Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File:                     C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier:          JEZ4IRKjGhpPG/Togl30wl1b8mUGA+p+cWTyRYgMBeI=
Subject key identifier:   A3:47:7C:5B:3F:98:94:E7:76:50:75:D3:BF:7C:78:CC:86:13:0B:47
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer:       /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number:          6A
Signing time:             Thu 03 Jul 2025 07:12:20 +0000
Manifest this update:     Thu 03 Jul 2025 07:12:20 +0000
Manifest next update:     Thu 10 Jul 2025 07:12:20 +0000
Files and hashes:         1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: VpY8hH4VOOavqFYGcftAA0EXWo7aUobyNZxrIlFwPj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
        Validity
            Not Before: Jul  3 07:12:20 2025 GMT
            Not After : Jul 10 07:12:20 2025 GMT
        Subject: CN=68662d54-4215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:3b:99:f7:30:10:11:d9:57:32:74:bf:ad:
                    36:09:07:84:b3:e5:15:d6:ce:46:5e:a5:81:27:44:
                    85:2e:31:77:31:45:97:25:cf:b1:c6:b8:7e:1a:28:
                    9e:cf:16:75:4a:69:4b:77:1b:42:94:89:30:e0:93:
                    7f:aa:7d:70:43:56:e8:00:0e:43:98:97:61:73:69:
                    34:cb:b4:f5:57:38:b1:48:90:67:94:6e:9e:3f:94:
                    a5:51:42:ad:a1:78:f4:27:52:9c:b0:a7:c0:dd:67:
                    48:27:0e:8e:cc:4e:aa:4a:ac:5f:89:7f:c2:81:30:
                    e7:42:b5:39:7d:35:c0:9f:e0:52:2d:a3:d9:bb:03:
                    96:78:c5:48:95:24:2d:ab:72:0d:63:1d:2d:b2:0e:
                    19:a0:2d:58:2a:04:fc:82:b3:a1:b6:bf:60:0d:21:
                    ec:7e:18:74:35:79:b1:da:d9:61:0f:ca:b0:8f:5a:
                    6f:5c:f5:5c:22:e4:0a:cf:db:50:ac:5e:01:d5:fe:
                    02:96:77:70:b9:0e:01:e3:41:da:68:9e:b7:bc:22:
                    c7:b9:af:dc:dc:8c:9f:6d:c7:0e:85:a6:06:16:fc:
                    04:4c:cc:e1:82:e6:26:13:05:12:cf:81:b0:19:86:
                    95:f8:a3:d2:6b:2e:d2:c7:fa:7e:8d:74:8d:60:38:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:7C:5B:3F:98:94:E7:76:50:75:D3:BF:7C:78:CC:86:13:0B:47
            X509v3 Authority Key Identifier:
                keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:0a:be:15:53:13:9d:1a:60:ac:dd:ce:80:f1:ec:b0:8d:
         b8:44:fa:b3:eb:c0:04:b2:e5:f3:8c:9d:eb:c1:37:b9:d8:c9:
         64:a8:9d:d5:3a:42:c1:d8:a4:57:a6:eb:42:28:f6:22:cf:8b:
         31:b0:2c:df:6b:cc:d5:c2:a0:9a:c7:08:3e:62:30:18:52:a7:
         7c:f0:1f:f8:e0:c3:1f:7a:ff:a0:35:0c:17:ef:de:f7:d6:8f:
         35:39:de:ad:a8:02:3a:bb:8f:db:0a:2b:d2:00:9b:36:7b:3c:
         a4:ce:f8:01:be:88:d4:d5:33:fd:6d:ca:3a:2d:f4:32:2b:1d:
         0a:fb:ea:50:7b:4d:43:7b:cd:e2:92:b3:8b:09:8f:44:01:1f:
         b5:38:e5:b9:c7:05:c0:5c:6b:c2:18:89:d7:58:6e:1f:18:fe:
         b1:f6:93:aa:00:f3:ce:6d:f6:de:56:f6:ae:f8:59:46:4e:95:
         ad:e7:04:7e:b4:d9:69:04:b7:2d:55:c7:90:15:a7:d8:7d:75:
         0f:cf:05:80:7b:90:fc:a4:04:5a:84:b3:c0:12:eb:c5:e6:cf:
         17:f0:1d:4c:76:2a:4d:f0:14:c1:20:9a:b8:50:bb:84:c2:72:
         0b:6a:0a:e4:b9:d4:bc:c0:38:b7:d7:27:7b:44:19:44:06:ea:
         07:90:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:44:38 2025 by rpki-client