Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
File:                     67mxD9JPdAljNjwtk1eAidsN5_U.mft (raw, json)
Hash identifier:          Zwn2O6D0myjI1MZK9UU6NM/vvtqwI0ezbMVMonZopjw=
Subject key identifier:   02:5A:3A:83:2D:5A:5E:B8:BE:18:21:6C:8C:83:6E:AA:80:D0:3A:10
Authority key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Certificate issuer:       /CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
Manifest number:          75
Signing time:             Wed 09 Apr 2025 05:37:03 +0000
Manifest this update:     Wed 09 Apr 2025 05:37:02 +0000
Manifest next update:     Wed 16 Apr 2025 05:37:02 +0000
Files and hashes:         1: 67mxD9JPdAljNjwtk1eAidsN5_U.crl (hash: Dx0ovAfGPEeFyCPYOcElwMLxLjoqXOiLZ05w75jlh4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 05:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C
        Validity
            Not Before: Apr  9 05:37:02 2025 GMT
            Not After : Apr 16 05:37:02 2025 GMT
        Subject: CN=67f6077f-86dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:b3:a9:49:ff:21:7c:36:3e:00:9a:c8:90:
                    b2:a0:57:c6:51:32:f0:29:54:e9:89:62:4b:15:39:
                    8e:c3:4f:73:0a:ba:c2:9b:7c:e0:08:00:6b:c4:fe:
                    47:53:a5:5a:47:44:d8:ae:9c:b8:ff:63:e3:4c:78:
                    e6:89:a4:82:3b:58:c3:1b:72:16:07:c0:fa:ba:e6:
                    f4:7d:de:b3:a7:8e:bf:a1:ce:98:63:94:bf:7e:89:
                    e2:33:c8:4b:cf:ac:d9:3b:f1:02:7c:94:2d:27:01:
                    6c:d6:9b:f4:ca:ac:e0:1a:46:63:b5:2e:53:20:35:
                    3f:62:bd:52:5d:22:78:aa:bc:1e:9c:21:56:7e:cc:
                    2b:a5:ea:38:e0:3e:11:06:74:2e:b7:90:9f:33:2c:
                    46:cf:7e:43:ae:ab:6d:49:b0:71:30:b6:28:2c:e1:
                    f8:3f:2c:55:0b:2a:76:a8:4a:95:8b:28:76:ec:a8:
                    0b:36:9d:ea:fc:9b:9f:79:07:fa:04:ac:c2:0a:ae:
                    cd:c3:17:d9:95:30:fd:49:a5:db:6a:ee:ea:54:50:
                    59:c7:e9:d6:37:70:7e:5c:ad:27:c2:9d:45:19:10:
                    81:bc:8c:9e:58:51:cc:d9:6c:3c:d8:23:37:60:a9:
                    89:6b:fb:ba:65:a0:bd:38:71:07:ed:50:c2:80:ab:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:3A:83:2D:5A:5E:B8:BE:18:21:6C:8C:83:6E:AA:80:D0:3A:10
            X509v3 Authority Key Identifier:
                keyid:EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:75:7a:79:ac:ca:e0:58:c4:95:aa:13:13:57:fb:dc:70:
         1f:5f:1e:53:f1:29:5f:0a:68:c1:48:0a:02:26:98:6e:e3:0a:
         33:12:a3:2a:8b:57:70:4a:48:03:3e:4a:26:8f:36:26:90:9e:
         a8:43:e3:09:ca:ee:a7:9a:b2:c6:10:73:22:9d:e3:56:5b:a1:
         f1:4a:52:8b:fa:01:f3:45:6f:54:c8:97:ca:cb:08:9f:c0:aa:
         1d:75:58:31:4b:f0:1c:40:0b:ae:c4:7c:ca:63:ea:6b:37:f0:
         fb:a2:c5:e8:2e:37:d6:6a:56:38:8d:13:91:00:62:e3:e5:f4:
         4b:13:27:05:84:bc:93:78:4d:d1:fb:b8:b1:b9:30:5b:ea:4c:
         30:e4:bd:83:c8:ed:74:0c:50:62:51:9b:cd:d2:a3:26:8d:63:
         b1:94:ed:46:50:bf:7a:e6:c5:30:bd:7a:73:ee:96:da:e8:9b:
         b8:44:0a:8c:81:50:57:5b:f6:d6:45:ac:67:99:16:31:50:66:
         9b:73:2a:8e:8d:64:0f:55:51:dc:b1:3a:f0:7b:4a:f9:e5:f5:
         11:07:12:ee:14:24:7f:23:27:ca:e9:3e:69:89:3c:73:ca:1c:
         28:ce:ca:98:55:8c:07:65:9d:fc:71:9b:ec:6d:99:e8:14:61:
         52:9f:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:35 2025 by rpki-client