Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File:                     kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier:          Ydf83KyzxHuuM+FWT6ZIXN2DH87g2LM0Vha3Gzo+vUY=
Subject key identifier:   A0:54:C3:50:25:BF:47:70:F8:8A:18:3E:37:8F:16:BC:3B:F5:1D:84
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer:       /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number:          3883
Signing time:             Fri 04 Apr 2025 14:36:32 +0000
Manifest this update:     Fri 04 Apr 2025 14:36:32 +0000
Manifest next update:     Fri 11 Apr 2025 14:36:32 +0000
Files and hashes:         1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: nFbwIhRuL7d2YkOPqb2cpYnufaPMccTOBSoIjs4oxe0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD
        Validity
            Not Before: Apr  4 14:36:32 2025 GMT
            Not After : Apr 11 14:36:32 2025 GMT
        Subject: CN=67efee70-a1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5f:3e:1f:f8:b4:23:4f:7f:79:b9:72:82:d3:
                    bf:22:7b:4e:f2:fe:fe:25:4e:54:f7:ea:c1:cd:c3:
                    9f:b3:a3:87:99:98:3c:82:ad:96:2c:93:9d:07:89:
                    b4:1c:bf:87:78:26:60:d7:1c:fa:4a:d3:2b:de:58:
                    b5:72:f5:2d:e6:49:25:5a:49:1d:16:c3:2e:34:8b:
                    8e:5d:90:6a:d2:15:89:28:52:6d:cc:b9:0c:88:9d:
                    8d:b7:24:e3:ea:40:18:ad:93:d2:5f:c8:94:c5:54:
                    c4:c1:68:f2:a8:a9:83:73:38:06:e2:02:f5:8f:66:
                    42:10:a9:fe:86:fd:69:4b:31:b6:0d:d5:ec:5e:9a:
                    cf:c1:4b:93:25:b9:0e:3d:15:67:f3:ee:8b:a1:44:
                    01:56:c5:c8:79:c9:ab:32:6f:e1:43:ac:6e:02:5f:
                    e0:99:4f:b5:75:36:74:c9:5e:01:ed:ce:3a:21:6c:
                    be:32:75:e0:1d:5c:ac:95:f6:d0:5c:5a:89:a6:e4:
                    9b:74:bf:24:06:6f:53:61:74:04:9f:94:1f:c2:9d:
                    e4:e9:e2:99:51:af:24:42:cc:88:20:da:c3:98:44:
                    f0:02:f8:6b:ad:a1:74:24:ba:48:9c:10:95:86:a0:
                    6c:85:f2:4d:bf:be:08:d8:a3:96:11:93:29:c9:d2:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:C3:50:25:BF:47:70:F8:8A:18:3E:37:8F:16:BC:3B:F5:1D:84
            X509v3 Authority Key Identifier:
                keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:e4:a3:c0:7b:f8:b9:81:38:a0:a0:2d:ab:49:91:17:e7:
         cc:bb:4b:6d:ab:a2:dc:25:5e:23:76:c8:ca:b6:12:20:b4:ff:
         33:08:4e:6c:58:14:42:ac:68:87:a3:3a:e4:55:99:f5:79:17:
         ce:a3:5d:02:81:08:10:34:d1:9e:d0:d3:99:a7:76:b4:f7:41:
         d3:bd:7c:c1:53:69:52:c3:e2:c8:29:08:85:b6:a7:3e:00:84:
         d5:43:fe:64:a4:93:05:3b:48:39:4b:ac:17:19:58:48:3c:c3:
         de:fe:90:a7:22:45:ab:ed:a6:26:2f:9c:d3:6a:b2:cd:c9:a1:
         42:ac:f4:b2:0a:35:15:02:2e:f8:4f:50:f0:ef:21:2f:ca:fb:
         0b:a2:25:67:a8:3b:6e:25:ba:68:fc:92:bd:3e:40:b2:34:3c:
         20:0d:e4:91:27:58:3f:69:24:81:52:52:d5:0f:f5:74:e7:46:
         c5:62:fa:1a:6e:f5:3e:33:2a:6f:9f:35:9b:bd:49:ef:f6:52:
         00:af:a8:b1:25:e6:ac:e7:de:7f:f4:c7:5f:91:bf:c2:5e:12:
         12:b6:39:d4:a9:1b:b7:94:8f:03:92:86:34:b0:bc:b8:21:89:
         47:83:09:0c:1a:51:13:e6:e4:76:43:22:3f:00:0f:8f:fb:c8:
         2b:71:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:52:32 2025 by rpki-client