Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          /z9Ik1gEhXCYkoLYRMZhMe6g6GQFIs+S/tafI98Q/6I=
Subject key identifier:   F2:B5:8B:75:28:2A:6C:08:F7:AC:70:3F:3B:93:B5:22:10:FA:B6:90
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          93
Signing time:             Wed 09 Apr 2025 05:13:09 +0000
Manifest this update:     Wed 09 Apr 2025 05:13:09 +0000
Manifest next update:     Wed 16 Apr 2025 05:13:09 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: KaT8Y4iveY2KzvZtpJtsB29iENrN2Qe5yjCDSf68IE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0
        Validity
            Not Before: Apr  9 05:13:09 2025 GMT
            Not After : Apr 16 05:13:09 2025 GMT
        Subject: CN=67f601e5-0b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:62:13:cc:ac:74:27:d6:7b:f8:18:ca:4a:
                    36:cf:69:52:f8:96:5f:8b:00:57:ff:5e:a5:81:13:
                    7c:22:ee:c2:c9:2d:bb:fd:e1:61:26:0b:db:5b:59:
                    3c:7f:4a:5b:c3:3c:4c:be:a2:11:92:cc:1b:09:86:
                    1d:28:95:71:2a:f7:db:e1:6b:77:85:8e:5e:2d:46:
                    7f:7d:5e:d8:cc:90:6b:e4:da:26:fe:69:e8:fd:49:
                    c7:4d:0e:30:67:aa:d7:16:24:23:f2:5b:4b:4d:c7:
                    55:03:92:b8:84:07:02:6b:a4:c8:bc:0e:f5:9f:dc:
                    4c:aa:7e:ca:5b:74:c4:95:87:c5:81:1e:fc:dc:61:
                    6c:74:4e:21:cb:74:4f:ba:09:7f:65:4b:d1:0c:5d:
                    88:97:8d:b2:69:fd:69:ac:de:d5:4f:a7:97:b5:4d:
                    79:ec:2a:5d:1b:1f:2a:e2:37:91:a4:f5:6e:09:38:
                    96:3f:ce:61:73:99:0e:34:f3:81:53:97:28:d8:ba:
                    e5:06:1f:fa:6d:27:04:39:b2:2e:81:c9:c2:dd:26:
                    ca:ae:d6:f1:e0:b3:50:5b:7e:37:89:11:7b:2a:e9:
                    2c:75:cd:b1:17:c7:e7:23:cc:65:76:d8:3a:b8:4a:
                    85:f9:c9:65:6a:70:31:c1:95:29:f5:18:a9:66:02:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:8B:75:28:2A:6C:08:F7:AC:70:3F:3B:93:B5:22:10:FA:B6:90
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:8d:11:f1:5e:c3:40:eb:06:17:87:85:a1:31:de:c7:27:
         70:b8:c0:53:31:e8:bd:3c:fd:52:e8:4c:5a:b2:da:e0:1f:93:
         cc:06:c9:64:62:3d:52:23:aa:86:6c:d4:78:93:48:93:74:b5:
         69:b3:fd:04:5f:57:54:b3:24:ba:8b:2b:a0:12:dd:fc:d6:48:
         02:1e:dd:b2:31:b0:65:a5:49:6f:d6:05:c4:5e:54:ea:07:30:
         b9:4e:da:83:a4:75:71:de:98:cc:25:1c:80:e7:ba:7d:04:f6:
         58:e0:d8:e3:d0:e1:0b:d2:33:5d:65:9d:b2:49:9a:10:a2:e2:
         13:18:ed:54:6d:99:ac:d2:0f:39:d3:02:2a:8b:5c:80:fb:e2:
         17:3e:c2:9a:52:ff:3f:52:4b:7b:15:e4:c8:a9:68:03:ba:e0:
         2f:b9:2f:04:77:48:f9:d9:e9:8e:a1:d2:27:e0:e9:ff:d0:7c:
         36:c3:be:d1:51:09:cd:48:1a:06:bf:bd:d5:13:0a:67:f1:65:
         e6:79:d4:69:e5:29:fb:43:91:ee:8e:70:31:85:41:21:d2:e9:
         69:d7:7a:b6:5e:82:57:19:3f:32:c9:e9:64:7d:91:cd:c6:5a:
         f8:b2:a9:59:e5:04:66:64:a7:d6:ed:6a:37:8c:1c:67:e8:bd:
         d8:cb:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:40:42 2025 by rpki-client