Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          ip9rwL+cu/cHG7vAbr/O/WsSiEHdD28AghCtmOmASsM=
Subject key identifier:   B3:FA:1C:26:96:35:3E:32:83:42:6F:E7:89:9A:5A:C8:04:68:AE:D1
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       0616
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          0616
Signing time:             Fri 04 Apr 2025 22:52:53 +0000
Manifest this update:     Fri 04 Apr 2025 22:52:52 +0000
Manifest next update:     Fri 11 Apr 2025 22:52:52 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: dy2r2zDSyxNMWzwxUUVisflhdoyJ7lw8vx3nrN1udkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F
        Validity
            Not Before: Apr  4 22:52:52 2025 GMT
            Not After : Apr 11 22:52:52 2025 GMT
        Subject: CN=67f062c5-f711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:c4:d1:c4:79:43:98:a1:28:e3:08:8e:bd:
                    dc:19:71:4d:c8:51:0f:d5:5a:45:fb:af:e4:23:3a:
                    01:f8:1b:01:89:f2:71:38:f5:82:f5:c6:7e:61:10:
                    01:1f:57:a3:d9:74:7b:ca:02:79:b8:43:3e:b4:31:
                    61:31:e0:2d:bc:f1:fc:4d:98:ef:f8:9c:ef:f6:e9:
                    33:fd:f0:c2:e8:17:f4:07:2a:0a:b2:f5:68:73:3d:
                    bd:95:ca:75:2c:aa:8e:60:36:38:53:1d:ec:dd:16:
                    0b:c5:05:70:3d:ac:d9:fc:cc:fe:37:d7:66:59:29:
                    5f:94:f1:f8:d0:43:b6:d7:5f:5a:41:a0:a4:bd:1f:
                    4a:ba:bb:31:b1:b7:2e:3c:d2:56:e2:d4:b6:47:e3:
                    52:3f:ed:44:36:0d:06:a3:2b:af:4c:7f:b5:60:15:
                    2c:14:6f:ec:9c:58:83:cc:d3:72:f7:d7:b9:cf:dc:
                    38:71:b5:01:0a:f3:2b:c7:c9:36:91:04:ab:33:74:
                    f0:24:82:80:6e:5e:e8:72:0a:59:73:f6:ed:44:67:
                    81:b9:ab:12:12:81:51:1c:02:f5:a4:39:bb:12:5a:
                    ca:fa:ad:21:1f:0d:e0:36:d6:e6:8b:44:a1:b1:f0:
                    f0:53:ab:93:4f:ae:26:43:34:aa:08:40:23:90:32:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:1C:26:96:35:3E:32:83:42:6F:E7:89:9A:5A:C8:04:68:AE:D1
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:35:56:99:21:1e:79:61:ce:1b:ab:de:70:c3:3b:11:86:
         61:5c:55:cb:d9:7f:51:85:ac:de:41:85:7b:a4:6d:05:89:61:
         14:b8:9a:24:da:5e:ff:9e:ab:a6:83:76:a5:05:65:e3:65:a9:
         93:b8:24:cc:eb:cf:88:10:6e:6f:42:18:b4:ee:fb:c5:f3:ff:
         eb:81:52:37:d1:91:d2:85:9c:8a:17:75:24:fd:52:98:9b:37:
         c2:47:82:06:62:e8:a9:3f:3b:d8:37:38:d4:14:b0:22:e4:bd:
         af:57:77:a7:48:b7:7b:dc:a9:4e:03:23:20:86:97:73:08:5b:
         9b:c5:da:bf:30:75:83:6c:5f:5a:fe:2c:a6:ce:5b:aa:98:8c:
         63:a0:59:15:36:d9:70:29:f8:9e:0d:b6:c7:67:9d:f5:59:51:
         66:73:20:e1:c3:c6:12:ae:00:42:da:b5:4e:44:98:e8:f9:f7:
         66:ae:56:b0:37:3f:b8:8d:29:e4:c7:79:3c:c5:79:34:85:20:
         6b:ed:c1:51:02:a5:7e:6d:d2:27:5f:b6:26:2f:28:d5:3c:8b:
         6a:4d:23:ae:d6:46:9d:89:dd:5b:13:2d:d0:6f:34:2e:c6:c7:
         ee:34:b7:91:4a:bc:5d:03:ef:6f:35:6d:e8:42:c4:76:d0:90:
         0f:fc:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:29:22 2025 by rpki-client