Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
File:                     PkPgI8CFNZTq13soKJo_HxDDCR0.mft (raw, json)
Hash identifier:          e9nmHgwd9Ke/k+zltTtniAbbFyHE7tmSdDFbjaNDHMg=
Subject key identifier:   27:DD:32:E3:7F:FF:7E:A8:0F:05:63:72:90:52:B5:92:29:73:7D:A3
Authority key identifier: 3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D
Certificate issuer:       /CN=A9150B47/serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D
Certificate serial:       3466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
Manifest number:          3463
Signing time:             Fri 04 Apr 2025 15:10:52 +0000
Manifest this update:     Fri 04 Apr 2025 15:10:52 +0000
Manifest next update:     Fri 11 Apr 2025 15:10:52 +0000
Files and hashes:         1: PkPgI8CFNZTq13soKJo_HxDDCR0.crl (hash: U/BDzeaa+yw/sOL35pvn6zjLj36pNluAtcqKWBdb+kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B47
        Validity
            Not Before: Apr  4 15:10:52 2025 GMT
            Not After : Apr 11 15:10:52 2025 GMT
        Subject: CN=67eff67c-77dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:50:34:89:0d:f0:cc:00:61:25:65:c5:18:62:
                    47:6e:0a:0c:1f:05:fe:91:5f:81:af:da:e6:c9:b5:
                    8c:6e:e5:a7:68:c6:c4:52:60:32:d9:fb:28:5c:68:
                    a4:13:da:25:fd:96:ac:ae:87:3e:10:2e:7d:c7:63:
                    40:e0:66:aa:f3:d2:0f:51:33:e0:ea:fa:74:fd:54:
                    43:a1:48:4b:e7:2a:b8:52:55:fb:95:cf:0b:c6:80:
                    e4:30:a5:27:96:54:27:dd:8f:e9:c3:7d:0c:15:1d:
                    ca:8a:a3:66:7b:ff:4d:52:e5:be:fd:1b:53:5e:e1:
                    75:82:c1:f2:ac:ae:b0:c4:8b:c3:f3:5b:5b:87:19:
                    4f:5c:ee:02:13:78:6f:58:ac:3f:05:0f:1e:b7:fe:
                    dc:54:22:e8:c0:b3:82:f2:d4:57:fd:2d:16:f9:19:
                    94:6f:5b:8c:e7:8c:b6:8c:bc:2d:34:ff:20:f6:55:
                    73:19:a4:37:10:57:d8:d0:33:ec:b0:fb:9f:0f:31:
                    b4:5d:e5:03:4b:98:3c:c8:e4:fb:d6:3c:b5:ec:b0:
                    8d:5b:9b:5f:e8:b2:e0:5e:ba:96:1e:8d:43:3d:ff:
                    f5:fe:54:55:62:6d:90:c0:bf:9d:3a:6e:9e:c7:bc:
                    e7:05:50:2d:8c:6d:dd:f6:d2:cc:91:0b:40:5c:7a:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:32:E3:7F:FF:7E:A8:0F:05:63:72:90:52:B5:92:29:73:7D:A3
            X509v3 Authority Key Identifier:
                keyid:3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:e9:84:9a:b2:56:2d:fb:29:a9:5b:6c:6e:ff:4d:24:b3:
         25:b3:37:5e:bd:a9:3d:e3:35:c6:b4:64:e3:84:3e:ad:38:aa:
         19:05:dc:da:0e:9e:29:f9:b4:1f:ed:81:d1:a0:a1:dd:c6:0a:
         bd:93:e3:7d:f2:08:76:99:a4:5e:9d:4d:77:eb:8f:20:18:fb:
         d8:40:be:2b:41:ec:24:8b:dc:ac:6b:17:b3:f8:8e:db:c5:bb:
         fa:5b:58:03:78:46:85:29:fe:1b:96:d2:c6:29:50:ea:28:d0:
         f2:34:57:e9:29:e8:16:50:96:1a:71:9a:20:35:2c:ad:33:ed:
         4a:a0:c5:ca:2d:88:c1:c6:41:55:99:c5:ac:2e:ed:13:c5:61:
         58:41:f7:75:19:45:b1:83:63:d8:cc:5e:c2:cf:6e:b9:be:d3:
         df:ba:22:5a:82:26:e3:df:9d:ac:49:12:5f:40:62:f6:86:eb:
         1c:ac:15:f6:bb:bd:78:ea:8b:5b:f2:c1:5d:15:d9:2f:c3:75:
         78:2b:0e:63:2b:7a:16:54:64:3c:c9:15:42:1e:e0:3c:85:40:
         8a:57:0f:2d:9d:3a:4f:58:52:1e:67:d9:66:f8:ac:1f:27:14:
         23:e2:21:d6:ec:eb:56:9a:36:d7:23:39:f9:43:44:3a:a8:34:
         8d:80:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:25 2025 by rpki-client