Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier:          Zy9xzUz7b27wRd7J7+06TDuFlWrx6in8f7aSDGR3O6s=
Subject key identifier:   CA:32:61:16:28:31:32:64:9E:84:03:41:1D:C8:D5:9D:76:6A:C4:42
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer:       /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number:          0168
Signing time:             Fri 04 Apr 2025 20:31:25 +0000
Manifest this update:     Fri 04 Apr 2025 20:31:24 +0000
Manifest next update:     Fri 11 Apr 2025 20:31:24 +0000
Files and hashes:         1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: QrGnfFdrbvxfdVD6GmhkP8l9+Cb1vX0hVwiqVFm5lQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 20:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8
        Validity
            Not Before: Apr  4 20:31:24 2025 GMT
            Not After : Apr 11 20:31:24 2025 GMT
        Subject: CN=67f0419d-25d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:03:4c:c4:65:90:dc:6b:6d:ec:7c:48:3f:
                    c3:3c:b7:95:e8:46:33:a2:bd:b5:db:d9:07:2c:34:
                    c1:da:eb:bd:3b:20:7c:8c:47:d3:2c:3e:53:79:7e:
                    1e:1b:20:f6:8f:83:8b:b1:7d:d7:69:8f:ed:51:ff:
                    ce:a4:ef:66:98:6f:0b:9a:b3:bc:e7:e2:32:c7:05:
                    0a:98:18:41:0b:10:3d:68:1e:d4:5a:0e:58:3e:a9:
                    1e:f1:c1:be:b0:be:9a:00:fc:89:dc:95:b6:31:cd:
                    36:52:ed:b2:64:f2:19:f6:d1:f3:22:3e:2c:d9:3f:
                    95:e1:f2:b2:aa:17:3a:44:e4:c8:eb:4e:93:e7:73:
                    c4:9f:e7:af:86:23:6c:06:01:b7:a7:94:06:c1:c4:
                    db:ca:80:0e:99:ad:75:75:ae:35:ad:a7:bd:97:4e:
                    a7:43:e3:60:43:c2:4d:c6:9a:7a:d2:eb:b0:31:7e:
                    f7:39:2d:ee:b2:c2:17:3a:0d:df:c9:e2:c4:45:ec:
                    d9:b2:ff:49:40:09:43:6a:58:12:7b:21:5a:dc:e8:
                    f0:b4:6b:9e:84:82:48:e2:42:f0:86:78:35:b8:d7:
                    bf:df:09:0b:8a:25:55:fb:9b:ed:a6:e2:d6:0b:11:
                    f5:73:9d:d7:5e:09:f9:f1:c1:1c:6c:0b:d0:31:59:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:61:16:28:31:32:64:9E:84:03:41:1D:C8:D5:9D:76:6A:C4:42
            X509v3 Authority Key Identifier:
                keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:bd:af:08:7e:4a:c9:45:2c:48:76:da:f4:d3:9a:ca:a5:
         27:15:e7:24:ac:ae:41:c5:e7:ee:60:4a:fd:de:06:47:ae:bd:
         9d:f5:74:c0:ec:3a:9b:2c:f9:76:2b:80:45:a5:33:26:7d:f3:
         7e:37:f7:ec:a0:84:2f:c4:09:93:79:34:66:c1:b3:2e:d2:76:
         d5:04:2f:ab:58:e6:cf:c6:25:8f:e6:16:83:2c:26:6c:41:fc:
         a9:5d:bb:95:ca:2b:d1:89:57:aa:d1:60:c4:57:de:2b:1c:03:
         33:44:48:ad:20:d3:4f:e9:65:6c:97:bb:9f:f0:bd:ad:f1:ae:
         88:b9:59:b2:28:08:90:a3:bd:8b:73:2f:a9:35:11:81:a3:a5:
         a5:71:9f:2a:d7:e2:43:f7:82:41:40:f7:16:e0:62:02:47:66:
         a7:81:2d:43:53:2b:41:86:b9:f4:08:c5:7e:4e:6a:f4:35:1c:
         c9:77:49:af:8f:1b:32:f9:6d:f1:7c:f1:92:c1:ad:9d:20:f4:
         c5:03:75:12:e4:88:ba:dd:30:bf:b1:40:1a:d6:c1:02:68:bc:
         36:2c:1d:71:3b:1d:02:9e:bb:cf:67:00:5a:e1:f5:3f:85:a3:
         73:35:4c:bf:93:92:5c:16:26:0b:df:f0:81:2e:9c:ec:6b:cc:
         3a:8f:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:46 2025 by rpki-client