Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          f1bsEgdtdmV/DC/KykuOBgHUcls0oSnEUOaE7zteUCA=
Subject key identifier:   BB:0F:BB:E6:7A:A9:A1:E8:8F:85:93:5C:12:17:5A:92:A1:47:E2:84
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          057D
Signing time:             Fri 28 Mar 2025 23:32:34 +0000
Manifest this update:     Fri 28 Mar 2025 23:32:33 +0000
Manifest next update:     Fri 04 Apr 2025 23:32:33 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: PN/6h+jSg3jpOd+t7snspA9utn05LjFM7JFF5/oo+r0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878
        Validity
            Not Before: Mar 28 23:32:33 2025 GMT
            Not After : Apr  4 23:32:33 2025 GMT
        Subject: CN=67e73191-3f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:c8:0b:6a:2e:a8:7b:e0:07:b5:e2:83:14:
                    78:cc:3c:d3:93:36:2c:70:6b:f9:f9:71:4c:7a:f7:
                    79:74:e9:06:ef:ae:92:72:79:f8:66:05:cb:ad:30:
                    cb:71:0f:22:be:60:d5:35:51:41:05:b6:1d:51:a3:
                    55:26:43:73:c6:bd:c2:42:36:a8:42:36:9b:34:0b:
                    1b:89:6a:f6:0a:d9:38:a0:54:23:9a:ee:a9:56:a5:
                    83:90:61:32:f0:1d:0a:66:4e:cb:90:3e:ed:85:45:
                    60:3d:d0:0d:d1:15:82:d9:fc:d0:83:16:b8:d4:41:
                    26:3c:42:6e:98:92:21:70:b5:e8:ff:3a:d3:76:cf:
                    d8:4f:26:f9:29:07:36:0d:46:b4:ea:c1:2c:d8:a7:
                    91:c4:79:f7:27:0c:8e:1a:22:70:5a:06:7b:20:39:
                    ec:db:a4:a7:43:9d:14:3d:56:0d:fd:86:ea:2e:43:
                    f3:21:e4:ba:67:05:b1:2f:78:1d:a0:d7:df:56:87:
                    1e:fc:68:8b:1d:84:e6:f8:2a:43:c6:9f:4d:0d:bc:
                    e8:af:5f:60:c3:7c:40:2e:aa:d3:36:84:22:b0:67:
                    7b:aa:98:d8:eb:b4:61:c6:32:72:ec:33:9a:5f:e2:
                    04:89:42:25:d7:02:b7:67:2d:bf:7b:85:9a:58:ee:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:BB:E6:7A:A9:A1:E8:8F:85:93:5C:12:17:5A:92:A1:47:E2:84
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:36:bb:14:2f:e3:bf:bb:80:ae:2d:5a:7d:42:76:19:47:
         20:51:f8:16:e5:a6:78:fb:b8:2a:1e:4c:e5:fa:5e:be:fe:50:
         88:0c:77:f2:53:21:14:84:a9:ea:4a:d6:67:05:06:58:5f:d4:
         92:fa:dc:90:f2:54:2d:5f:87:ea:a8:80:01:4c:6a:72:05:c2:
         b6:3c:b4:b6:49:53:43:54:31:f3:c0:2c:ce:59:43:30:b2:18:
         e5:61:98:10:a4:90:50:f2:d7:fa:83:c1:bb:77:e3:2e:a1:3a:
         49:dd:33:db:02:dc:e5:18:fc:80:7c:b1:22:3a:8c:d8:f2:97:
         f3:fd:8b:4b:aa:74:d4:93:38:c1:91:bc:66:51:ba:ff:91:82:
         db:52:80:6d:50:39:f2:ec:55:1f:da:b4:8b:9f:1e:39:d5:06:
         1c:4f:ea:6f:f1:c7:56:a1:bc:19:bd:3a:4d:e0:a1:4e:70:32:
         65:09:61:95:52:bd:cc:6e:37:6b:23:3c:af:11:f4:86:c5:14:
         11:9b:57:1c:f1:e9:0f:5e:c3:69:f7:c6:60:28:46:ef:25:6b:
         96:f7:24:d4:26:8c:9f:7b:42:c2:1b:32:44:c0:34:ae:00:00:
         44:bd:16:e1:42:90:45:e8:80:8d:45:bb:cd:37:e9:69:58:6f:
         fc:52:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:33 2025 by rpki-client