Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
File:                     RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json)
Hash identifier:          8UgoDt13Sz4UP+wcZEM4PKrt/2C1lVIDugocVGIva3Q=
Subject key identifier:   C6:58:B3:5E:2A:05:E2:EF:B9:8D:4E:27:13:8F:2F:C6:79:C3:D3:68
Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
Certificate issuer:       /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
Manifest number:          8C
Signing time:             Tue 15 Apr 2025 05:16:39 +0000
Manifest this update:     Tue 15 Apr 2025 05:16:38 +0000
Manifest next update:     Tue 22 Apr 2025 05:16:38 +0000
Files and hashes:         1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: 3pMR45Tu/4gqveYvpzNMYtUtejRftdABsNTeC1usNEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 05:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
        Validity
            Not Before: Apr 15 05:16:38 2025 GMT
            Not After : Apr 22 05:16:38 2025 GMT
        Subject: CN=67fdebb7-6f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:b7:a3:45:36:e5:52:60:e2:ef:d3:e7:75:
                    5b:4d:11:65:34:b6:1d:0e:01:45:70:a9:1c:36:4f:
                    be:c6:98:e7:44:fe:9f:1b:a9:45:b1:5b:e8:23:e1:
                    ef:04:8e:6b:1e:cc:00:1c:90:21:db:7a:77:6b:8b:
                    2e:81:aa:37:2b:73:32:06:fb:40:2a:48:64:10:f9:
                    7c:ef:a9:52:31:44:4a:78:45:b8:22:32:58:02:4e:
                    5e:b8:12:6b:b8:1b:ec:54:b3:53:da:a9:43:7d:17:
                    b9:f4:64:1a:80:da:c5:a3:68:b5:db:9d:22:81:f2:
                    93:d9:21:8c:2d:55:7c:63:7d:a1:56:7a:8c:19:5b:
                    66:bc:9c:4c:9f:bd:37:c4:17:1f:6b:64:6f:c2:6d:
                    51:91:54:a3:cb:ec:c5:a1:d2:62:ed:b8:24:14:38:
                    11:f3:15:0c:69:85:b2:7c:c8:dc:f5:0b:7a:62:e7:
                    26:be:78:4a:6c:9b:74:b7:04:20:bf:8d:df:c1:d2:
                    53:55:7c:90:55:1f:43:27:2b:d0:0a:03:70:04:c5:
                    d8:15:ad:6c:29:da:21:ad:cc:3e:98:34:42:33:a0:
                    d2:4e:29:3a:c4:e8:bb:2b:fd:24:6f:79:96:1f:24:
                    85:f9:80:de:16:8f:1f:c8:f0:6c:20:c7:9f:3f:db:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:58:B3:5E:2A:05:E2:EF:B9:8D:4E:27:13:8F:2F:C6:79:C3:D3:68
            X509v3 Authority Key Identifier:
                keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:eb:84:95:fd:c2:b6:c3:ed:6e:23:80:ff:3d:34:52:4c:
         07:fa:bc:5a:02:3b:a7:e2:73:63:88:3d:db:69:54:b8:ca:82:
         59:60:d1:99:82:58:c5:20:82:f7:ca:c8:b0:de:7d:5b:68:ed:
         c4:32:9a:54:56:c8:b3:2f:77:0f:bf:a0:15:72:e9:20:fe:4c:
         2e:bd:d3:a0:dc:94:03:33:ab:3e:96:4a:9d:d6:a0:13:4a:ba:
         c1:00:65:a3:a1:8b:0f:d6:d6:83:7a:95:86:eb:25:1f:69:6d:
         8d:5e:0b:d6:8b:41:4c:2d:5d:57:0f:34:bf:a2:11:f8:47:41:
         e0:5d:6e:b0:55:8d:ea:60:aa:ea:02:86:6b:94:f2:de:7d:0d:
         2f:18:7d:d4:9f:ad:54:1e:e4:a7:95:7b:67:39:1b:e3:1c:3d:
         0e:cc:20:92:96:7b:ce:ce:88:f4:db:2c:3f:87:2e:ad:a4:a7:
         92:ff:0a:d4:60:7b:49:f2:8d:36:e4:5b:f7:84:cf:8a:6c:3a:
         e2:85:c4:bf:f1:aa:4c:70:ba:19:cb:a4:85:de:e8:28:f8:02:
         08:a7:25:df:a7:2a:d3:20:6a:8f:09:88:26:86:80:14:6f:c2:
         33:25:e7:e4:8d:b5:44:c8:c7:c2:e7:fe:7c:cf:c4:58:65:57:
         1e:ce:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:18:37 2025 by rpki-client