Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          bWAEmVdFUa+h6JOpiyBKLkhWpN8TG9AM0M2a84kyCaU=
Subject key identifier:   5E:C6:4F:AB:DB:95:A6:49:D0:7C:DF:2E:C1:60:34:4F:C8:3D:5B:94
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       0395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          038D
Signing time:             Sat 29 Mar 2025 01:06:01 +0000
Manifest this update:     Sat 29 Mar 2025 01:06:01 +0000
Manifest next update:     Sat 05 Apr 2025 01:06:01 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: YVmO9/Dix+gaSHQXETozggz3cokJPSxAtqSA+Qfu4+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 01:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86
        Validity
            Not Before: Mar 29 01:06:01 2025 GMT
            Not After : Apr  5 01:06:01 2025 GMT
        Subject: CN=67e74779-d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:72:3a:af:67:07:6f:94:f3:79:f1:05:8a:
                    be:2c:65:fd:d4:bd:cb:d2:ba:01:33:34:65:a1:8f:
                    11:7c:fb:3f:44:11:cc:5d:98:ef:f0:37:c2:1e:fb:
                    38:2a:36:df:d4:81:1b:44:bd:96:1b:06:f5:bb:7b:
                    99:55:17:83:64:e7:75:62:0a:dc:1b:73:dd:0b:38:
                    78:f8:ce:ac:e3:c1:5a:52:95:51:f9:86:c3:1a:f0:
                    40:56:c7:d8:75:80:72:69:48:80:b0:a9:74:d2:c5:
                    94:75:a4:7d:4b:4f:75:9e:61:76:a8:77:1c:30:8d:
                    2a:d5:f1:76:12:13:e0:95:fc:bd:56:df:28:03:1a:
                    66:91:02:7e:ea:2c:a6:20:7c:ab:56:c2:07:51:2e:
                    a1:7a:1d:72:7c:a0:1b:87:22:da:21:e6:f8:9a:fe:
                    e3:1c:65:ee:af:20:a4:54:d4:46:0d:f5:3b:fa:b9:
                    7e:a3:d6:0a:03:9e:ee:b4:ff:90:d5:6c:ae:3f:54:
                    6b:8c:bd:08:1e:29:5e:d3:9f:2d:9c:d8:a6:a5:eb:
                    9b:13:23:68:a4:30:09:6c:2e:39:6b:f4:9b:8d:0a:
                    30:fd:ea:3c:86:74:52:c8:14:20:d7:2d:2a:58:3b:
                    f8:75:9c:33:ae:07:f3:44:1f:e6:f2:e3:d8:7b:d7:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C6:4F:AB:DB:95:A6:49:D0:7C:DF:2E:C1:60:34:4F:C8:3D:5B:94
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:7e:cd:22:c9:78:66:58:d0:01:c6:f0:4b:95:41:84:d5:
         bc:14:e9:07:14:fc:cc:d4:35:6d:15:70:d7:97:d0:f6:5a:bf:
         f8:81:d4:26:00:b0:f1:1b:5f:98:95:50:c9:80:fd:3f:a1:d1:
         54:d5:79:f5:e5:22:f0:7a:57:28:de:da:86:a2:80:17:08:dc:
         b5:78:68:16:a0:51:01:98:95:5d:9b:c4:c4:59:7d:d0:26:79:
         14:7e:69:b1:86:c2:a6:7b:31:db:e4:5b:ab:e7:32:77:24:23:
         aa:93:e4:9c:2d:8a:0d:89:1c:c9:3f:fd:de:f4:ab:48:f1:62:
         ac:ac:5a:c6:d0:06:b2:34:1d:5c:de:b6:15:a0:6d:cc:c2:f6:
         78:7b:06:0e:83:21:5c:25:4a:f9:8e:20:0e:d1:9c:8e:ce:1a:
         63:79:cd:e1:86:52:85:54:c8:f7:b5:5f:64:9d:56:2c:e9:fd:
         4b:c6:b5:85:b3:c7:3f:e2:91:01:bd:42:60:65:e8:43:da:68:
         a8:13:dc:80:9a:e6:d1:a0:91:f1:d0:f1:61:f2:63:eb:27:b6:
         69:e6:cb:6f:06:28:73:2b:12:88:5f:14:33:e0:f5:c8:23:8c:
         0c:e4:08:1e:ce:a2:04:bb:16:54:fe:af:58:14:5b:da:c9:28:
         28:3a:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:48 2025 by rpki-client