Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
File:                     jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json)
Hash identifier:          6lFTXMTQ9yUFJfYxwJtzHOFIeF/MQPUZ1oBe5qW+yTQ=
Subject key identifier:   6B:A0:A8:A5:6D:32:13:64:22:91:10:3A:C2:0C:14:E9:D4:9A:41:42
Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21
Certificate issuer:       /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
Manifest number:          44
Signing time:             Wed 09 Apr 2025 06:15:08 +0000
Manifest this update:     Wed 09 Apr 2025 06:15:08 +0000
Manifest next update:     Wed 16 Apr 2025 06:15:08 +0000
Files and hashes:         1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: cWa5lz5wB+4ObfLGdHF88iJx+OmDZm8Cw4lucH/DAOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 06:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363
        Validity
            Not Before: Apr  9 06:15:08 2025 GMT
            Not After : Apr 16 06:15:08 2025 GMT
        Subject: CN=67f6106c-e48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:3e:1c:d5:9c:08:0e:e2:d7:d3:09:94:5a:
                    b4:27:08:15:aa:22:41:69:63:b4:1e:5f:d9:ff:4c:
                    db:04:44:0f:75:2f:5a:03:9e:5c:52:f7:4a:01:56:
                    61:d7:31:54:25:d3:af:85:25:9f:aa:c2:bd:99:d2:
                    45:4d:13:98:83:90:3c:2f:e4:f2:c3:6a:d1:b8:be:
                    7f:4d:55:f8:d8:2d:77:e9:5a:8a:96:a8:bd:ff:ff:
                    7f:30:d1:1c:c6:fd:45:55:52:e2:19:3f:1e:96:74:
                    4c:15:78:f4:4c:fc:65:e0:3d:8a:cf:7f:a4:57:90:
                    95:33:31:e4:c0:21:43:b0:e2:e3:b7:70:db:46:52:
                    8a:1b:01:4b:1e:8d:ac:ff:b4:8e:59:45:87:65:9e:
                    01:bb:60:8b:54:3d:14:4f:7a:cc:67:40:46:cc:47:
                    bc:8b:5a:7c:e7:00:ae:7f:e0:f9:71:22:a6:15:b9:
                    87:a5:b2:c1:bf:80:9a:db:ec:e9:3f:ab:c2:85:1f:
                    c6:0b:0b:60:10:1b:e8:40:cf:bd:5e:9d:b5:eb:ba:
                    83:0f:49:b3:7a:e8:38:c4:06:a6:92:f5:b7:d5:a9:
                    20:3d:ad:c9:3a:01:78:3e:54:ef:da:a5:f7:24:ef:
                    2d:89:fa:9d:06:ff:57:c0:bd:92:70:50:8b:6b:1c:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:A8:A5:6D:32:13:64:22:91:10:3A:C2:0C:14:E9:D4:9A:41:42
            X509v3 Authority Key Identifier:
                keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:9c:25:1c:9b:0f:14:4a:c6:7e:7d:e3:99:46:33:31:87:
         4c:9d:ea:e7:8c:c1:a1:4f:bd:43:d3:c6:0d:cf:b4:38:5a:3d:
         44:90:ef:6a:7f:06:76:12:f1:6a:59:d5:38:60:d5:ce:02:61:
         66:cc:da:24:c0:1e:df:6a:e8:c8:81:28:31:b4:51:38:43:1e:
         30:8f:da:8b:51:fb:c9:d0:45:35:47:f2:7d:29:25:3c:d7:0a:
         a9:cf:89:e6:ff:3d:4c:0c:b9:7d:27:4e:6f:b8:fa:f3:46:7e:
         de:90:d0:f2:e9:a0:80:d8:78:7c:4c:f4:a6:2c:e7:2e:01:1b:
         f6:2b:c1:10:89:95:0a:3f:17:65:0e:10:bf:79:47:6c:5c:21:
         d9:a3:bd:08:b5:81:67:f4:1e:64:c8:d5:d3:1f:0c:e6:bc:c8:
         83:cf:c9:72:77:0d:c5:f1:d7:3d:24:e0:10:df:9c:43:33:d0:
         68:58:c8:ea:e3:82:e5:37:92:ae:2a:35:1d:e1:f1:be:9c:e8:
         45:63:54:88:9c:58:2f:f1:59:d3:3c:e0:ed:bd:7a:5f:be:c9:
         a7:fd:33:8b:b5:31:5b:dd:0a:f4:3d:b7:fa:a2:fa:95:b0:36:
         27:35:93:a0:81:18:69:fa:d9:23:3f:32:1e:56:78:1e:92:2a:
         57:4f:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:10:57 2025 by rpki-client