Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          dv9LPaUnLI90gDr5YULgyovh+k8fzxDh33aoat7Qr6I=
Subject key identifier:   39:8F:C1:70:83:09:59:30:12:5C:2F:FD:23:ED:EB:E8:90:A5:D7:FE
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          B8
Signing time:             Sat 29 Mar 2025 05:18:18 +0000
Manifest this update:     Sat 29 Mar 2025 05:18:18 +0000
Manifest next update:     Sat 05 Apr 2025 05:18:18 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: N2IW18NP/Q7a0TA2ihwOwiSdzM5A0J7VzjsZmjXmnZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E
        Validity
            Not Before: Mar 29 05:18:18 2025 GMT
            Not After : Apr  5 05:18:18 2025 GMT
        Subject: CN=67e7829a-2c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:84:d7:f5:ae:6c:6f:10:98:f2:33:bc:9c:
                    52:57:23:72:5d:c8:e0:59:c6:9e:67:72:50:38:b2:
                    ea:f0:cc:9f:1d:50:9f:de:cf:27:df:62:ee:a4:87:
                    01:09:2f:e6:4b:e2:8a:d1:0b:97:9f:1c:c2:c5:6c:
                    a6:5e:da:31:c1:58:48:0e:b1:b3:be:a5:7c:0c:00:
                    9a:20:32:09:a7:0d:d6:69:31:3b:6f:95:6d:7f:4d:
                    5a:b0:05:d6:eb:5f:20:70:b8:12:77:96:46:3c:45:
                    9f:1b:5e:b5:ee:35:9c:69:fb:5c:ee:55:82:76:34:
                    5f:43:a1:f7:9a:84:82:a4:7e:52:68:c0:1d:17:f7:
                    f1:da:e6:ae:e9:a2:c0:40:89:bb:9b:53:06:0c:b0:
                    e7:e6:40:b1:d5:39:cc:57:f1:71:f2:4e:1e:99:81:
                    43:e7:d6:61:c9:d0:fb:2c:c0:b2:0e:74:b5:f1:62:
                    55:45:11:8f:ca:37:3c:8f:71:c0:a0:ec:0a:50:5e:
                    aa:3c:64:34:ec:e5:14:07:26:ea:bf:67:ba:0e:b3:
                    fc:85:a5:bd:93:3f:26:05:73:a4:65:4d:09:0e:ec:
                    b5:d1:c0:89:79:cc:04:d7:bf:ea:cc:bc:aa:87:ba:
                    9c:38:14:c2:aa:ce:dc:1b:62:0c:43:5c:06:18:9a:
                    c3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:C1:70:83:09:59:30:12:5C:2F:FD:23:ED:EB:E8:90:A5:D7:FE
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:fa:bd:96:8e:82:1b:8f:90:21:ce:96:ed:36:23:fa:e5:
         40:c5:83:b1:9d:7c:0c:a2:1a:ff:95:46:88:19:4a:a5:96:72:
         a1:4d:6b:2f:10:9c:35:53:5a:3d:ff:f1:bb:a9:0d:49:77:82:
         9f:41:00:ee:08:f9:e6:64:67:1f:47:79:c6:ee:01:ee:c1:86:
         e8:b6:4d:ca:87:59:9d:1d:9e:f1:d9:24:e1:70:cd:da:1f:e0:
         bc:65:60:23:8f:41:fb:1d:fe:de:1a:0c:3d:bf:b8:97:87:ec:
         7a:d7:d9:fe:52:96:a1:fc:e9:5f:cb:5b:d2:be:be:f0:bb:4a:
         2f:ae:2e:c7:f5:81:47:fb:b6:1b:2f:c4:cb:c4:ea:ef:93:d6:
         c4:15:7e:f2:c4:38:f6:6e:87:3c:29:02:28:18:70:28:b7:50:
         bc:9c:be:ed:a7:57:e9:d3:52:59:67:f1:bc:c5:21:bf:e5:31:
         d4:07:02:ac:c4:fb:61:dd:bf:32:53:ab:46:0d:22:37:a2:7d:
         bb:4a:b1:f1:08:94:ab:98:98:5d:f7:65:35:51:0f:1d:6f:57:
         c5:ab:fb:4c:37:52:0b:fb:3a:f1:b3:7b:94:46:61:ea:4f:12:
         55:0a:e8:fa:2a:2f:30:fd:42:41:f6:a1:b3:cb:72:76:47:b1:
         22:b3:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:36 2025 by rpki-client