Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          HSTLsJuRzLHfJFR6dTAOwYjPJnpb0FEoFEZFZ/vCKF4=
Subject key identifier:   F7:B0:AD:68:9E:6C:88:AE:FE:6F:15:A7:C1:D8:6E:CB:43:34:2D:68
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          E1
Signing time:             Sat 29 Mar 2025 04:49:34 +0000
Manifest this update:     Sat 29 Mar 2025 04:49:33 +0000
Manifest next update:     Sat 05 Apr 2025 04:49:33 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: 50vEpz6SV0kN6Re+x0FCqTb/DCyD37ehQz97UhT8fxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268
        Validity
            Not Before: Mar 29 04:49:33 2025 GMT
            Not After : Apr  5 04:49:33 2025 GMT
        Subject: CN=67e77bde-d74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:ef:c8:c7:aa:7d:0c:f0:50:7a:bc:cd:fb:
                    38:4f:86:50:12:fb:6d:1d:c1:a7:28:9f:54:9d:d2:
                    ed:0d:f6:1f:07:d9:a1:b2:ac:46:77:e2:9b:c3:46:
                    ef:89:b9:4d:5e:d0:99:cc:5e:6d:26:b3:92:68:ef:
                    8a:f4:10:ec:09:f9:5a:50:85:22:70:db:6f:26:26:
                    6f:65:5d:3c:38:0e:54:65:24:63:7f:a0:fe:04:80:
                    da:b3:43:f7:16:22:34:fe:47:de:ba:b2:ba:33:2b:
                    e7:19:0b:45:32:b8:83:f5:b0:94:2e:d0:26:75:5c:
                    b6:03:45:23:f1:c6:a5:f8:15:17:0a:fc:5f:87:2f:
                    57:b9:ed:f7:57:93:19:ff:2c:d2:a7:2d:e0:b6:f5:
                    3e:02:6c:55:13:9b:38:8d:12:ec:70:bd:b3:29:4f:
                    f9:9d:00:70:5a:f4:77:ab:6e:1f:cb:78:d8:57:37:
                    ad:b9:1e:4c:d9:d2:b3:ea:0b:41:90:09:25:15:28:
                    60:ca:e1:21:ce:e2:76:97:6b:f5:e9:42:da:a1:39:
                    e1:dd:fd:a0:ef:e3:56:52:2c:2d:f8:b4:78:03:c2:
                    d5:39:b1:20:85:ce:57:24:2f:07:0a:c2:d1:36:06:
                    10:e7:1e:a8:e4:19:a9:26:94:1d:a8:67:5e:8c:7c:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:AD:68:9E:6C:88:AE:FE:6F:15:A7:C1:D8:6E:CB:43:34:2D:68
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:92:25:d9:9e:61:ba:f4:7e:67:13:20:45:72:85:6d:44:
         09:0d:76:d8:51:92:bd:f1:0a:ed:3e:eb:8e:d2:70:9b:cc:91:
         26:aa:1b:2f:9d:b6:5a:b5:19:c7:e5:94:8a:ed:74:39:4e:ac:
         ee:a6:11:49:23:b5:e9:f5:1d:b8:e7:24:05:bd:75:a7:5c:9d:
         9a:c6:f9:be:98:a8:08:5c:be:76:dd:79:7f:da:4f:b7:2a:c8:
         ef:55:f7:44:00:02:7f:4e:09:8b:1c:2f:71:16:06:8c:c8:5f:
         fe:44:91:6b:9c:34:62:13:41:0d:a4:e3:05:66:ed:d9:16:49:
         52:4a:8a:9d:44:3f:8c:6e:6f:c0:99:91:b4:ee:68:58:59:66:
         38:9f:2b:07:af:2f:1e:3d:19:67:60:5a:a4:41:d9:36:64:b1:
         6a:bf:36:c9:1d:e0:69:63:22:35:14:b1:d8:e3:a8:8d:d8:a2:
         50:bd:bf:59:b9:b4:c9:11:6f:8c:12:e9:f6:f7:98:c9:8e:9f:
         1d:8f:f5:8b:06:d6:ab:72:53:16:c6:c0:a7:15:a6:0a:cc:0b:
         72:33:27:e9:d6:13:19:5b:38:de:0a:2a:20:47:80:87:13:a9:
         e7:95:94:57:f5:f5:ab:43:2f:af:08:0b:df:48:e9:84:ca:ad:
         38:60:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:15 2025 by rpki-client