Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          NJo3HucwK5p1MyzUdXER8CFPLSXb4+1ySaQivPoVcmI=
Subject key identifier:   92:21:69:67:D9:59:5A:AD:9A:13:FB:E9:40:F3:4A:B8:E4:3C:16:F0
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0435
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0435
Signing time:             Wed 09 Apr 2025 00:00:09 +0000
Manifest this update:     Wed 09 Apr 2025 00:00:09 +0000
Manifest next update:     Wed 16 Apr 2025 00:00:09 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: 5MbCXEznYm/tnUPkslPieK1bXOMSDQZKKj/DI86FP3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106
        Validity
            Not Before: Apr  9 00:00:09 2025 GMT
            Not After : Apr 16 00:00:09 2025 GMT
        Subject: CN=67f5b889-ebad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:2e:ec:d0:d9:67:e1:64:f7:00:8a:a2:7f:
                    4f:bb:61:f8:e4:e7:90:14:09:4c:7b:06:32:92:0d:
                    73:f5:39:bf:9b:b4:05:a4:d2:a6:06:82:d0:1d:80:
                    6b:f0:a6:e9:a7:76:d2:14:da:b2:be:3f:1f:8c:29:
                    9f:84:56:c7:1c:e0:91:85:4b:52:87:a1:30:c9:47:
                    7a:20:f1:5c:25:40:1e:f1:d7:90:e9:4b:27:23:e6:
                    b4:cc:01:b1:64:bc:3e:28:d5:68:26:09:e5:21:48:
                    8f:17:fe:11:7e:65:25:a9:ff:24:9f:5b:69:8c:59:
                    8a:02:c5:99:58:ae:a7:14:c2:81:45:98:cd:72:93:
                    df:76:2a:74:01:c6:0e:fe:ca:65:da:5b:5f:ee:e3:
                    de:cf:4a:e2:57:14:fb:4b:c4:06:ef:b5:71:d1:06:
                    eb:6a:d0:ef:29:64:34:3a:c0:98:dd:92:8f:ff:d7:
                    9e:b9:75:1e:4e:a0:a7:d2:7d:de:c1:c7:aa:92:7e:
                    23:0b:0b:70:33:d8:5b:27:0d:dc:6f:2f:9e:0a:11:
                    07:ab:eb:65:c9:d0:53:20:99:60:c0:dd:3f:df:ea:
                    1f:5c:a4:60:67:df:66:30:87:8f:4e:65:3a:2f:7c:
                    79:51:cd:23:db:c7:f3:f9:d7:a2:cb:67:1b:ca:c9:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:69:67:D9:59:5A:AD:9A:13:FB:E9:40:F3:4A:B8:E4:3C:16:F0
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:8d:a4:58:96:d6:78:dd:4e:bc:d9:87:0e:6c:9d:03:50:
         2e:ec:03:8b:aa:49:5f:48:5b:24:88:cf:e9:05:96:01:50:be:
         35:33:ec:11:9d:e3:fd:a3:ca:ef:f5:f0:00:41:f9:51:78:32:
         de:a0:5c:22:24:13:7d:4b:d4:34:4c:cb:4c:2f:41:1b:22:99:
         a4:40:23:c7:a8:da:cf:47:87:4b:65:2e:f0:68:1e:15:c9:d6:
         82:0c:a2:5e:51:2d:97:dd:6c:30:37:88:d4:f2:8e:bc:40:25:
         24:fe:67:7e:6e:72:e0:0c:16:db:53:b0:cd:96:49:c9:b9:85:
         05:e4:19:0c:6b:5e:69:6a:cf:d8:79:43:40:18:08:30:4c:51:
         e4:bb:47:6f:b7:b6:a0:3f:f2:3b:b3:64:d5:c5:53:78:d3:65:
         3d:0a:eb:4c:af:53:e7:d5:ab:a3:79:5e:c0:94:2a:67:36:28:
         0d:d9:3c:8b:d9:c4:c0:dc:11:bb:39:39:88:54:62:bb:b9:e3:
         55:6c:fd:5f:9e:f1:de:b8:94:72:e3:97:f6:a5:c8:32:6d:bf:
         5b:77:6f:f3:4d:b0:97:b3:cd:d3:5b:d0:b7:66:0f:00:8f:ee:
         ba:98:66:61:7d:db:e1:95:41:08:bc:ae:43:03:8e:cb:91:06:
         ef:1c:7f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:59:51 2025 by rpki-client