Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File:                     4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier:          Yy3KSnw8liFIzUA0Lbh+3W9z0teNKB2GJ8GVdR/lRQI=
Subject key identifier:   D6:56:32:71:3B:9E:57:1E:8B:A0:28:CC:7C:9B:2B:1E:C5:40:7F:2A
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer:       /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number:          7C
Signing time:             Sat 05 Apr 2025 05:58:50 +0000
Manifest this update:     Sat 05 Apr 2025 05:58:49 +0000
Manifest next update:     Sat 12 Apr 2025 05:58:49 +0000
Files and hashes:         1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: b+FnxISqauLSnp45er8pA49Kqj/k4G1SvmO9G6N6C1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A
        Validity
            Not Before: Apr  5 05:58:49 2025 GMT
            Not After : Apr 12 05:58:49 2025 GMT
        Subject: CN=67f0c69a-82c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:86:de:1e:03:4f:39:a9:b4:68:67:b0:08:
                    9c:05:6c:6f:bd:b4:99:9d:d3:64:ab:4b:0e:df:ca:
                    13:77:20:e0:8c:71:45:d0:d2:f3:35:70:d5:18:42:
                    1d:59:f2:45:23:03:b8:71:54:b0:8f:fb:c2:9b:86:
                    bf:7f:21:db:2d:30:b4:7d:dc:8a:c7:99:02:7e:a0:
                    14:ff:fb:ef:9d:d0:db:ac:31:05:bb:c2:56:ef:1b:
                    13:36:ad:ad:bc:fd:b5:18:9a:ed:69:1b:df:f8:76:
                    60:59:62:f8:65:cb:58:9b:ea:07:3c:64:4d:d5:91:
                    b1:14:e5:d2:72:59:e1:56:69:58:cc:28:44:37:43:
                    56:1b:33:a6:04:bc:5d:6c:42:e4:0f:5c:e6:d1:88:
                    6d:62:a8:36:d2:36:31:58:42:a8:ff:29:6d:d9:66:
                    ff:20:d8:08:93:7a:58:47:fc:cb:6d:99:82:c7:ea:
                    81:8a:95:c7:c0:af:81:2c:ce:0f:bd:be:a6:e2:14:
                    7e:99:84:0d:85:c8:93:85:9d:f9:d5:2e:de:ed:ef:
                    f6:89:ad:9a:68:15:fc:5f:42:8d:82:17:a4:70:70:
                    67:29:2b:e4:d3:b9:c8:f5:58:e7:a6:45:6a:3e:60:
                    bd:0e:3a:64:41:b5:df:89:f3:6e:7f:cf:45:d7:c1:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:32:71:3B:9E:57:1E:8B:A0:28:CC:7C:9B:2B:1E:C5:40:7F:2A
            X509v3 Authority Key Identifier:
                keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:49:9a:e8:c7:55:62:f0:3f:85:3d:0c:bc:ca:a3:09:6b:52:
         9d:6c:98:d6:a9:af:c7:a8:f1:7d:91:4b:3d:ae:8a:f1:86:dc:
         7f:d9:21:3c:a9:09:66:d9:13:ff:d4:67:50:06:34:9c:90:c2:
         cd:73:2e:c7:df:0d:a5:ca:42:47:a4:2d:aa:70:c5:cf:40:9c:
         78:05:9d:22:3d:bc:24:20:81:a0:9f:71:e8:30:77:a7:af:09:
         0e:91:c8:b9:59:31:95:99:69:e5:fe:70:b1:de:42:31:a5:d9:
         ec:f1:bd:fb:9a:6d:79:2d:eb:34:77:b1:d8:d2:2b:71:4e:8e:
         5f:0d:bb:a2:04:7e:65:1e:03:10:e7:bd:2d:a1:d9:52:90:2d:
         32:62:2a:24:de:72:22:d3:41:8b:f4:7c:44:de:09:ea:1e:26:
         ce:d5:99:f7:51:d2:d0:15:aa:02:89:3d:39:7e:9b:af:97:0c:
         c6:21:67:c6:f9:45:94:77:e1:31:d8:1e:61:a8:95:6b:38:20:
         d7:42:56:7d:9d:34:87:28:d2:66:28:88:95:fb:8c:56:da:3f:
         3a:06:7b:a8:7c:32:9d:00:0f:ea:ea:90:d5:cb:b4:63:aa:f6:
         15:0c:45:98:d3:f2:55:27:64:cf:33:bb:2a:4a:9a:35:26:f9:
         ca:8b:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:37 2025 by rpki-client