Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File:                     ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier:          NC33S/2OozGOPWErD67AaklhiVPJeJJZl1hvFT12cAw=
Subject key identifier:   4C:D3:96:82:DD:BD:98:D2:9A:52:77:9C:A6:D8:7F:05:D1:B2:57:C3
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer:       /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number:          6A
Signing time:             Sat 03 May 2025 06:15:29 +0000
Manifest this update:     Sat 03 May 2025 06:15:29 +0000
Manifest next update:     Sat 10 May 2025 06:15:29 +0000
Files and hashes:         1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: aZz4usk/BnqZjqe/vLk13il+llKv0d2LoXmmEERxyvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 06:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
        Validity
            Not Before: May  3 06:15:29 2025 GMT
            Not After : May 10 06:15:29 2025 GMT
        Subject: CN=6815b481-060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:e5:d4:2c:a2:c0:37:ad:ca:29:3d:9d:7a:
                    60:65:4a:4b:99:0e:f9:23:c4:12:19:dd:f6:b5:d3:
                    dd:de:52:f3:4e:99:f4:d5:ae:9e:11:2b:3f:23:13:
                    3c:07:72:57:af:ce:ca:3e:a3:9e:53:55:e8:bb:29:
                    4e:ae:af:d1:49:1a:5b:3b:15:b6:a8:d9:1b:4c:a7:
                    8f:b6:71:9d:75:38:b7:e6:14:0f:87:9b:9f:7d:01:
                    83:9d:00:a5:e4:7c:3e:3f:33:30:ae:01:5e:63:16:
                    94:1c:03:a5:70:bb:86:76:fa:f9:fe:6a:cb:3f:80:
                    25:37:79:92:87:64:00:cd:53:e0:4b:1e:ca:3e:c5:
                    82:7c:db:e8:74:8f:e8:e4:94:46:ec:27:eb:93:b3:
                    7e:31:a1:93:dd:b4:5f:17:77:72:10:dd:ab:0a:f5:
                    26:50:da:d2:ab:aa:26:32:e0:26:3e:ee:17:1d:66:
                    ae:42:8d:23:67:2a:98:db:18:03:f5:31:b4:18:36:
                    44:82:bd:5a:12:f8:3a:71:21:1c:09:c8:71:0b:33:
                    db:6e:5e:28:d2:71:6f:52:b5:a6:f2:da:1b:cf:45:
                    af:9f:e6:85:76:93:02:16:d2:3e:45:75:b3:90:ef:
                    29:63:89:e4:5b:68:40:d0:6e:ec:d9:7f:1d:49:a8:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:96:82:DD:BD:98:D2:9A:52:77:9C:A6:D8:7F:05:D1:B2:57:C3
            X509v3 Authority Key Identifier:
                keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:37:c2:9b:bb:9d:59:a2:d3:b4:64:b6:48:a2:80:fb:52:
         f0:e2:3b:a3:eb:3c:09:ef:e1:b4:a4:67:ca:c1:d6:90:45:96:
         08:75:1a:e5:e1:39:62:b9:fa:89:da:7b:67:eb:be:df:87:79:
         5c:52:02:20:cb:83:b2:a0:97:a3:cb:40:46:ca:1b:c0:ff:34:
         6c:28:fe:09:80:29:78:46:d3:af:08:27:f7:c5:b1:6e:31:48:
         f9:95:5b:42:8f:ae:9e:1d:16:3d:92:f7:2d:f6:89:48:6e:ad:
         a2:16:95:ca:39:ca:1d:64:ff:f9:e7:bb:ad:6d:ec:c1:04:7e:
         cb:b7:42:8f:8b:09:38:e4:5b:13:95:06:c6:87:51:9f:fe:b7:
         54:f9:3b:90:56:51:83:0c:45:13:1c:a5:c9:b7:5a:9d:b4:d8:
         bc:22:ac:13:f1:58:48:11:51:c0:c4:00:d3:08:8a:3e:fc:b4:
         09:68:78:94:1c:cc:e9:45:d5:9b:3b:72:ee:bf:dc:ae:f1:57:
         a4:d5:e2:60:64:46:70:41:8a:8d:0a:84:ea:73:78:fb:6c:78:
         c4:66:c9:1b:bc:82:2a:67:ac:00:a5:2f:29:e9:53:05:ae:9b:
         19:5c:57:f6:dc:33:67:c9:42:3b:66:33:f0:60:e9:5d:01:e4:
         1c:e1:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:12:28 2025 by rpki-client