Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          vFSVHWQqTWSKtldvyZYmD39s8DaI+60+3kEksiwz81M=
Subject key identifier:   D2:91:04:82:76:73:BC:E5:24:19:D6:51:FD:26:6B:FD:54:CB:59:4A
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          E8
Signing time:             Thu 03 Apr 2025 04:36:29 +0000
Manifest this update:     Thu 03 Apr 2025 04:36:28 +0000
Manifest next update:     Thu 10 Apr 2025 04:36:28 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: JHDJGA9ACp1LmqlrKmrxpgs8yMTf5Yn0FlG9PKxFGRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322
        Validity
            Not Before: Apr  3 04:36:28 2025 GMT
            Not After : Apr 10 04:36:28 2025 GMT
        Subject: CN=67ee104c-419b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:43:6a:59:be:22:6c:0e:98:68:7b:2c:0d:
                    c2:e3:53:d7:80:82:75:6f:bb:c8:82:a6:e8:a3:26:
                    11:45:65:17:a6:62:86:76:21:f6:be:d7:b0:e1:91:
                    5d:0c:6d:50:14:af:3d:a8:05:4c:87:22:07:12:c4:
                    7b:ec:0b:4b:2f:01:bc:d8:30:1b:db:bf:37:41:87:
                    57:f2:7b:6f:8b:ea:a8:68:b6:3d:ca:f3:ac:54:3f:
                    b0:56:8d:b8:f2:ea:69:82:ec:d3:1c:49:74:57:a2:
                    12:46:45:25:86:75:d7:a2:a3:af:56:eb:c2:45:be:
                    45:95:09:05:d8:f7:40:e3:21:95:57:3c:56:8d:46:
                    a3:ca:55:bf:65:c4:5d:bc:5d:97:d9:fd:9c:1e:86:
                    de:cc:ec:1d:d6:de:e1:56:03:e2:0e:ec:51:d7:07:
                    7b:07:1e:e8:61:ff:d1:00:72:ba:83:0b:1c:98:90:
                    7d:a7:79:b0:81:a7:c3:2a:8f:ea:98:01:83:60:27:
                    3c:b4:af:87:b1:72:69:06:b5:47:9c:c8:fd:74:45:
                    88:f7:ab:e7:f1:2c:10:f6:24:1b:1a:3d:54:6b:f9:
                    05:cf:9d:23:d1:35:3c:44:92:09:1c:17:ea:f4:a3:
                    39:53:4d:b6:61:43:24:59:0e:74:9c:cd:5e:ba:a7:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:04:82:76:73:BC:E5:24:19:D6:51:FD:26:6B:FD:54:CB:59:4A
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:c6:73:a1:d7:2a:24:5e:70:41:45:70:1f:4f:4d:d9:42:
         99:7a:62:d9:c7:4f:84:6a:af:9c:13:95:fa:ff:34:7f:b4:b3:
         e3:6a:65:d1:18:fa:48:b9:90:32:59:89:fb:d0:23:ac:60:51:
         73:a2:16:98:e4:65:49:74:14:c7:d9:22:91:7d:3a:c5:2d:a7:
         5c:b9:42:cf:74:b0:1a:88:ae:3a:f9:75:7a:08:23:c3:45:c6:
         ba:32:5b:fd:4d:00:6e:fc:fa:85:05:15:03:d7:93:0b:87:7b:
         7e:60:8e:e3:66:ab:f6:c1:a9:42:fb:15:46:12:33:81:a8:69:
         42:c2:76:46:08:c8:83:74:41:0a:a5:3f:57:be:8e:a9:d5:3a:
         9d:0a:d2:de:91:f0:04:11:67:61:92:9e:b8:be:fb:11:5d:dd:
         45:57:5c:5e:a8:70:83:dd:88:85:ea:16:75:85:5e:65:db:b8:
         c5:d0:e3:b1:81:e6:71:5c:c0:88:0c:de:b3:eb:65:c3:32:c4:
         4a:5f:2a:a0:eb:a5:e5:b2:c5:39:ec:4f:18:3f:ba:97:de:aa:
         7a:1a:8e:22:3c:88:da:38:9b:2d:5f:84:90:09:99:3e:20:46:
         96:2f:1c:b2:92:e4:a9:09:c5:7c:95:04:51:05:96:30:cd:e7:
         dc:09:ec:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:07 2025 by rpki-client