Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
File:                     gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json)
Hash identifier:          LzKLVlMYp3R21oufxbNUjlULLcrRZK8HCB3Tf2TPp5I=
Subject key identifier:   79:DD:F6:C5:73:5D:2D:8A:D2:8A:57:96:94:F4:B4:D4:D4:CA:79:72
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Certificate issuer:       /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
Manifest number:          1C
Signing time:             Sat 29 Mar 2025 07:17:08 +0000
Manifest this update:     Sat 29 Mar 2025 07:17:08 +0000
Manifest next update:     Sat 05 Apr 2025 07:17:08 +0000
Files and hashes:         1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: XLM5k5Ta7ujgEfcGFIwxZ2XyLAUhvKfQwRZFSaCn6vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
                          rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134A42
        Validity
            Not Before: Mar 29 07:17:08 2025 GMT
            Not After : Apr  5 07:17:08 2025 GMT
        Subject: CN=67e79e74-0df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:7f:ba:1e:e8:0a:f1:c0:f7:28:f7:de:09:
                    95:87:d0:7d:ba:60:c4:20:cb:49:41:91:71:fd:68:
                    1a:4f:22:a9:50:18:b9:bd:f2:52:7e:98:26:4f:ac:
                    27:b3:29:d6:0b:83:b2:58:aa:77:57:ca:d8:db:15:
                    0f:e3:3b:41:0b:cb:84:ec:b7:d9:fc:cd:89:d0:08:
                    78:ea:32:67:af:a4:1d:b9:be:24:96:51:8a:ca:fd:
                    99:69:18:17:b7:b1:b7:db:20:79:74:46:ac:13:44:
                    83:79:44:8e:73:4d:ed:98:e7:2f:de:99:88:9a:7a:
                    cb:46:1d:82:ad:9c:c7:4c:01:81:44:ba:3f:2a:3d:
                    fb:a8:f1:22:f8:50:98:6f:18:d7:18:c4:f7:79:d9:
                    e5:e4:7c:1f:3e:02:02:b9:76:0e:26:78:61:15:75:
                    ec:26:91:f7:25:95:5e:b5:52:b2:58:50:ad:77:d1:
                    ff:c0:f9:33:2c:55:bd:78:a7:d9:36:e2:c8:7d:ae:
                    41:85:8b:28:2f:41:7f:c6:8f:4a:a9:51:c7:f6:b9:
                    e3:40:2f:aa:d5:8a:d0:7d:32:44:7f:8a:9d:8f:0c:
                    d5:ab:11:e0:fb:17:51:dd:96:ca:dc:51:4f:fd:7c:
                    58:5a:9a:30:3c:b4:53:63:46:ff:4a:75:c4:69:36:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DD:F6:C5:73:5D:2D:8A:D2:8A:57:96:94:F4:B4:D4:D4:CA:79:72
            X509v3 Authority Key Identifier:
                keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:17:9b:a9:a1:9a:5f:c7:e6:72:62:90:7f:1d:be:a0:d9:
         49:e2:37:66:b2:e9:62:fb:e4:da:b1:b1:a3:77:ce:4b:40:9c:
         7c:25:3d:8d:88:05:ea:ca:7f:21:21:f7:35:16:a4:a0:25:7e:
         84:fe:ec:2c:62:28:75:37:cb:71:27:df:0f:f5:69:48:ba:81:
         4b:ba:f7:1e:20:43:3c:82:53:95:58:f8:fb:e1:8b:7a:34:f0:
         8b:2f:22:b8:fa:9a:71:20:8d:ae:59:0b:50:9c:fb:85:01:9e:
         7c:29:cb:6d:cb:d8:29:cc:dc:5d:a5:96:f6:52:fd:8f:56:33:
         0e:f7:ad:ed:3d:c7:5e:58:ca:62:25:58:c3:b7:ac:12:25:51:
         bf:ce:c3:18:f8:2f:48:e0:ae:56:8d:bc:38:8f:a7:3d:d8:c7:
         fd:a7:db:01:80:1f:24:07:b9:ca:09:2d:e1:cf:04:1c:a2:9c:
         ae:77:24:73:f7:61:f8:4d:44:0f:6f:e0:c0:7f:d1:c0:04:a3:
         41:48:69:be:28:32:6f:f6:af:65:9e:e0:d7:d0:d2:01:e6:47:
         51:dc:5d:29:41:37:28:21:e0:f1:13:31:7c:b5:78:c2:01:7d:
         d9:44:e0:e2:8d:ff:56:bb:b4:62:ae:b3:71:df:8f:88:52:28:
         5c:85:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:03 2025 by rpki-client