Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File:                     bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier:          U3sdcZNgzQeXwzDclOF9CufFsCHxKSkoo8IADZVc2Ug=
Subject key identifier:   D2:D7:E5:17:B6:CE:EE:EC:53:CD:5E:33:8D:C8:83:C5:AB:37:67:EF
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer:       /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number:          026B
Signing time:             Sat 05 Apr 2025 01:49:50 +0000
Manifest this update:     Sat 05 Apr 2025 01:49:50 +0000
Manifest next update:     Sat 12 Apr 2025 01:49:50 +0000
Files and hashes:         1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: B8+bDCQ7FPFJP/tN+YdjEDnpFmhL3wcKpAloRI7NdF8=)
                          2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: LYlnmY38WC+/5pBo6/8yuliMtbU1c9X35OeWacBJJcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
                          rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870B9
        Validity
            Not Before: Apr  5 01:49:50 2025 GMT
            Not After : Apr 12 01:49:50 2025 GMT
        Subject: CN=67f08c3e-46bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:ae:fc:9d:d8:75:04:9f:08:e3:1e:92:49:
                    66:35:1a:4c:87:00:c2:e3:0c:5b:44:d2:15:6d:50:
                    d2:e3:a3:ff:f2:77:04:22:b1:42:56:f1:14:e9:36:
                    d7:41:ee:ce:48:1e:4f:23:15:3c:f8:14:42:6b:26:
                    7f:e5:3b:dd:e3:7d:d1:a4:15:3a:4e:a3:bf:1f:4d:
                    d0:20:f2:2b:28:27:d7:14:31:45:69:97:f8:d1:1b:
                    c0:a8:10:aa:2a:e8:15:15:19:61:cd:1b:94:9e:1f:
                    e2:f1:45:1a:51:98:a6:20:35:a0:ce:46:52:f5:8c:
                    ac:75:14:05:d0:e7:4b:44:f0:aa:bc:02:69:f7:c3:
                    4e:ab:62:3a:21:96:19:74:b7:5b:d0:56:78:c0:f0:
                    2d:2d:5b:99:fe:98:6c:ec:bb:5c:c9:19:e7:94:80:
                    f6:8f:7f:40:fe:ad:b3:76:d1:ce:11:cd:d5:75:02:
                    22:59:d1:38:ed:1e:5d:c6:6a:61:58:37:5b:cb:8e:
                    2b:93:06:d1:83:98:6e:18:c0:4a:85:f0:61:a0:e6:
                    ff:5e:f0:1d:36:9d:fd:0f:42:53:4a:e4:43:6a:d2:
                    f3:7e:36:40:13:5d:f9:a2:32:c9:f1:bf:b6:a0:37:
                    6a:0d:14:de:71:07:9d:c7:38:7a:40:36:75:eb:db:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:E5:17:B6:CE:EE:EC:53:CD:5E:33:8D:C8:83:C5:AB:37:67:EF
            X509v3 Authority Key Identifier:
                keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:d3:c9:e1:03:e4:15:1c:e4:8a:45:b1:0e:fd:e4:02:f2:
         72:86:b6:ee:ee:ac:40:09:92:ae:e9:93:6c:b6:1a:b6:90:39:
         2f:53:17:e1:4c:6c:7c:29:b5:61:4a:c8:b8:37:c9:3f:e2:bb:
         06:87:d1:7b:70:4d:18:1a:47:81:0f:d7:6e:5e:2e:c0:a6:52:
         6c:0d:f0:b4:00:e1:db:2c:96:42:66:d9:2a:d4:92:aa:8a:6d:
         20:a1:5a:7f:6d:a3:ce:70:de:f4:80:cd:ec:68:82:18:60:52:
         16:87:43:53:7e:cd:b1:ae:37:10:d3:6a:6a:13:1d:b6:5e:c4:
         bc:4e:96:4f:a3:b0:dc:12:ae:21:01:d8:41:69:2f:5d:7c:2a:
         61:df:99:76:e6:e2:aa:2a:51:42:e2:25:4f:d5:2d:86:40:01:
         24:86:98:13:13:d0:76:e7:79:de:d9:ff:43:a6:17:8d:7f:4e:
         12:30:79:0d:2f:36:c4:ea:03:32:03:0a:e2:72:24:65:6b:00:
         a2:6e:83:94:78:50:99:a5:c7:d1:41:b4:28:c3:d8:91:60:15:
         cb:d5:b2:3b:22:66:aa:21:a2:03:16:60:2c:eb:15:a3:1d:cd:
         2b:78:3a:a5:5a:cf:a6:e0:b3:38:c8:6a:91:f7:90:35:df:c0:
         9b:ca:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:39:55 2025 by rpki-client