Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File:                     ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier:          rPSWO/DqSJcwFyW62hBBXLtkS9Ct5pkmb9MUqMDrw8s=
Subject key identifier:   7B:1D:9B:A1:94:45:68:85:E9:16:64:DA:EF:9D:74:4B:9F:86:EA:3C
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer:       /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial:       3466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number:          3466
Signing time:             Fri 04 Apr 2025 14:51:59 +0000
Manifest this update:     Fri 04 Apr 2025 14:51:59 +0000
Manifest next update:     Fri 11 Apr 2025 14:51:59 +0000
Files and hashes:         1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: pnKWWPUdgv+RmU18HuO2nBTaT6D21C6VD0k6Vvs/HwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
                          rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143E57
        Validity
            Not Before: Apr  4 14:51:59 2025 GMT
            Not After : Apr 11 14:51:59 2025 GMT
        Subject: CN=67eff20f-d990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:ee:92:43:57:47:4a:fb:26:54:ec:c6:18:
                    fc:18:9e:d4:de:ca:3b:d0:77:df:c2:6d:d9:fc:1c:
                    a0:74:94:14:7c:8d:cd:98:8d:cd:c0:5e:f4:c7:90:
                    6b:0d:36:7e:40:d2:37:2c:a9:17:ad:13:f9:e4:4f:
                    a8:71:f0:10:ac:bb:9e:54:b6:c1:47:34:c8:e9:8f:
                    77:6d:0d:ce:15:e0:56:20:74:49:fe:af:33:ae:c8:
                    13:d6:78:6f:1b:dc:92:cd:94:b8:f1:39:f3:2d:54:
                    e0:09:c4:ba:cc:dd:23:a5:8f:6d:59:02:c2:96:cf:
                    d9:49:f8:99:43:a6:65:72:8c:e1:4f:08:52:a4:6f:
                    a7:40:45:d2:b7:f3:cc:c8:cb:a0:1d:29:c9:3b:c9:
                    f0:5d:8e:05:42:f9:58:11:98:2f:08:ee:80:d9:e6:
                    d6:91:3f:63:4d:fd:45:55:01:92:1a:94:ac:d4:5e:
                    2a:ed:14:a7:be:32:80:72:ff:78:7a:27:61:a6:9c:
                    c2:d3:cf:61:f8:ef:1e:4b:24:70:94:e7:5f:56:e0:
                    b5:79:14:5e:0d:09:54:8c:71:ea:60:ee:56:43:2b:
                    8b:f2:f5:13:cd:3d:56:00:23:f9:40:a8:c3:eb:e7:
                    43:ca:ec:ea:7c:73:bb:d3:69:e3:c8:55:07:80:4e:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:9B:A1:94:45:68:85:E9:16:64:DA:EF:9D:74:4B:9F:86:EA:3C
            X509v3 Authority Key Identifier:
                keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:33:5f:82:1d:f2:f4:72:5e:c8:b7:de:63:8f:96:9b:9f:b7:
         d4:a1:58:28:db:1c:27:2e:2a:27:07:b4:41:c0:7e:9b:5c:96:
         7d:36:94:72:e5:e9:81:96:fa:b9:99:cf:54:ee:70:41:94:2b:
         ba:0b:42:22:d7:8a:96:ef:9f:ab:b0:b0:ea:05:0c:69:08:b3:
         b3:65:02:77:f1:72:26:a0:1f:d6:4b:f5:b6:89:30:ef:69:f4:
         47:7f:dc:52:85:26:b7:a1:f9:6f:c5:65:63:58:54:e8:23:1d:
         6e:dd:8a:8c:ff:72:66:5d:30:8a:bd:03:5b:78:da:61:b6:1c:
         5e:ac:6c:99:c4:10:7f:ca:a2:d6:b8:09:b5:93:5d:8f:42:ec:
         a4:22:b3:af:49:3d:a8:d2:9f:f5:90:fa:9e:16:67:75:99:aa:
         6a:27:57:cc:82:50:07:e0:d6:56:39:16:33:ed:15:17:88:4c:
         2c:c8:2b:2d:71:d1:d2:a1:3f:a4:d0:4e:64:71:9c:7c:3e:5d:
         77:16:3b:a4:a3:a6:20:c3:6a:20:c3:57:28:63:63:3f:55:3e:
         e5:e8:94:63:b7:19:7f:11:da:34:ac:32:db:0e:e0:79:53:5e:
         87:b9:bd:51:33:0a:2c:fc:dc:39:4f:49:11:5e:f4:35:a1:8b:
         ff:ef:6b:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF
NTQ5NDRDMzEwHhcNMjUwNDA0MTQ1MTU5WhcNMjUwNDExMTQ1MTU5WjAYMRYwFAYD
VQQDEw02N2VmZjIwZi1kOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZ7ukkNXR0r7JlTsxhj8GJ7U3so70Hffwm3Z/BygdJQUfI3NmI3NwF70x5Br
DTZ+QNI3LKkXrRP55E+ocfAQrLueVLbBRzTI6Y93bQ3OFeBWIHRJ/q8zrsgT1nhv
G9ySzZS48TnzLVTgCcS6zN0jpY9tWQLCls/ZSfiZQ6ZlcozhTwhSpG+nQEXSt/PM
yMugHSnJO8nwXY4FQvlYEZgvCO6A2ebWkT9jTf1FVQGSGpSs1F4q7RSnvjKAcv94
eidhppzC089h+O8eSyRwlOdfVuC1eRReDQlUjHHqYO5WQyuL8vUTzT1WACP5QKjD
6+dDyuzqfHO702njyFUHgE6LzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsdm6GU
RWiF6RZk2u+ddEufhuo8MB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE
OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM
NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzM1+CHfL0cl7It95jj5abn7fUoVgo2xwnLionB7RBwH6bXJZ9NpRy
5emBlvq5mc9U7nBBlCu6C0Ii14qW75+rsLDqBQxpCLOzZQJ38XImoB/WS/W2iTDv
afRHf9xShSa3oflvxWVjWFToIx1u3YqM/3JmXTCKvQNbeNphthxerGyZxBB/yqLW
uAm1k12PQuykIrOvST2o0p/1kPqeFmd1mapqJ1fMglAH4NZWORYz7RUXiEwsyCst
cdHSoT+k0E5kcZx8Pl13Fjuko6Ygw2ogw1coY2M/VT7l6JRjtxl/Edo0rDLbDuB5
U16Hub1RMwos/Nw5T0kRXvQ1oYv/72tA
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:38 2025 by rpki-client