Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
File:                     UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json)
Hash identifier:          P5eBoM3o2X+GdbdEm6jreojLBoXZxtfeanI6mFQXteA=
Subject key identifier:   7C:CA:2E:5E:8B:02:DD:DF:1E:7F:BE:B0:82:49:46:A8:6A:6E:EC:D5
Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36
Certificate issuer:       /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
Manifest number:          E6
Signing time:             Thu 03 Apr 2025 04:36:42 +0000
Manifest this update:     Thu 03 Apr 2025 04:36:41 +0000
Manifest next update:     Thu 10 Apr 2025 04:36:41 +0000
Files and hashes:         1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: Z/lsjubJf8RFC3EKwCtWDPvDg9Z+HnV0Kut7/L4/JYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl
                          rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C
        Validity
            Not Before: Apr  3 04:36:41 2025 GMT
            Not After : Apr 10 04:36:41 2025 GMT
        Subject: CN=67ee105a-83b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:76:21:85:cc:80:7c:e8:28:81:5e:43:c7:
                    2b:84:3c:81:d4:0f:4b:b0:19:4f:19:f5:d2:43:eb:
                    0f:05:1c:9c:43:ae:41:04:b9:17:f6:e6:4c:cd:81:
                    d3:d6:d9:06:e6:86:a3:7c:b7:be:07:1a:1d:32:43:
                    55:85:fc:30:d0:93:bb:ce:8b:bd:d1:f8:8b:67:b0:
                    19:6c:29:1b:f2:98:57:35:4c:8d:51:97:04:13:60:
                    15:8e:27:2c:5d:79:c2:d0:67:55:03:54:de:6e:82:
                    80:c4:1e:99:bc:f4:72:61:ac:08:64:81:d2:82:0f:
                    57:72:27:c8:7a:42:35:3a:d9:f8:cf:89:89:d3:69:
                    6d:36:22:f1:10:4d:75:7f:8b:f0:40:71:76:9e:5d:
                    2d:1f:66:61:1d:38:9f:93:0c:94:8c:df:8f:10:54:
                    e0:85:05:17:c7:7d:7f:0b:55:32:31:a2:c2:ff:0a:
                    0a:c3:28:9d:5a:6a:17:a5:d2:6c:74:59:a4:31:87:
                    a7:d8:8f:2d:44:05:58:97:e7:9d:e9:36:55:86:b0:
                    e1:91:0e:81:57:a2:f6:56:26:bf:8f:4e:ec:24:cd:
                    dc:19:a4:6a:12:a0:d1:1d:86:71:c1:23:16:a7:e0:
                    2d:b0:7e:e8:46:b0:12:67:25:e0:a5:0f:fa:b2:8b:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:2E:5E:8B:02:DD:DF:1E:7F:BE:B0:82:49:46:A8:6A:6E:EC:D5
            X509v3 Authority Key Identifier:
                keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:d2:a5:a1:22:59:e0:63:79:93:1b:7a:ed:55:ea:b4:e7:
         9c:28:32:eb:37:8a:35:78:8c:b3:5a:fc:59:f9:d3:ca:b7:a6:
         e7:a4:9c:8f:69:8d:2d:43:5b:30:58:d1:a7:9f:e7:bc:f6:a5:
         f5:ef:a7:68:2e:3c:58:5b:2c:bf:d4:86:4b:dd:b3:49:f5:ea:
         f8:64:c1:af:05:83:09:e7:e5:97:1e:3f:80:15:16:ba:bb:8f:
         46:ba:67:a5:d1:d6:a8:ad:e8:e0:69:5a:22:e8:33:9c:cf:43:
         f9:ef:a2:8f:be:4c:9d:50:f9:4e:5b:7c:e4:b6:58:5b:d9:d6:
         97:0d:75:d3:61:40:48:fc:94:20:f1:0d:db:6c:f6:8c:92:09:
         0b:f4:b9:3e:67:40:5d:c4:e6:e9:b7:f9:36:64:5d:71:e4:0d:
         ba:62:75:8d:40:69:9f:a0:6f:61:55:cc:3b:a3:b2:f6:e7:a9:
         4d:3a:30:2c:c6:f8:e8:57:6f:7f:49:04:66:29:08:18:70:50:
         dd:57:7b:b7:a2:3e:91:4c:ad:8d:63:a8:0f:1b:40:e5:35:a1:
         20:e8:93:aa:59:69:c4:de:57:95:b9:1e:df:2c:e5:55:ff:02:
         54:07:ba:2e:da:f7:db:48:48:9b:9b:52:74:90:27:ba:40:28:
         3a:b0:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:00 2025 by rpki-client