Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft
File:                     Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft (raw, json)
Hash identifier:          5fDCQez9UdqzRQIYWxGBE9qM3uAQFuZ/567GkZGQO5s=
Subject key identifier:   E8:08:A4:65:72:5E:AC:07:5F:F9:C5:39:2B:D2:29:48:CC:B4:68:2B
Authority key identifier: 06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4
Certificate issuer:       /CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4
Certificate serial:       09E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft
Manifest number:          09BA
Signing time:             Sun 06 Apr 2025 19:51:54 +0000
Manifest this update:     Sun 06 Apr 2025 19:51:53 +0000
Manifest next update:     Sun 13 Apr 2025 19:51:53 +0000
Files and hashes:         1: Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl (hash: UJ/sFyDztUmKTrJZOdY4QTg14OGW2hYdE8IPkQioFwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl
                          rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 19:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FC2
        Validity
            Not Before: Apr  6 19:51:53 2025 GMT
            Not After : Apr 13 19:51:53 2025 GMT
        Subject: CN=67f2db59-e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:44:cc:65:93:18:e7:85:a7:58:ce:ed:69:
                    5a:44:35:1f:b5:98:64:05:aa:ae:75:e0:87:24:83:
                    1e:76:4f:0b:af:70:98:5d:1c:7d:ea:1d:06:70:ec:
                    03:b4:60:1c:89:f9:7a:48:6c:2d:62:8d:b0:2d:0b:
                    8e:73:5b:f7:d7:6a:34:2c:b1:90:91:ad:ac:b6:51:
                    02:c5:b0:40:eb:e2:a8:37:e1:1f:2f:66:52:5d:5e:
                    31:f7:83:1b:b8:bc:06:88:44:4b:29:9f:e6:45:52:
                    72:8e:c3:a2:24:8c:3b:ff:06:ce:7f:6d:d7:d9:b5:
                    95:97:9c:8b:89:da:f2:03:12:c4:a6:22:ca:33:c5:
                    c5:23:73:17:41:db:da:00:3d:f7:5b:33:6a:6e:3a:
                    ee:3f:af:3c:65:cf:da:e6:e5:7a:c2:25:f1:18:55:
                    15:44:cf:96:17:fc:93:ba:20:01:a5:12:0e:88:3d:
                    5c:95:11:6d:39:6e:f5:fe:51:f6:97:0a:81:cf:cb:
                    b1:9e:67:d9:e8:00:cb:a2:a6:91:f6:5f:de:68:44:
                    e2:ae:fe:9e:65:49:9f:97:89:0c:32:6f:96:37:41:
                    ab:07:2c:50:80:7d:01:0d:87:4f:08:1d:89:14:64:
                    25:b9:f6:33:de:7a:c9:1a:fb:82:84:0c:3d:e0:c4:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:A4:65:72:5E:AC:07:5F:F9:C5:39:2B:D2:29:48:CC:B4:68:2B
            X509v3 Authority Key Identifier:
                keyid:06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:90:93:e6:df:26:8b:39:92:d4:6f:37:2a:db:6c:54:ad:c7:
         1e:53:66:35:20:40:99:69:5f:6b:74:18:9e:6f:c1:22:f3:7b:
         5e:08:65:b3:cf:b1:81:7d:d4:cc:5d:a1:aa:d0:58:76:3c:d3:
         f2:05:bf:2d:82:3f:1f:55:0e:d1:82:7c:cd:f4:e6:1a:ea:15:
         5a:1c:fc:a9:6f:52:f4:02:1e:54:dd:13:5b:ac:2f:ca:74:94:
         ec:c0:4b:09:d2:2e:be:9b:15:8c:71:c2:53:97:eb:14:5d:88:
         54:00:2e:fd:bf:8d:64:a3:40:a1:3e:00:28:90:05:6a:c5:0e:
         7d:f1:b1:05:84:68:d9:a0:90:63:91:b9:16:4a:03:14:4b:72:
         0f:49:70:c7:72:87:27:89:6d:ee:cd:c9:3b:7f:b1:77:a8:49:
         5d:55:19:ce:88:3b:b9:ab:db:44:6d:4b:c0:f7:fc:c0:46:f1:
         81:4a:86:7f:3e:7f:de:8a:56:e7:5c:7a:1c:57:bc:e8:71:93:
         03:28:cb:59:71:ae:ab:3e:43:b9:f2:a6:26:09:f9:91:25:67:
         83:42:db:ce:7c:19:5b:f9:e0:08:f6:d3:ea:94:82:26:96:aa:
         c3:61:ee:29:00:e6:02:4d:d9:98:08:c1:08:6f:8a:be:25:35:
         87:d8:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:04:50 2025 by rpki-client