Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File:                     SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier:          PTg+PvzP7FwWGZoFvA1wUmInXVF/mKGz0vQphbRL4DI=
Subject key identifier:   26:30:83:86:7E:E3:8F:24:E7:19:48:8B:00:70:57:D6:76:DB:1F:7B
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer:       /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number:          0891
Signing time:             Fri 04 Apr 2025 20:44:11 +0000
Manifest this update:     Fri 04 Apr 2025 20:44:10 +0000
Manifest next update:     Fri 11 Apr 2025 20:44:10 +0000
Files and hashes:         1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: bGbjUzTGekm26wH6if3ziZwoBFKzJF7E+PzeObrogJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA93
        Validity
            Not Before: Apr  4 20:44:10 2025 GMT
            Not After : Apr 11 20:44:10 2025 GMT
        Subject: CN=67f0449b-13dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:40:96:1e:4f:85:fd:79:3c:52:7f:1c:a7:
                    ce:ee:a9:e5:b6:79:2a:b9:2f:16:26:ea:23:6d:e3:
                    e5:3e:38:3a:fa:13:58:ec:a8:8f:5d:ae:64:79:0f:
                    19:23:66:80:6e:87:e4:d2:b7:98:46:8a:a5:ce:ec:
                    3f:f4:dd:ef:bc:50:d9:44:70:c4:99:9c:e1:c7:f9:
                    a0:c9:f8:be:71:1b:ad:2e:2b:10:44:16:eb:9c:c7:
                    8e:6a:0b:24:31:e6:c9:fe:bd:82:de:7f:47:fb:5b:
                    e3:90:1c:fb:03:16:cb:03:ce:cf:1f:cd:90:f1:e7:
                    09:f1:40:a6:e4:ce:c4:0e:5b:35:7e:09:de:a8:a0:
                    2e:2e:d1:d8:ed:fc:e4:ad:0d:56:2a:71:20:1b:82:
                    68:36:9a:c6:e3:ed:97:27:d9:4f:2c:8d:0e:f5:73:
                    37:d1:95:e5:82:ae:db:90:e7:cb:f8:a3:13:e4:87:
                    4f:e4:a7:80:bb:fb:6e:92:4e:1b:c8:08:33:4d:18:
                    74:36:3e:33:74:2d:de:36:51:66:fe:be:17:7a:e5:
                    7a:3f:a4:3d:1c:42:7b:d0:48:f7:79:ad:81:09:23:
                    09:46:ec:14:75:2c:69:29:0b:3a:a6:6a:96:c7:6a:
                    c7:15:2d:1a:1d:ae:4b:4d:9f:b7:f4:60:74:e1:a6:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:83:86:7E:E3:8F:24:E7:19:48:8B:00:70:57:D6:76:DB:1F:7B
            X509v3 Authority Key Identifier:
                keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:b7:96:d2:24:48:a8:a7:c7:0d:87:3c:49:ab:1d:3c:5a:
         08:c0:6d:cf:38:f9:30:54:9c:bd:e6:4b:a5:45:4c:02:57:e9:
         6c:48:f1:3a:b0:7d:3c:74:dc:81:fb:6d:49:99:c2:3f:02:91:
         cb:37:60:ea:6d:5f:53:2a:74:55:a4:ee:a2:5d:66:64:b7:bb:
         94:c7:34:6c:00:f5:d1:8f:3b:c7:6d:a0:e0:26:72:b7:80:3a:
         0e:59:0f:60:6e:f2:6d:cb:b0:8e:e2:d4:76:f2:b0:da:18:64:
         a9:f5:f1:41:18:63:a7:15:6b:17:53:ac:1c:89:85:b9:0b:33:
         68:4d:f9:11:cd:de:58:cd:de:01:ab:5a:c1:9f:91:3f:43:83:
         be:38:ac:0e:29:67:96:ef:ff:f8:13:0a:3c:17:cf:dd:29:ca:
         d5:d3:2d:e9:7a:38:18:13:32:96:cb:92:a2:ca:3c:17:80:1d:
         de:ff:08:36:0a:1d:4f:11:f0:c4:62:a4:d9:92:e1:dc:56:6f:
         db:95:84:0d:9e:cd:22:f6:fc:c2:cf:21:b2:94:4f:83:3d:1b:
         a7:f1:3f:b7:07:f2:e3:13:5e:93:f7:14:f7:ae:31:94:94:a2:
         79:4e:3e:21:b5:73:c2:7a:27:9a:e9:46:d2:62:25:59:00:ec:
         44:ea:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:05 2025 by rpki-client