Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
File:                     UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft (raw, json)
Hash identifier:          ZMvKvxjlZ2OhhR/1pSbmvM2fhe+STQjOiZUMxQ+DOX8=
Subject key identifier:   E2:FC:93:99:58:91:79:46:46:42:10:2D:5D:5F:BF:A2:41:BE:BF:E3
Authority key identifier: 50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57
Certificate issuer:       /CN=A9137242/serialNumber=50FBB403643473F991273626277A922C0706AC57
Certificate serial:       0D4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
Manifest number:          14BA
Signing time:             Fri 04 Apr 2025 18:06:30 +0000
Manifest this update:     Fri 04 Apr 2025 18:06:29 +0000
Manifest next update:     Fri 11 Apr 2025 18:06:29 +0000
Files and hashes:         1: UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl (hash: 8q9WppmmtUXkbuEwDeUjYwTD2rEKgFMUK/XuWnZXVWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242
        Validity
            Not Before: Apr  4 18:06:29 2025 GMT
            Not After : Apr 11 18:06:29 2025 GMT
        Subject: CN=67f01fa5-3cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:50:53:78:67:d6:5d:90:cb:81:47:88:6c:
                    1f:98:a6:b5:83:c3:38:8c:e7:11:6a:fb:f4:ad:ee:
                    14:51:f1:c3:1c:b0:86:61:35:9b:91:b4:0e:8d:cb:
                    dd:dd:29:ed:a1:53:90:df:37:2a:df:b8:ab:8b:70:
                    b0:34:eb:a2:ff:7b:7c:cc:93:30:32:68:d5:19:53:
                    d9:82:39:99:5e:dd:95:dd:1c:73:be:0c:6b:cd:71:
                    e0:6f:f0:cc:68:ed:67:db:0f:a4:5c:9c:7b:e0:3b:
                    fd:0e:7c:0a:3d:25:5b:e6:06:b0:2f:f3:4e:04:92:
                    57:d7:36:44:03:5a:27:2a:5f:39:58:84:4d:ce:4f:
                    a4:ef:7c:e7:30:c3:26:5a:8e:ff:64:f5:e7:59:56:
                    89:6e:be:33:30:88:b1:fa:56:9f:91:d3:a9:98:cb:
                    83:c1:f9:7a:e3:3a:32:ed:65:f1:ad:aa:e7:a1:30:
                    ff:d1:4d:70:dc:ae:7c:84:d4:f0:6a:08:34:6f:1e:
                    7b:1c:4f:24:07:c0:00:f8:6e:cf:16:b1:5b:c1:84:
                    93:ee:00:54:9c:14:52:55:df:e5:97:93:a1:05:00:
                    26:05:75:9a:4c:fa:e3:0f:8e:44:9d:f7:26:e8:3e:
                    26:9b:f6:18:7c:a9:df:d3:49:08:61:44:b3:20:96:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:93:99:58:91:79:46:46:42:10:2D:5D:5F:BF:A2:41:BE:BF:E3
            X509v3 Authority Key Identifier:
                keyid:50:FB:B4:03:64:34:73:F9:91:27:36:26:27:7A:92:2C:07:06:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/UPu0A2Q0c_mRJzYmJ3qSLAcGrFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c3:89:0c:ee:81:c8:2b:9d:c2:74:35:eb:c7:60:b5:16:32:
         d4:86:77:2f:9e:ce:73:e7:be:4b:01:d1:1a:b2:2a:0b:b9:1a:
         38:1f:84:a7:d1:c6:15:8c:08:a1:90:17:36:d1:8c:8b:95:88:
         98:34:4a:93:59:61:07:32:af:64:4b:c6:78:b7:42:02:39:a1:
         67:da:fc:6d:66:79:10:89:ac:d5:c1:2e:31:67:8a:31:cd:91:
         7e:8f:cf:c8:ec:e1:8a:95:a8:5d:f4:da:98:66:e1:fb:70:5b:
         51:cc:1d:bc:b1:65:e1:17:9b:9f:86:09:72:3b:c9:bc:4f:95:
         a7:6d:47:de:8b:43:d1:32:5e:b4:b4:75:d5:e0:2e:87:13:7c:
         2f:21:16:98:d7:ab:df:d4:25:78:6d:54:35:e2:a4:18:8e:ff:
         3b:9e:1a:78:b9:f3:86:8c:52:7d:ef:a6:7c:ca:b3:09:82:a7:
         71:d1:ab:42:5d:8d:c7:66:7b:6f:d7:f6:c3:e4:7d:6b:31:40:
         09:de:13:dd:07:e0:72:6a:f0:1b:fc:21:1f:84:c6:c1:56:c3:
         4d:a3:2d:d3:cb:90:dd:6e:8c:bc:44:e3:e5:c3:f0:80:eb:e2:
         8b:59:4d:bb:20:4b:9a:65:58:c1:33:eb:81:cc:d1:34:1c:5e:
         99:54:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:40 2025 by rpki-client