Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          FX1pMsVbHkuO6nFu/F+7rY80WqTRakMFgCGg9moUcwY=
Subject key identifier:   6C:5B:0E:7A:AF:1A:2C:FD:18:42:B2:83:B6:BF:77:79:D8:2B:31:C5
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          0631
Signing time:             Fri 04 Apr 2025 14:47:41 +0000
Manifest this update:     Fri 04 Apr 2025 14:47:40 +0000
Manifest next update:     Fri 11 Apr 2025 14:47:40 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: 4X+VTTahd8yXP0rnobFhwyMd+hvJfnJkMEziaDjHFaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13
        Validity
            Not Before: Apr  4 14:47:40 2025 GMT
            Not After : Apr 11 14:47:40 2025 GMT
        Subject: CN=67eff10c-230c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:fd:fd:2d:47:b7:6a:5c:eb:8b:ce:89:5a:
                    6e:cc:c3:bb:15:dd:d3:18:ff:b9:40:f0:a3:0c:b2:
                    30:c9:69:d7:83:2b:c1:ee:6c:c0:1f:74:a1:22:96:
                    79:e6:25:78:bd:da:07:28:3f:c2:04:6b:1f:68:ca:
                    80:52:af:5c:9e:53:31:c3:6d:52:79:a3:86:7e:2f:
                    12:76:7f:18:07:33:bd:84:43:2b:cf:ac:cb:2c:34:
                    a4:ed:80:55:07:05:ec:fe:3d:db:e1:d9:bf:7c:18:
                    c1:57:81:5e:de:d0:a2:fa:b4:5d:53:9b:14:68:6c:
                    bb:74:57:76:3a:7f:92:61:4d:77:dd:c5:89:d2:48:
                    1b:ad:b2:00:d2:56:1a:83:2c:a4:27:09:24:ea:b1:
                    09:0a:29:54:7e:13:fd:90:48:a3:50:2c:d3:73:7c:
                    07:a8:a2:b3:58:1f:44:6f:37:d9:7d:80:58:d8:6e:
                    5c:c5:f7:ff:5b:7b:e7:73:8e:b3:0f:72:3f:cc:21:
                    bb:c1:c9:b1:90:f4:1a:ec:d1:67:ee:28:76:45:91:
                    ff:56:69:09:2c:af:9f:8f:e0:a8:50:9f:ff:f1:53:
                    e9:b5:e7:42:17:c0:dc:ad:21:53:21:69:bd:ec:9d:
                    34:9c:11:63:36:10:b6:f6:76:97:64:14:36:2c:c4:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:0E:7A:AF:1A:2C:FD:18:42:B2:83:B6:BF:77:79:D8:2B:31:C5
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:10:6f:36:e9:91:8f:41:77:5d:b6:5d:02:8f:c8:31:e7:
         44:81:b7:e5:76:2a:bc:a2:0e:a1:4c:1b:26:15:60:5c:89:c5:
         4b:3c:78:f1:15:64:8d:15:2b:bf:5c:e5:b9:a3:1a:43:ef:43:
         75:68:60:05:d9:58:fb:cf:11:a0:0e:bd:a6:57:92:48:27:e7:
         a5:b9:27:bc:03:1c:ad:30:8f:f7:54:cd:ea:90:a9:cb:15:f2:
         f3:ad:57:db:4c:a3:c8:80:e0:46:2e:83:f3:76:97:e1:15:1a:
         e3:c7:ea:68:1c:c3:b8:60:7e:ab:33:c9:64:b2:84:71:22:95:
         03:2a:e8:2d:48:c6:91:3e:5f:82:ea:19:2f:16:3b:31:c6:7b:
         73:5a:15:1d:cd:6c:27:b1:3a:33:66:34:76:8e:8f:b5:ad:ad:
         bc:d6:86:3c:77:39:f2:41:78:b8:13:82:db:46:19:27:2f:d9:
         9d:e7:8f:0c:93:84:59:5a:18:b1:32:e3:16:eb:3d:aa:66:df:
         eb:25:4d:d6:a6:64:54:27:13:f0:cf:2f:9f:df:b2:5a:fe:aa:
         77:70:d3:32:3a:ee:95:5f:54:68:f7:dd:74:52:b0:fb:30:39:
         d8:ed:c7:c4:58:2a:a5:e0:1f:cb:2e:3b:74:5c:8b:cc:9d:0b:
         ed:4b:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:49 2025 by rpki-client