Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
File:                     pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json)
Hash identifier:          g7CHkdxZqCLX2o6TpP/+Qa11fXczRMyd/cln5Ad4i6Q=
Subject key identifier:   29:0B:B1:58:C1:74:98:D9:59:C3:73:6C:FD:BE:DE:BA:AA:4A:E1:20
Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB
Certificate issuer:       /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB
Certificate serial:       346B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
Manifest number:          3B7E
Signing time:             Fri 04 Apr 2025 14:35:01 +0000
Manifest this update:     Fri 04 Apr 2025 14:35:00 +0000
Manifest next update:     Fri 11 Apr 2025 14:35:00 +0000
Files and hashes:         1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: ag5VeZ5aW1KqM9nUZJguHtFUnCIKio85c7Vpe+Rf6YU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl
                          rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13419 (0x346b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D6D4
        Validity
            Not Before: Apr  4 14:35:00 2025 GMT
            Not After : Apr 11 14:35:00 2025 GMT
        Subject: CN=67efee15-f973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:cb:42:4e:c8:cb:eb:bd:a3:e8:29:bf:85:
                    8b:17:5b:73:2f:7a:ff:c8:32:cc:db:6c:5d:91:1b:
                    42:fd:3f:19:e8:8f:c8:2b:61:5c:b7:55:fb:9b:9c:
                    b3:42:9c:27:44:c7:c5:a4:9e:bf:e2:07:2b:80:bb:
                    19:30:f0:32:5e:ac:19:61:84:bc:74:77:f5:74:50:
                    61:2f:1c:63:7c:d4:ee:94:30:aa:81:28:e9:57:e1:
                    82:11:9f:37:2c:a9:99:16:9f:8d:a4:98:87:8d:10:
                    49:5e:17:a7:f1:60:9b:c5:32:d0:4e:e7:d2:6d:6c:
                    2a:1c:e4:6f:d1:01:f7:99:d7:82:e8:2c:8e:4d:42:
                    9d:e3:ee:77:c3:db:1e:49:e7:3f:73:71:e9:31:cd:
                    67:f9:73:2d:94:28:d4:9c:af:51:cf:ee:60:3e:fe:
                    59:d7:bb:28:a8:1a:8f:c3:17:90:0a:03:cd:da:d4:
                    3e:af:d9:5c:f3:7e:c4:d1:63:fe:25:04:51:01:2a:
                    15:be:c4:8a:61:ff:0b:fa:b0:b8:a2:c9:b6:73:0f:
                    c3:57:e4:cd:04:5d:88:9e:29:73:d3:c4:83:75:73:
                    75:05:49:67:79:38:bf:55:a2:e7:1d:dc:f4:ba:d2:
                    10:78:ec:f2:67:3b:43:8f:8f:9d:fe:69:3d:39:0a:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:B1:58:C1:74:98:D9:59:C3:73:6C:FD:BE:DE:BA:AA:4A:E1:20
            X509v3 Authority Key Identifier:
                keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:e7:6e:74:08:b8:ab:cc:74:d0:62:e7:e5:25:f4:21:dc:
         a0:02:02:08:6e:03:aa:f2:da:5d:01:c5:2b:e7:84:b9:d9:dd:
         22:c2:01:47:83:84:5a:7d:9d:2d:1e:ac:3b:56:f5:e1:27:97:
         05:28:34:89:47:1e:33:49:90:a5:c2:c3:a1:5f:71:2d:15:0f:
         2d:b0:ac:d7:da:af:88:5d:e5:a7:42:94:16:39:29:98:eb:49:
         d3:51:5d:c4:8b:57:75:f0:a0:2c:a9:61:d4:0e:55:e0:f2:4c:
         e1:c4:a0:2c:17:1e:12:ec:7a:a0:74:99:f1:8c:c0:2f:ba:90:
         f0:d0:9d:71:5e:a1:9a:72:c7:4b:53:68:5f:5a:74:e3:07:3e:
         70:8e:26:f2:62:69:35:f4:14:04:54:b7:4c:fd:bd:b9:72:f3:
         df:ab:9c:b0:a3:33:fe:5a:96:51:9f:0d:80:b3:cd:db:84:14:
         9b:62:93:7b:bf:73:4d:27:ec:23:7c:25:60:17:dd:ca:36:59:
         d6:1d:c8:f7:49:6a:e6:07:6a:7b:c1:58:ca:b6:12:0d:c1:58:
         c7:43:e2:bc:f1:22:50:a5:39:bc:0f:d1:d7:07:0c:33:72:8b:
         9d:a5:00:90:15:a9:6a:1b:03:74:87:24:00:45:63:75:c6:72:
         e4:3c:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:09 2025 by rpki-client