Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
File:                     jC90p60r0PXvsQZOS5CYbXbMF4U.mft (raw, json)
Hash identifier:          iql6piMUiXSXb9P5E2eeli182A9Nv48iPbQBVWAxS6w=
Subject key identifier:   65:17:C1:9F:E5:91:BA:7B:5C:F9:DE:6B:64:43:5E:F1:BB:86:10:95
Authority key identifier: 8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85
Certificate issuer:       /CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785
Certificate serial:       0503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
Manifest number:          0604
Signing time:             Fri 28 Mar 2025 23:56:27 +0000
Manifest this update:     Fri 28 Mar 2025 23:56:26 +0000
Manifest next update:     Fri 04 Apr 2025 23:56:26 +0000
Files and hashes:         1: jC90p60r0PXvsQZOS5CYbXbMF4U.crl (hash: Z4t3BRyJueWYWJoFfreL55JQzREzpCOKsXylx7rI+og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl
                          rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21
        Validity
            Not Before: Mar 28 23:56:26 2025 GMT
            Not After : Apr  4 23:56:26 2025 GMT
        Subject: CN=67e7372a-3518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:2a:f9:74:21:0c:44:d0:26:f9:2e:4b:47:
                    cf:44:50:c6:d0:37:30:90:e2:1f:bc:1b:ad:de:a8:
                    27:4e:9e:63:4a:65:c6:1b:83:7e:90:33:41:ee:34:
                    b0:64:a1:bd:b9:fd:c7:92:ee:37:a5:99:ce:d8:aa:
                    a5:9d:81:c2:61:83:4b:03:53:c4:7c:73:5f:91:e1:
                    b2:ba:39:30:74:33:18:4d:6f:dd:27:83:1d:24:83:
                    27:72:b2:50:f5:60:b1:14:3f:ce:0c:62:73:fb:f7:
                    27:47:dd:07:96:c0:e4:1e:41:73:90:4e:a9:e3:44:
                    ed:fc:be:bb:92:52:73:d4:35:c4:c2:26:df:ce:bb:
                    f7:db:53:1c:e7:e0:03:0b:30:17:0f:9a:3a:74:4d:
                    f8:bf:1c:aa:3e:ab:26:9e:25:7c:ab:56:db:1e:1d:
                    6f:7d:4b:94:e3:cf:bd:4f:66:a3:5b:f5:77:dd:a6:
                    74:8b:69:dc:ee:ae:9e:6b:1c:fd:10:dd:de:02:1d:
                    a6:ed:5c:5c:1e:2d:ce:ed:12:18:7f:e1:cf:70:b8:
                    1a:83:e9:98:be:c8:51:6b:23:46:de:2b:2d:b7:cf:
                    3c:16:73:b3:a9:2a:a4:cb:1e:b5:74:a8:e6:ca:10:
                    a7:47:43:cc:15:33:58:ef:af:8b:c0:a6:ea:f1:38:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:C1:9F:E5:91:BA:7B:5C:F9:DE:6B:64:43:5E:F1:BB:86:10:95
            X509v3 Authority Key Identifier:
                keyid:8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:17:a8:b2:4b:04:24:9c:14:ba:e6:59:7c:6b:5d:39:95:c3:
         cf:c4:38:11:62:38:bc:03:ba:99:c8:0c:7c:99:ca:fc:87:f0:
         a6:4f:99:27:b4:36:67:52:e4:36:1f:24:e0:30:17:39:bf:e5:
         04:ca:92:37:63:1b:97:24:42:0e:99:8d:ec:94:0c:4f:b6:88:
         f1:fe:11:4f:45:da:da:40:e5:c7:f6:55:9a:6d:22:c1:39:87:
         c7:d3:2d:cc:f4:2a:8e:39:b2:b2:e8:96:46:9d:1b:3a:a5:30:
         50:56:08:93:08:10:8f:1a:e0:34:7a:52:58:c9:f9:4c:80:d4:
         7d:09:63:92:aa:c3:e6:ab:69:82:35:d3:ef:95:9c:b4:93:60:
         02:e8:dc:89:02:1f:a6:cc:83:1f:14:95:1f:7e:03:cc:3c:e4:
         93:a4:ec:df:10:f0:db:c8:57:b2:7b:f1:ca:c3:ba:c2:83:db:
         80:16:ec:f0:5c:8a:d7:69:d0:e3:83:16:cb:ba:0f:69:3f:5d:
         66:a7:b2:66:56:d0:16:01:be:52:96:2a:16:ee:d9:e0:56:e0:
         17:da:9c:2e:89:44:89:44:41:f9:f8:bd:e9:17:0d:d5:1a:66:
         df:da:38:be:43:be:7f:03:00:dc:25:93:b9:ff:13:74:75:44:
         6b:95:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:27:03 2025 by rpki-client