Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File:                     oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier:          DcFDXAsc2YyQeMeHCb0WkEl0l91oeGVKxXB9XjVEHUg=
Subject key identifier:   07:BA:C1:AA:20:1B:FA:DA:B9:66:90:91:71:3C:2B:9D:F5:53:ED:6E
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer:       /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial:       0922
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number:          2017
Signing time:             Tue 08 Apr 2025 16:39:24 +0000
Manifest this update:     Tue 08 Apr 2025 16:39:23 +0000
Manifest next update:     Tue 15 Apr 2025 16:39:23 +0000
Files and hashes:         1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: UCxdggXp2TJmIWN9pDL0WV/sRpjuA8eWzBitiHdFloo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 16:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338 (0x922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5
        Validity
            Not Before: Apr  8 16:39:23 2025 GMT
            Not After : Apr 15 16:39:23 2025 GMT
        Subject: CN=67f5513c-49c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:fc:99:c2:67:5a:48:db:9e:78:97:35:44:
                    c6:bd:e3:f4:ef:5f:26:cd:c0:34:a1:bc:c9:2a:8c:
                    0c:03:2a:f5:8b:d2:61:e7:88:bb:88:8d:59:6b:a7:
                    6f:62:46:4b:9d:ff:38:39:3c:65:0b:bb:fd:9c:69:
                    1f:b2:8e:9d:2a:75:48:14:db:fd:d4:04:01:2a:d2:
                    e2:98:af:cb:70:20:dc:4b:8c:d5:2f:ad:a0:2f:b7:
                    b1:84:b9:93:27:b4:3b:89:0d:4d:f5:83:25:7e:1b:
                    70:f6:d8:55:c1:a1:fd:0a:e4:b1:c3:7b:e0:83:0e:
                    5f:dd:68:73:1c:af:bb:b6:2d:a1:41:b5:7c:ad:0f:
                    2d:de:75:25:eb:4f:38:11:52:f7:b2:c1:69:ef:22:
                    49:36:f0:ad:93:dd:b0:c5:a2:4d:d5:6b:28:5b:5f:
                    19:44:7a:67:25:bf:b0:81:f8:6a:9a:ac:62:7d:bc:
                    99:50:fd:42:91:95:7a:d1:44:85:be:93:cd:de:51:
                    52:d8:ae:46:94:27:b5:47:e8:97:81:ba:53:1a:1b:
                    65:d9:1c:cc:46:9e:2a:4f:8e:b4:6e:f5:ba:7b:12:
                    ef:04:47:cf:4e:b8:1c:c3:86:d2:18:6b:68:f4:aa:
                    a2:a6:32:10:99:32:cf:8e:53:41:81:11:b5:6f:36:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:C1:AA:20:1B:FA:DA:B9:66:90:91:71:3C:2B:9D:F5:53:ED:6E
            X509v3 Authority Key Identifier:
                keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:47:09:79:11:01:3f:65:63:0c:78:c1:3f:47:71:96:f9:be:
         31:8f:9d:3c:e2:54:8a:78:17:7a:01:22:91:9f:70:c3:ee:19:
         e1:79:ff:af:37:35:dd:ea:85:f0:2b:a2:d9:88:05:6c:e5:9f:
         f2:ac:7b:f4:c9:da:ef:3b:52:47:ac:85:28:6c:e0:d9:25:77:
         d1:80:b8:ea:83:43:66:fd:a8:8a:79:1a:4e:c5:e9:b2:d7:6a:
         ce:72:cf:f2:c4:79:2f:8a:e4:bb:6b:08:8e:4e:95:07:c4:3f:
         92:1f:bd:f6:ee:1b:2c:2d:10:b4:17:eb:ff:0c:1e:e8:27:e0:
         86:1c:42:ad:c5:75:ba:b0:33:03:28:c0:df:22:f8:da:8f:2f:
         4a:c8:b0:e7:78:5f:76:4b:14:1a:d3:11:d5:46:b7:e8:6b:70:
         a8:2b:ad:1c:43:a5:61:28:5f:ba:2d:17:d4:c2:d4:f0:31:95:
         15:ce:a1:ad:b4:c9:a5:69:48:e9:e5:6d:b9:bf:6f:ad:d1:27:
         77:c7:6c:4d:a0:96:f1:01:cd:2d:9f:59:8a:10:6b:85:54:db:
         b9:0c:d3:79:65:4f:7c:9b:3b:21:57:0b:20:51:32:3c:92:70:
         1b:bc:cb:80:b2:25:73:45:27:7f:fd:d9:f6:13:dd:e9:d6:6e:
         86:e3:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:36 2025 by rpki-client