Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
File:                     DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json)
Hash identifier:          D/0jwa23os5WzmvQDhMv45uelJ5BqKQjUHgODLtbKWk=
Subject key identifier:   7B:36:2C:6B:48:ED:22:0A:94:52:8F:C9:E7:80:9D:87:A9:C5:5D:B7
Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
Certificate issuer:       /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Certificate serial:       0F1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
Manifest number:          18F3
Signing time:             Fri 04 Apr 2025 17:45:27 +0000
Manifest this update:     Fri 04 Apr 2025 17:45:27 +0000
Manifest next update:     Fri 11 Apr 2025 17:45:27 +0000
Files and hashes:         1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: vjQG+sU8vVy/ZFIrMiN4LtupRsRhS9m2ktEkNT3RpEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3870 (0xf1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C
        Validity
            Not Before: Apr  4 17:45:27 2025 GMT
            Not After : Apr 11 17:45:27 2025 GMT
        Subject: CN=67f01ab7-31e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:bc:ee:b0:46:d0:f5:10:4e:49:34:dd:f6:
                    62:47:f1:5e:0f:55:ba:0d:a6:88:d1:87:11:a9:83:
                    19:4e:9f:58:e5:ae:f9:2d:55:f3:e9:82:71:64:d0:
                    aa:84:92:09:7b:48:c9:ab:80:b6:8e:ff:13:f3:d9:
                    a6:4b:2f:6e:8f:eb:53:1c:66:dc:c4:c5:ad:6f:3c:
                    55:af:63:2e:0b:c7:87:94:db:a0:f9:34:a9:2f:cb:
                    13:ee:da:a3:43:cc:d7:e1:08:35:3e:68:c9:e9:5f:
                    a4:69:a7:24:1d:9d:ec:c1:8e:7e:29:eb:63:d7:04:
                    42:8d:4b:a7:34:fb:74:58:af:de:c9:81:14:11:ad:
                    c7:30:b3:db:bd:3c:54:00:70:9a:23:98:5e:b0:6c:
                    11:a8:81:1c:a1:73:5c:91:af:21:9c:9f:1b:0e:7f:
                    52:cf:22:89:c8:64:9d:73:19:43:d4:36:eb:d7:30:
                    32:65:92:0b:fe:0b:92:60:80:f1:ef:8b:47:a5:c5:
                    bd:ac:1e:45:bd:fa:5d:c5:dc:2b:c9:81:45:d3:86:
                    75:ac:05:62:f1:de:b8:d8:52:05:2d:06:45:5b:71:
                    8c:74:a8:04:e5:6c:f7:d5:7b:1d:25:ca:55:01:51:
                    df:2c:62:80:f9:fb:31:1f:ac:a5:e8:c2:dc:32:85:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:2C:6B:48:ED:22:0A:94:52:8F:C9:E7:80:9D:87:A9:C5:5D:B7
            X509v3 Authority Key Identifier:
                keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:b9:83:ae:1c:1a:3d:ca:ec:1d:5c:5d:07:11:09:fd:8a:
         5a:73:41:18:0c:d3:b4:c1:d6:66:e2:27:8d:57:c1:12:49:2f:
         56:98:43:10:29:2a:1b:9c:2d:4e:86:70:2b:f8:be:66:79:0c:
         fd:85:80:cf:47:6b:fc:63:f0:b2:0a:8f:a9:10:05:f1:01:e0:
         14:19:44:33:d9:38:dc:aa:ba:6f:87:f3:2f:09:d2:ab:29:d0:
         37:8a:2b:74:af:42:8a:58:8b:df:3e:42:61:b8:c9:73:4d:a8:
         84:5f:f5:28:8e:d3:3b:bc:d0:69:1b:a8:3b:ce:5d:57:83:ba:
         b0:ad:4a:9e:10:a3:8d:03:68:40:3f:40:06:dc:80:b1:b1:50:
         87:eb:4c:df:72:b5:cd:64:39:eb:74:56:dd:92:b4:db:b0:e3:
         b7:1b:59:0e:5e:51:34:08:f0:78:06:0a:03:43:86:ba:06:c6:
         ac:09:50:49:15:32:c2:79:83:57:61:03:1e:7a:e4:23:63:f2:
         c1:e9:81:29:09:52:89:e2:84:e4:af:2f:30:84:7b:1c:1d:0a:
         f3:a9:f9:24:01:06:f8:85:ea:a0:e2:17:78:06:62:ab:02:b3:
         bd:c4:91:31:4d:67:58:79:b5:3a:e0:45:31:c6:b9:80:c2:e9:
         f7:f9:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:04 2025 by rpki-client