7:a0:e4:69:3d:65:
                    f6:c3:20:4a:c8:c9:dd:01:9d:d2:d8:62:0b:f8:f4:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:64:74:D4:58:5D:4E:30:B0:95:EF:38:9A:AF:F0:ED:16:27:3D
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:df:c9:23:7d:b6:25:f4:74:00:14:a1:2d:70:32:33:9d:15:
         c8:ff:ad:46:f9:8b:89:fe:3c:32:6e:9d:8c:ec:7f:5d:e1:d7:
         4b:e8:ed:d2:a7:11:a4:b5:80:71:4c:8e:85:a1:0c:48:e4:d5:
         0f:94:61:55:ba:80:59:82:30:9e:1b:39:e4:51:d6:9a:da:e6:
         96:ff:ab:ac:12:49:5c:70:89:b1:ff:88:c8:81:69:5e:27:67:
         22:71:60:28:47:dd:68:50:0b:9e:e7:47:72:76:11:e1:2a:4e:
         29:9e:21:fd:a4:3a:57:13:ed:76:ed:31:49:e2:e0:bd:7e:01:
         c8:76:15:0c:94:1b:9e:89:e6:30:0b:88:b8:e1:b7:58:d1:08:
         59:4b:5c:b0:38:ff:2a:b6:dc:a0:1c:67:b5:b5:02:cd:e8:ee:
         5b:8d:e8:00:92:d9:f7:77:34:77:15:96:8c:b1:ab:4b:88:30:
         d5:e0:93:2d:9f:be:e6:af:27:4a:4f:78:0f:e3:11:cd:a9:f6:
         9a:26:d6:39:7c:a2:1e:00:5a:eb:d9:2a:09:75:cb:20:78:25:
         0e:f9:9c:ba:93:f2:42:15:24:65:e6:ec:b6:5d:8a:81:be:5f:
         fa:ff:8b:d2:b4:d0:0c:36:1d:17:35:d6:c3:79:b3:87:2d:ec:
         36:6c:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:52:56 2025 by rpki-client