Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          Q3TtApSaJ/GojSoSOA6F1p85t0/heDHMGYFsymzxqTQ=
Subject key identifier:   B1:50:48:08:22:25:2B:BB:E9:83:AF:69:1B:87:5D:05:55:78:C1:B8
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          4F
Signing time:             Sat 05 Apr 2025 06:32:55 +0000
Manifest this update:     Sat 05 Apr 2025 06:32:54 +0000
Manifest next update:     Sat 12 Apr 2025 06:32:54 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: kERRSP8WbHRR0MP9zBYcTon0gjdj/pD5Ay/UTBoQGAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 06:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D
        Validity
            Not Before: Apr  5 06:32:54 2025 GMT
            Not After : Apr 12 06:32:54 2025 GMT
        Subject: CN=67f0ce96-3fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:60:f0:18:d8:05:69:18:e4:d9:a2:97:75:
                    3e:18:ac:0a:40:35:b5:4a:bf:9d:6e:c2:8f:00:9d:
                    5c:0e:98:b5:5a:d6:49:c8:ec:3f:06:1f:cf:bd:6f:
                    74:24:64:c2:7c:1f:7f:c6:dc:30:0d:b9:a1:d2:d3:
                    b8:01:e5:7d:25:00:8f:72:4f:0d:6e:b0:75:2c:fa:
                    d0:14:6c:38:24:2d:d7:b7:36:07:d7:31:65:32:f8:
                    77:7f:84:a5:09:2f:8b:b7:a7:63:80:e4:87:6d:25:
                    ec:90:5b:59:8f:c5:81:d2:a9:3f:79:60:fb:6a:ac:
                    e7:bf:38:b6:d0:ad:ce:ab:19:8e:7a:60:4b:85:b8:
                    1c:57:b2:79:ea:48:94:0f:e4:95:29:ea:c7:66:0c:
                    9e:29:65:93:8a:5c:bd:ff:3d:af:fe:0d:c5:7f:c1:
                    71:05:cd:61:af:79:44:19:1b:f4:2b:73:1d:f0:fb:
                    b0:1e:d3:35:fc:ba:06:9e:6b:7e:f0:b7:15:c6:9d:
                    e5:1d:8d:e0:c5:44:76:65:5a:69:40:0e:ce:ff:8c:
                    24:af:8e:57:7b:f5:a6:94:4f:9f:0d:f7:48:5d:a2:
                    87:31:98:79:ff:d1:d4:07:fd:93:5e:bb:24:dc:9a:
                    81:18:59:c8:b6:08:c2:6a:ea:45:dd:f5:05:10:86:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:48:08:22:25:2B:BB:E9:83:AF:69:1B:87:5D:05:55:78:C1:B8
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:08:2e:75:ed:26:14:f3:3a:f0:3a:e6:13:c7:d0:53:82:
         d7:51:51:92:5d:89:4e:f2:1a:bd:7c:6b:ee:80:aa:31:b5:36:
         78:6f:bd:23:9f:34:b9:f1:f6:89:4c:72:41:ad:66:2e:cf:f0:
         04:dd:18:2e:2d:e3:c3:54:4d:3c:ad:cb:7e:27:4f:64:1f:9b:
         a1:4e:20:62:bf:ad:0a:a9:cc:9e:6c:45:34:dc:6a:87:c7:be:
         c3:06:33:de:61:33:b0:7a:1c:77:6b:38:fb:f7:b0:5c:49:0b:
         5b:21:5a:0a:ec:84:f1:0a:46:10:62:ee:4e:c3:3c:5b:15:26:
         f8:7a:9b:1a:af:a2:44:5b:a8:e0:22:13:49:d9:42:4d:01:c0:
         81:65:e8:b4:d6:c7:66:1c:66:dd:66:71:81:3c:2c:80:64:84:
         8d:6f:ed:a1:3e:fc:f1:31:bb:2d:a7:c8:d6:00:c3:93:f2:1d:
         ad:85:55:2a:82:17:25:d1:ea:04:3c:fe:09:f9:62:2f:e1:78:
         d4:b4:85:60:5b:9c:50:71:c9:41:ce:62:55:24:ed:9f:da:41:
         a1:d8:0e:ba:62:ea:8f:2b:7a:0d:0f:91:d9:4e:d2:26:ca:34:
         d5:65:76:b0:79:01:b7:9e:e2:ee:a8:93:e6:e9:62:44:62:4c:
         b6:11:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:11 2025 by rpki-client