Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
File:                     pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json)
Hash identifier:          KQEWotXvrrOI+LRl4JFf/9oBD7Z7WDNEnafbyyIeNbg=
Subject key identifier:   84:56:DB:84:84:3D:84:D7:A1:FD:9D:00:3C:58:26:71:91:1A:4F:FE
Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
Certificate issuer:       /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
Manifest number:          06EF
Signing time:             Thu 10 Apr 2025 21:54:50 +0000
Manifest this update:     Thu 10 Apr 2025 21:54:49 +0000
Manifest next update:     Thu 17 Apr 2025 21:54:49 +0000
Files and hashes:         1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: 3UdcRSpeg7yZ7wP53ce83+1VNr0laEJ9J/6BT/OcbDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 21:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FC6, serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
        Validity
            Not Before: Apr 10 21:54:49 2025 GMT
            Not After : Apr 17 21:54:49 2025 GMT
        Subject: CN=67f83e29-9cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:e3:7d:c7:8f:8d:7e:b1:19:5e:4f:ab:fd:
                    39:21:9b:6e:0d:71:5b:aa:19:81:db:af:f5:60:43:
                    0c:f2:38:ae:08:a3:10:84:6a:0e:1d:82:f9:b6:d9:
                    27:a6:7d:be:36:81:26:d0:ea:f0:b1:4e:75:c1:54:
                    c6:aa:32:19:35:01:f0:0c:fd:06:fd:cb:92:79:31:
                    9f:e3:32:95:5a:d7:23:c7:db:84:e6:e6:6d:7b:9f:
                    56:aa:b7:7e:10:f3:d5:8c:9f:6c:a4:b0:2a:f1:d6:
                    d8:58:9e:54:3e:69:71:3a:43:57:d5:0b:e0:a8:44:
                    78:2e:59:85:21:03:86:d6:72:32:b3:e0:a6:76:da:
                    00:b5:df:28:bf:c1:7f:89:33:c2:72:c5:b4:b1:10:
                    09:a9:a6:bc:6f:69:0c:f3:a4:80:36:28:f3:9c:48:
                    b2:16:e8:83:c3:87:95:ef:b9:c2:a0:27:7d:65:4c:
                    d0:6c:91:e7:5e:00:3c:6f:6c:17:d7:75:3a:de:40:
                    bc:0e:b4:44:e0:92:37:57:33:6e:1a:ff:50:8b:7c:
                    b5:80:7e:8f:07:c7:a1:dd:86:36:40:02:aa:13:b1:
                    b4:ec:fc:d6:08:11:6b:11:e1:f9:85:8e:de:7e:bd:
                    59:c4:e2:6f:f0:73:55:c1:aa:70:19:3b:b5:1e:fc:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:DB:84:84:3D:84:D7:A1:FD:9D:00:3C:58:26:71:91:1A:4F:FE
            X509v3 Authority Key Identifier:
                keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:4f:c7:03:6c:2a:fe:c4:22:6e:ac:ac:17:1e:97:c3:3a:
         9e:ba:f6:7f:33:55:79:8b:af:fa:14:42:e7:b1:52:39:9c:82:
         43:36:2d:60:72:bf:ca:f7:89:e1:16:0a:f9:2f:44:87:a0:78:
         e9:05:69:2b:19:6b:e4:85:a4:c0:b2:67:44:ca:3d:45:51:75:
         49:41:d2:48:d3:3a:d2:52:12:0d:65:b7:95:c9:af:56:8f:d7:
         19:3a:f0:b6:5b:d9:ec:cd:fa:85:fe:ee:d3:86:66:d4:87:8c:
         0d:5e:41:a9:af:8a:7e:e0:06:15:65:7d:9c:5d:3c:4b:e4:69:
         73:39:12:4a:0f:ac:91:42:6f:c6:33:42:93:93:84:d6:be:e2:
         41:18:ef:27:a7:45:94:65:50:46:56:70:5d:ab:27:93:49:5a:
         65:7b:d3:c4:26:0f:92:80:6b:e2:c9:ac:92:d3:91:fe:3f:c5:
         d4:4f:89:ec:ef:14:e9:56:e9:32:fc:1b:c7:1c:96:e2:6d:87:
         76:08:bd:5d:61:a0:cc:92:6c:43:0d:92:f5:c6:4d:55:26:3f:
         9f:fb:f6:4b:23:92:7a:24:23:50:c2:4f:97:43:b9:29:b7:4e:
         a5:67:f8:d6:34:5d:86:f7:9a:a6:73:48:f3:c1:78:5b:ef:94:
         8d:17:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:14:35 2025 by rpki-client