Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          3/DoZYWlDLUEugEDQxAX1GREOP+IzOyofwcmFkb3obk=
Subject key identifier:   88:01:54:67:CA:D2:7F:F1:6C:A7:E0:00:57:6B:DE:F0:3D:20:DE:20
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       346C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          346C
Signing time:             Sun 06 Apr 2025 15:00:23 +0000
Manifest this update:     Sun 06 Apr 2025 15:00:23 +0000
Manifest next update:     Sun 13 Apr 2025 15:00:23 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: A7Jv9C8BF4eXDjOHPhUhQ5eZs82R6pb/uGQxpxG78hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13420 (0x346c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479
        Validity
            Not Before: Apr  6 15:00:23 2025 GMT
            Not After : Apr 13 15:00:23 2025 GMT
        Subject: CN=67f29707-6989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:2e:8b:10:1e:6c:cb:43:c9:6c:79:db:24:
                    b2:e4:38:56:74:5d:53:bc:64:14:ce:7d:d2:94:53:
                    d8:44:2e:ae:16:55:78:32:c0:3c:67:fc:7a:50:c0:
                    58:d1:d6:7b:71:00:6c:e9:e5:b0:a5:8b:7f:c0:5a:
                    ee:2a:10:cf:b7:6c:d6:8a:e8:5a:e9:f5:49:56:d8:
                    b7:46:be:d5:23:05:88:2e:9e:17:76:b0:ed:8e:65:
                    be:d4:61:7e:14:94:94:9c:05:0b:4b:b0:39:18:c1:
                    c2:4f:a0:7e:0c:45:13:59:4d:5c:c1:c8:c2:cb:91:
                    37:54:1e:82:cf:c3:94:a7:59:7e:35:63:99:ff:50:
                    50:02:d3:bc:7e:fe:ae:42:13:b5:9a:9f:c0:87:34:
                    3c:c0:93:36:1a:8d:ae:34:f0:ff:94:76:2b:d1:5a:
                    8a:7c:f5:a9:a8:ee:da:95:ed:2e:00:c6:bf:01:bd:
                    92:3b:93:84:f0:b8:9c:1f:29:d0:1d:3c:b9:d6:ce:
                    4c:d4:27:33:57:0e:a9:3e:61:ff:05:2e:c0:b4:51:
                    6c:b6:32:c7:da:43:54:78:76:8d:72:cf:12:b4:15:
                    f0:19:10:7b:77:64:be:65:35:a5:8d:e3:7f:65:37:
                    71:41:39:3d:ac:86:c6:68:95:c8:bb:37:66:4d:90:
                    69:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:01:54:67:CA:D2:7F:F1:6C:A7:E0:00:57:6B:DE:F0:3D:20:DE:20
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:37:e4:23:bd:0d:c9:d3:c0:71:25:01:c5:b2:4d:70:8e:
         e8:17:8b:69:7e:1b:8d:4d:fc:b7:af:10:2a:b9:ed:93:90:19:
         f9:61:91:da:df:d3:be:56:9f:4c:98:6b:ef:0f:88:0c:b4:01:
         c7:db:ce:08:44:cd:d5:2b:16:da:c3:6f:13:57:e5:0e:4b:bd:
         6f:d9:82:2c:c8:59:1b:21:dd:81:f9:43:2f:8e:38:42:2c:ac:
         2f:4f:5f:42:19:7a:e8:4e:1e:00:af:2d:de:49:69:5c:99:9e:
         3b:a6:f0:5b:3e:40:75:fd:1a:e7:c4:3b:26:17:53:c1:c5:39:
         02:75:19:e2:f1:72:57:5a:73:14:2e:8e:8c:59:5d:b1:30:e2:
         73:00:fe:fd:e5:0f:2d:6b:29:9c:55:37:df:1b:96:25:ad:ed:
         1f:3a:fb:6b:5e:49:41:bc:14:c7:fb:07:e0:10:df:e8:1d:55:
         2c:e2:4e:5c:58:9c:d4:d7:11:eb:cb:bc:bf:db:5d:1c:53:22:
         92:6a:35:4c:bf:bc:f7:0f:d6:fd:a1:b8:1d:56:63:3d:96:05:
         45:9c:08:90:f9:c5:96:bf:a4:00:fe:67:61:f2:f7:0e:fe:d6:
         31:f5:df:7c:a1:6b:67:aa:92:6a:1c:1c:d6:b5:ba:d2:b0:ce:
         b5:39:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:45:01 2025 by rpki-client