Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
File:                     SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json)
Hash identifier:          4TXU/39igcQ3NjiJt8RZaSmLYKItEdp8kCB1KLhfOBs=
Subject key identifier:   B7:66:50:66:A8:43:87:B4:E7:B7:11:B8:B5:23:B2:C5:22:84:5A:A9
Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Certificate issuer:       /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Certificate serial:       3314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
Manifest number:          3314
Signing time:             Sun 20 Apr 2025 15:20:58 +0000
Manifest this update:     Sun 20 Apr 2025 15:20:57 +0000
Manifest next update:     Sun 27 Apr 2025 15:20:57 +0000
Files and hashes:         1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: i0uTOuDbqKJYiZPWEs4meQEqW3qBTCsrd3mkXuXk+qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
                          rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 15:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13076 (0x3314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182EC4, serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
        Validity
            Not Before: Apr 20 15:20:57 2025 GMT
            Not After : Apr 27 15:20:57 2025 GMT
        Subject: CN=680510d9-58cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:d8:c4:dc:27:80:c2:ea:a5:45:d5:55:20:
                    56:7c:ce:40:d8:7d:bb:05:15:dc:e1:3a:4c:95:f8:
                    0c:1d:86:dc:be:67:96:27:fe:6f:08:e4:db:92:67:
                    27:38:5a:cd:19:9a:c5:43:db:7f:9d:f3:84:23:d1:
                    a0:cd:8d:43:e2:5c:65:25:85:8c:67:82:bc:71:cd:
                    41:3e:c2:01:ed:d6:7e:59:a9:b4:e7:65:56:ab:4e:
                    36:b5:fc:41:44:8f:e1:47:ba:70:f3:38:56:22:1a:
                    11:61:56:a3:6b:5b:6e:23:45:71:d8:3a:e1:bf:64:
                    dc:40:8e:b0:af:e8:d4:0c:20:6a:f6:c0:e2:b7:ed:
                    48:f9:61:b8:7e:70:10:70:30:70:75:a0:c6:d4:5a:
                    75:ce:3c:9e:eb:6c:74:7e:6c:13:25:63:7f:47:47:
                    5d:cc:87:c0:bd:e0:da:cb:c8:8c:cc:30:96:0b:d6:
                    61:c6:1f:43:d8:98:f2:55:db:8f:52:fc:16:27:e9:
                    b6:18:99:59:d7:8e:4b:4a:74:24:cf:51:27:49:f2:
                    a9:5c:01:8f:15:d5:53:02:31:dc:58:9f:b1:0d:4f:
                    a1:a6:b7:ab:2d:b9:68:71:a7:77:a0:87:df:6b:92:
                    8e:e2:c0:35:3c:a3:fc:37:66:5c:e2:dc:d1:62:82:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:50:66:A8:43:87:B4:E7:B7:11:B8:B5:23:B2:C5:22:84:5A:A9
            X509v3 Authority Key Identifier:
                keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fe:a1:aa:86:72:6b:6e:2e:05:7d:e2:28:77:98:a6:0c:59:
         77:40:de:b2:be:2a:4d:9d:bf:2c:0c:07:8d:47:1f:f7:23:49:
         1a:59:00:64:5d:47:01:65:3a:ec:25:2c:2b:d1:30:14:43:61:
         d3:fb:7b:31:36:e4:4d:be:3a:74:d5:90:03:b9:fb:ad:45:3d:
         d5:93:b9:87:35:f0:b2:ab:48:71:de:ff:a2:54:90:07:ee:43:
         76:4b:1c:c1:28:d3:c0:74:15:cf:c8:db:79:9a:74:e8:2b:63:
         ac:67:2a:21:71:85:b7:3e:21:17:fc:15:b6:cb:f2:1d:36:aa:
         29:e0:44:3b:c5:c8:14:be:75:23:cd:b9:10:cd:2d:8e:b4:55:
         eb:ca:f0:56:c6:65:97:b3:4d:60:fa:ff:3e:7e:a1:28:5d:52:
         8e:6c:52:9d:80:da:d7:cd:0d:9d:76:36:e1:0f:1c:e7:78:95:
         4d:95:cf:7a:1c:97:43:d1:74:da:93:c5:0c:fd:af:1e:12:ec:
         fc:91:d9:c5:a0:8c:5b:33:4a:54:e3:66:21:3a:49:05:b4:71:
         d4:a1:44:e5:ba:bc:e9:1b:4e:c3:62:16:cd:15:8b:86:91:f0:
         c8:85:47:8e:f0:79:52:af:f5:d2:a9:d8:9b:3a:66:9d:76:5d:
         35:8e:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:00:17 2025 by rpki-client