Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
File:                     r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json)
Hash identifier:          jweJ9RaspzqNLyCF3TRhyTAhKuxkXVhbL/KR/meQhJA=
Subject key identifier:   20:28:6F:66:9D:12:6A:40:B0:5A:1D:4B:2F:46:4D:3A:09:72:60:50
Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1
Certificate issuer:       /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
Manifest number:          69
Signing time:             Thu 03 Apr 2025 06:12:25 +0000
Manifest this update:     Thu 03 Apr 2025 06:12:25 +0000
Manifest next update:     Thu 10 Apr 2025 06:12:25 +0000
Files and hashes:         1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: E0e0E1p6bwE9nACvrygWNj4lE9AA08bs6vx0YkKFUjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl
                          rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E22
        Validity
            Not Before: Apr  3 06:12:25 2025 GMT
            Not After : Apr 10 06:12:25 2025 GMT
        Subject: CN=67ee26c9-2a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:0a:d5:03:61:c6:0a:10:2a:42:d8:fe:69:
                    d7:4e:8c:82:88:09:c2:38:07:33:f1:8d:f3:0a:93:
                    25:50:cb:08:b7:af:c0:ea:90:d1:08:6a:be:5b:80:
                    2f:60:50:9d:fc:e3:3f:0f:ed:d9:f4:ba:28:8e:01:
                    e4:bb:0b:0b:57:c6:83:52:bd:f5:a3:5c:ef:45:d5:
                    ba:e2:a2:a9:93:85:90:f3:0c:23:f5:6c:11:6a:49:
                    03:17:3a:92:33:e8:f3:4c:dd:13:3e:75:7b:f7:00:
                    f0:0e:8d:ce:1d:8f:95:b8:4f:da:d1:42:de:cd:0d:
                    ac:2c:de:2d:2b:a4:5b:ff:33:18:a0:93:98:6e:b6:
                    ae:54:8b:07:79:a7:f7:ce:dc:3b:13:73:68:4e:bd:
                    e3:98:4c:18:a0:00:63:13:72:7f:b8:ed:2a:70:be:
                    0f:e9:18:aa:40:80:39:04:8f:19:ba:32:29:7f:75:
                    19:81:bd:ab:0f:b6:88:4d:c1:8c:5f:e4:89:6b:e4:
                    27:dc:6c:fa:0c:bc:05:1c:cb:2f:5a:fa:0b:dd:de:
                    06:39:b5:17:23:24:85:2a:81:df:59:b2:ce:0e:71:
                    63:c2:49:0f:ae:98:e6:38:5b:df:18:95:ac:2e:18:
                    63:83:65:f2:8a:aa:92:21:cc:65:96:1a:dd:14:ea:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:6F:66:9D:12:6A:40:B0:5A:1D:4B:2F:46:4D:3A:09:72:60:50
            X509v3 Authority Key Identifier:
                keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:06:53:e6:b7:35:ee:3f:f7:6a:5e:8e:37:a0:d0:fa:d6:
         ed:44:f9:5b:6d:f2:4b:66:ec:ca:3c:6d:20:66:f0:76:34:48:
         96:7b:97:81:19:77:b7:11:3c:1f:86:d1:17:ef:92:bf:ed:14:
         6b:e5:fd:3e:23:24:77:9e:03:78:f7:7e:97:a9:1a:48:6f:53:
         24:07:2a:4d:c6:6c:74:f9:1f:22:77:7f:f1:87:50:02:7d:8c:
         8f:d7:ad:82:0b:7b:61:07:4f:5c:00:13:33:bd:b0:96:e6:9d:
         5c:39:19:79:0c:5a:3d:3a:30:b5:d9:25:73:50:be:3b:e5:a0:
         fa:c5:5c:b3:b0:68:0a:eb:63:63:ef:e9:7a:9d:8b:96:71:08:
         b9:72:ec:30:8a:9c:12:1a:38:b9:2c:71:c9:45:bd:79:fa:2b:
         7c:8b:4d:65:87:45:f4:a4:c0:d9:0a:ac:06:10:73:9e:fd:c2:
         d4:d3:c7:de:91:90:a8:d3:58:e6:0f:13:3a:a1:c2:a8:dd:88:
         84:81:d4:ab:b0:ff:ba:5e:7e:f1:17:5d:79:2b:b1:03:83:a4:
         15:88:a9:23:54:5f:1e:ce:e8:08:9f:09:d0:ec:85:18:60:b8:
         2c:ac:16:41:68:7a:62:77:be:3d:c7:d9:88:f3:e7:34:86:e2:
         c7:e7:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:20 2025 by rpki-client