Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File:                     CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier:          pTwW9q9zdUB34OjhSXtOaCmSP65ELztuIAwGfGdRFzY=
Subject key identifier:   20:8C:0F:1C:0B:95:29:5F:F1:CE:4C:F8:55:D2:FA:AB:0E:FD:A0:19
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer:       /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number:          0223
Signing time:             Wed 09 Apr 2025 02:29:47 +0000
Manifest this update:     Wed 09 Apr 2025 02:29:46 +0000
Manifest next update:     Wed 16 Apr 2025 02:29:46 +0000
Files and hashes:         1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: SR/FIQs7friKU3WUsCJmIr+T5hYNbVmEV542QDE3sL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 02:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5
        Validity
            Not Before: Apr  9 02:29:46 2025 GMT
            Not After : Apr 16 02:29:46 2025 GMT
        Subject: CN=67f5db9a-1818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:1b:20:36:c2:a9:22:a2:d3:16:b2:e2:c0:
                    8c:26:68:7a:00:2c:39:c4:6f:b7:ad:15:cc:44:8d:
                    c0:82:db:9b:fb:91:10:b0:b8:c2:06:0e:25:43:d4:
                    6a:6a:85:33:fc:1f:dc:8a:e2:d7:09:dd:7c:ca:34:
                    71:43:e5:af:88:fb:75:b5:03:d2:34:0c:cc:6e:b6:
                    57:c7:b4:37:fc:37:d5:a0:40:2b:ba:05:c2:83:64:
                    7a:bc:28:e7:5f:fe:67:24:51:fc:e1:80:aa:7b:46:
                    ec:14:4b:e9:8c:e1:7a:bc:d1:86:b8:3a:e7:6e:bc:
                    e9:b7:7c:c7:f6:25:26:23:81:07:93:db:b4:92:47:
                    3b:eb:94:d0:9f:ed:27:98:e1:1c:36:16:f8:25:23:
                    26:5d:3f:0e:37:5e:fe:78:19:de:0b:a0:cb:a6:be:
                    51:c3:3c:84:f5:ee:13:5c:4f:c4:d2:d9:36:eb:c9:
                    c3:ad:c0:bd:04:b7:f7:96:21:ef:da:81:8b:c2:5c:
                    93:fa:f9:6c:b4:60:67:43:2e:a7:81:c8:d6:d0:c7:
                    1d:6f:5a:e7:93:eb:7b:e8:fe:5a:0e:53:61:75:0e:
                    68:3d:2f:eb:e6:36:e8:8c:ad:8c:2b:fd:66:9e:7a:
                    3d:02:97:2e:96:c8:c9:84:09:ed:4e:1f:dc:6e:8c:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:0F:1C:0B:95:29:5F:F1:CE:4C:F8:55:D2:FA:AB:0E:FD:A0:19
            X509v3 Authority Key Identifier:
                keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:c9:5f:e0:77:07:6e:b0:4f:fa:6f:8c:99:60:c7:e6:f0:
         88:7a:89:49:0c:58:2c:b9:e5:f5:eb:5b:16:bb:72:7a:41:d6:
         12:3f:7b:b9:7e:df:14:d4:cc:2e:5e:f1:17:e3:d1:a6:6d:7c:
         76:97:d4:ed:1e:40:9f:c1:9f:6a:ab:79:bd:af:50:95:b1:5e:
         e0:d7:1d:81:78:a1:d2:c2:15:10:de:3d:9d:84:14:95:f7:0b:
         87:7f:c6:ba:c6:e2:5f:b1:64:c0:27:e7:df:43:a0:74:10:f1:
         28:b9:cd:00:89:bb:e6:ee:39:e3:6f:ec:0d:11:8e:e9:3c:a9:
         f7:f9:9a:9e:c2:98:2e:52:3d:cf:a7:cf:01:cc:cc:6f:96:b8:
         e2:b3:1c:e5:68:70:6a:38:59:b3:1e:b6:ee:47:09:10:9f:20:
         ba:6e:5e:d6:7c:b1:7b:00:7e:b9:12:8f:7a:b4:0b:bb:28:71:
         2f:e0:16:bf:4b:30:17:5b:b4:39:cc:fa:86:9b:7b:10:ff:fd:
         46:4e:65:4a:38:fc:97:f6:77:25:84:a5:47:21:50:cf:6d:1a:
         f1:12:8e:a4:9c:5a:0d:28:c6:c1:4d:65:b2:76:ea:8c:92:20:
         2a:51:32:dc:be:dd:6f:63:3f:c4:48:40:3c:a0:c0:21:4a:9e:
         fd:a3:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:36 2025 by rpki-client