Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          W+3VuUt5z3b8q8TkE7Bk3Pjx/W8CxvzBFDOEMeqvl+8=
Subject key identifier:   73:5B:18:AA:21:60:42:EF:8E:21:E7:AC:F5:01:08:C6:86:BD:8E:34
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          77
Signing time:             Thu 03 Apr 2025 06:00:46 +0000
Manifest this update:     Thu 03 Apr 2025 06:00:46 +0000
Manifest next update:     Thu 10 Apr 2025 06:00:46 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: SFFV4attAXM2sQz4WlbOVEX+yZNub8GJAEvgwKSupgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3
        Validity
            Not Before: Apr  3 06:00:46 2025 GMT
            Not After : Apr 10 06:00:46 2025 GMT
        Subject: CN=67ee240e-a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:61:0b:72:6f:ca:23:01:f8:9e:47:9d:06:
                    19:f9:d8:7c:39:95:16:83:7c:5a:83:a5:46:51:5f:
                    ca:b6:31:a0:fc:ea:a6:41:1e:01:db:de:52:0a:36:
                    5d:d6:c0:51:94:35:9c:e5:15:57:87:c6:32:d3:ff:
                    f8:6d:b6:f5:f6:eb:5a:cc:c9:98:0a:1d:3c:5e:7b:
                    47:44:c3:f3:cc:1d:9f:84:db:c0:8a:e5:09:62:ff:
                    6e:52:93:99:2a:58:9e:cb:7a:02:5e:91:08:21:56:
                    88:85:a1:f8:5d:99:81:0b:5b:45:82:99:d8:35:40:
                    ae:ee:89:4d:9c:72:50:5e:c1:fa:23:1e:1b:6a:ce:
                    15:3a:f1:4f:a5:ff:f2:af:dd:78:3d:41:07:75:84:
                    48:e7:02:f1:ad:16:7f:81:09:71:99:c0:6f:7d:4d:
                    70:e1:01:71:fa:59:f7:ba:9e:6d:ca:e8:d2:10:76:
                    df:85:37:05:bb:50:9e:2b:5b:fa:33:23:f7:b9:2c:
                    13:18:92:bb:4b:c6:7c:15:17:bc:f7:c0:37:fd:2a:
                    c5:5a:a6:c8:83:10:9f:33:6d:14:da:d9:5c:d7:ce:
                    cf:fa:f6:10:98:f8:57:32:e8:7b:7f:7a:2a:a6:81:
                    f4:72:41:8d:b1:f2:3d:5a:2c:25:7f:d5:00:c2:ec:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:18:AA:21:60:42:EF:8E:21:E7:AC:F5:01:08:C6:86:BD:8E:34
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:07:2b:f9:e8:e6:a2:8b:1f:01:3a:d3:e6:14:53:c2:3c:
         1c:e0:19:f6:80:2e:ba:43:02:96:10:cc:54:f9:17:f6:00:fa:
         6d:79:5d:6e:1e:69:cd:9b:67:99:d8:52:18:1d:5f:be:70:3e:
         95:47:8a:ec:59:d1:f8:c6:71:c8:2c:6c:b8:5e:84:f2:da:9e:
         57:e9:35:93:e8:27:b6:4b:90:ec:63:28:bb:20:3d:ff:50:7a:
         16:32:ce:ef:98:35:ee:75:48:40:31:1d:1b:c3:4b:0f:ca:9a:
         ea:60:b5:86:ef:1f:9e:a1:28:bf:03:5e:7a:f6:af:b7:3a:32:
         87:97:0d:89:3b:4d:48:6b:c8:cb:b5:4d:d5:82:32:27:4d:0c:
         d7:aa:a5:16:c8:3b:f3:f7:16:4a:a7:2b:11:96:92:cf:ea:8f:
         15:f6:c8:58:ba:ed:26:6f:88:5b:9f:06:c8:57:67:51:0c:47:
         d8:2a:95:21:e9:76:00:23:63:5d:58:fe:78:0e:69:8b:4a:ab:
         55:46:44:cf:e3:09:ec:8c:1f:79:71:ea:4c:3c:3f:a0:6d:17:
         20:96:63:bf:b8:fc:91:e2:fe:b7:85:62:bd:7d:15:0b:b3:9b:
         8a:57:63:5e:1b:0f:24:ab:6f:f8:99:05:15:63:dd:98:b2:9a:
         4e:8a:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:23 2025 by rpki-client