Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          F5NH5TEpt5/FZxxjaFvnxK6/WemiuTwL+PfTgnpQbyY=
Subject key identifier:   C2:88:52:B5:8E:8F:AD:B4:B3:34:E1:A0:7D:6D:33:6F:D4:B8:AE:62
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          5E
Signing time:             Mon 07 Apr 2025 05:55:12 +0000
Manifest this update:     Mon 07 Apr 2025 05:55:12 +0000
Manifest next update:     Mon 14 Apr 2025 05:55:11 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: AkLRcWl+dKtofNjYjojWpSmnipegbDoheuqy6Df2NC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF
        Validity
            Not Before: Apr  7 05:55:12 2025 GMT
            Not After : Apr 14 05:55:11 2025 GMT
        Subject: CN=67f368c0-dbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:76:15:53:5f:e2:67:d7:42:f8:4d:42:5e:
                    f7:63:83:72:d3:d2:4a:ed:e6:08:2e:2a:7f:d3:33:
                    12:dd:c5:59:fd:ea:d0:93:5b:fc:95:1f:8b:b5:cf:
                    95:76:22:af:68:f1:b6:cf:5e:ca:ca:c9:2e:aa:59:
                    89:e4:9f:d4:1d:90:81:65:ba:67:6d:3e:b9:17:b3:
                    aa:78:c9:d4:85:03:6e:f4:0a:ce:ea:01:cc:24:25:
                    c2:d5:ec:d1:7f:0f:39:18:91:cf:60:94:6f:10:e6:
                    2c:06:ad:48:6c:b8:fd:f6:02:f3:b0:d1:bc:0a:61:
                    f5:ee:3b:95:7d:ac:5f:39:0c:3d:13:ed:a0:17:2f:
                    ae:0f:5d:f4:5f:ef:4e:7f:94:56:5d:ba:36:49:da:
                    8a:30:ee:d2:a1:8e:f7:78:b8:b0:a9:b8:6a:ed:32:
                    4b:c1:b8:0d:34:b7:59:a7:4c:5c:41:0a:8a:d3:48:
                    88:ad:6e:fc:f5:30:7f:8c:8c:86:c2:5d:5c:c3:a1:
                    f0:b1:ad:e5:e2:21:3b:70:4e:1b:4a:0e:87:b8:ed:
                    1b:bb:ee:8f:a5:21:7c:58:aa:5e:af:b5:a1:d9:a8:
                    40:e9:51:7d:3c:a0:3a:b9:0e:5c:a4:c7:6b:85:aa:
                    a6:9b:f9:54:d8:e4:81:d8:92:0b:d1:10:42:78:44:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:88:52:B5:8E:8F:AD:B4:B3:34:E1:A0:7D:6D:33:6F:D4:B8:AE:62
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:83:c8:b2:ae:40:0f:66:ac:cf:18:c6:6b:30:7c:28:c3:
         18:af:ee:80:5a:26:51:99:04:0a:8d:79:ae:f4:02:ad:69:bf:
         c4:06:9b:0e:16:f8:48:0f:b7:dd:c9:c1:7b:89:67:81:34:0e:
         83:fa:49:9b:1b:a0:4a:4a:41:5e:95:f5:b1:d7:7a:bf:27:3a:
         53:88:b3:21:59:29:8c:b8:a0:21:83:2d:ae:4b:a2:53:3a:08:
         d9:b0:59:11:9f:b3:f4:b8:a7:ee:91:78:19:ee:9d:c0:50:99:
         21:bb:30:ca:d4:11:2e:4b:c9:01:99:dc:0c:86:c2:32:2d:57:
         e5:8b:46:d8:68:4c:5d:3c:c9:9b:05:5e:1c:fa:05:95:ab:7f:
         64:d8:78:ff:44:b8:21:e3:aa:a0:30:12:06:1b:d6:6e:fb:e3:
         77:f4:8a:38:7e:19:cf:11:ee:ff:f2:1f:fc:2b:0f:85:75:86:
         d8:8c:98:7a:f2:06:bd:cc:bf:e5:14:23:f1:c0:b2:8a:fb:22:
         a2:20:e0:5c:10:e3:42:8d:c7:a2:af:6c:c8:15:e8:f7:c5:24:
         b0:6d:8e:cd:df:e4:90:cc:53:ba:ca:66:2b:50:67:30:1c:5c:
         33:68:87:6f:b9:9c:5d:38:bb:a3:53:5d:51:53:c7:b6:15:b8:
         54:e6:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:52:21 2025 by rpki-client