Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
File:                     adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json)
Hash identifier:          vehwL0U4HvuJJzDAFigP15U32KqzSgqN0jLDmLbK/54=
Subject key identifier:   73:05:2B:B4:E8:0C:20:2A:CF:B3:1B:11:9E:9F:3F:97:37:48:E9:05
Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49
Certificate issuer:       /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
Manifest number:          4A
Signing time:             Fri 11 Apr 2025 06:32:54 +0000
Manifest this update:     Fri 11 Apr 2025 06:32:54 +0000
Manifest next update:     Fri 18 Apr 2025 06:32:54 +0000
Files and hashes:         1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: cqZZj7YcuMwHBhnqMJPAH2xqTvjO3zuKf8t6lDNyMOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 06:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849
        Validity
            Not Before: Apr 11 06:32:54 2025 GMT
            Not After : Apr 18 06:32:54 2025 GMT
        Subject: CN=67f8b796-c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cd:59:08:8d:68:43:e5:bf:32:a2:12:e0:3e:
                    f7:63:35:0f:2c:ee:41:26:86:b9:1b:03:4a:10:ab:
                    52:35:cd:70:97:28:0c:36:b3:37:4e:68:43:03:89:
                    0f:1f:f5:40:7c:24:59:8d:f1:f8:bb:68:be:b8:9a:
                    29:82:84:de:09:02:9e:fc:ef:b7:51:cb:34:cd:c9:
                    6c:1e:e1:ff:3c:51:4b:76:4b:60:d5:5b:b1:ea:61:
                    df:3c:15:f2:f8:22:e9:d1:ff:5d:c3:e5:57:f6:d5:
                    e2:d4:60:65:3b:06:86:88:78:ab:dc:93:e1:ed:59:
                    cf:d1:36:7e:d2:a1:1f:82:3b:da:86:72:50:19:75:
                    f1:2f:e0:bd:76:9f:7a:75:80:4e:be:32:c2:ce:5d:
                    98:85:62:86:51:41:98:81:1c:ee:91:46:80:10:8d:
                    af:46:0e:cb:70:a7:02:6a:64:eb:db:ae:0e:ac:51:
                    0f:30:07:76:3b:fb:07:e2:cb:ce:1d:bd:50:c5:03:
                    9f:69:bd:e1:03:e2:3f:88:02:50:16:b0:33:a8:e3:
                    ac:37:ed:b6:aa:51:5e:a8:92:da:81:10:a1:fe:bf:
                    22:a6:e4:83:a3:4c:0d:bc:a2:9e:f6:01:c9:a8:d1:
                    7d:93:d6:c8:45:01:ea:59:da:68:53:bc:52:b2:3e:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:2B:B4:E8:0C:20:2A:CF:B3:1B:11:9E:9F:3F:97:37:48:E9:05
            X509v3 Authority Key Identifier:
                keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:38:8a:0c:24:6b:20:fd:8b:65:00:cc:07:46:5f:6e:20:
         aa:7a:57:59:8c:a1:97:c3:76:50:b6:39:14:4f:a0:66:38:b3:
         31:f9:fd:28:d6:51:95:f5:09:b1:7b:a0:d8:aa:77:bf:b5:26:
         72:b9:09:b5:10:e0:55:34:d0:5d:eb:d4:a5:8a:3c:86:12:eb:
         98:e8:23:1e:a1:b1:1d:bc:ce:35:7c:f7:91:67:f8:29:11:20:
         df:07:6c:dc:87:4c:63:f8:39:fe:45:e8:00:2a:ab:6d:e6:3b:
         c2:98:e2:a7:00:2d:09:97:07:fe:05:25:87:55:a8:e3:0d:97:
         06:72:3b:2d:f8:bc:a8:24:1a:2c:3c:15:a6:5c:3d:c6:9f:20:
         61:53:01:28:1e:d1:39:3d:b5:6f:d0:a7:be:71:12:b9:66:f7:
         08:8b:5f:77:50:4a:d1:a2:4e:18:a3:db:e4:37:79:f0:f5:9d:
         e1:96:fb:48:c6:5f:5f:be:17:35:c6:bf:f9:3e:ea:6b:28:a6:
         7d:45:04:70:4d:fa:ed:da:d7:9c:f4:e9:17:83:14:cd:58:67:
         ea:ec:d4:9e:3d:b2:f7:3a:85:e2:19:73:4b:a1:3a:47:a3:93:
         89:cf:3d:3d:da:d3:a5:c3:c1:ff:6a:a3:d5:8f:2d:e2:56:c6:
         41:2b:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:26 2025 by rpki-client