Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          Rcnis3regtgBJQNdyAUZLSBBZbWh9X4Kb1/VlMCp7lw=
Subject key identifier:   96:F8:04:EA:EF:E7:93:6D:97:30:C5:82:1A:BB:B7:E4:62:95:15:0D
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       1895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          462A
Signing time:             Tue 08 Apr 2025 15:48:50 +0000
Manifest this update:     Tue 08 Apr 2025 15:48:49 +0000
Manifest next update:     Tue 15 Apr 2025 15:48:49 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: xIIWlHN0Bp1bWpzq6Prw4AZDG4LP7+URyx+u4ldQh+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 15:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6293 (0x1895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29
        Validity
            Not Before: Apr  8 15:48:49 2025 GMT
            Not After : Apr 15 15:48:49 2025 GMT
        Subject: CN=67f54561-0ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:32:11:8c:1a:4f:f4:c3:66:ff:d2:ab:c0:
                    6c:7e:6b:da:1e:8a:ab:f9:77:07:3b:d2:8e:a2:c3:
                    e5:ab:02:e6:a7:b6:41:e3:7e:aa:f1:4a:ee:f9:dd:
                    d3:18:8b:81:3d:1a:d1:0e:db:df:98:c4:d3:7e:63:
                    02:47:95:bf:42:4f:0e:0d:ba:ca:30:bd:ca:82:e1:
                    36:7a:81:dc:22:3c:fc:a4:82:21:ba:16:02:01:45:
                    9f:0e:ff:3b:e1:48:57:13:43:5f:ec:ac:10:5d:31:
                    f5:77:b0:60:53:59:32:cd:e6:e5:5a:3b:6e:88:d0:
                    01:a1:7c:db:50:98:b5:e5:1e:c2:b7:8a:46:7a:ed:
                    c3:6e:12:4d:ee:c9:32:19:62:a5:bd:03:c9:73:78:
                    cd:b7:8a:63:16:f7:a0:69:a3:a0:d3:2a:5b:23:2b:
                    8e:92:13:09:12:ea:a6:bd:ce:ab:e1:43:e5:d2:fd:
                    b7:bb:36:2a:d8:aa:14:dc:68:0a:53:6f:c6:44:33:
                    44:e3:e1:f2:3f:cd:07:d7:41:34:33:a6:07:d4:73:
                    2e:1e:47:27:ca:51:93:ee:3d:e9:64:20:c8:4a:64:
                    4b:f3:cb:d8:52:43:cb:57:f2:1f:cb:08:80:4a:d0:
                    1f:8e:35:7e:96:96:9d:6f:15:39:e8:f4:99:7c:f7:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:04:EA:EF:E7:93:6D:97:30:C5:82:1A:BB:B7:E4:62:95:15:0D
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:be:42:dc:8b:50:c5:b0:b4:f5:b8:1f:a6:32:b8:90:36:
         1d:f2:9f:fc:45:e0:ab:87:95:03:72:c8:58:d0:95:5e:a2:11:
         0f:16:7e:9e:af:f6:26:67:34:83:03:e0:c0:e2:ed:62:bc:25:
         2f:37:35:83:2b:9a:aa:19:51:3e:8a:b1:08:b3:e0:f1:52:69:
         af:67:b3:64:a4:a1:6a:72:d3:6c:c6:43:34:04:5a:0d:21:e5:
         52:cd:45:3d:fc:ee:2f:bd:2f:d4:8a:a2:b7:11:b1:92:aa:b3:
         fe:48:68:3a:dc:2f:3f:6a:ef:89:c8:6d:40:d0:21:bb:56:bf:
         a3:24:90:04:86:68:a5:ea:80:ca:8c:48:4f:c6:9f:5d:06:c9:
         60:93:6b:b3:1e:4d:3f:16:b2:35:cc:6c:94:72:34:c1:5d:8f:
         84:2b:31:bc:cd:46:47:3a:97:19:96:90:66:db:29:f3:1b:a3:
         66:5c:81:e9:5d:4f:d9:56:0c:64:f7:b2:9d:02:6e:fb:da:16:
         1e:0f:7e:e8:34:88:53:ac:f5:15:b0:39:40:ef:a0:da:ed:65:
         f3:de:3c:13:c5:6e:99:fa:bc:0b:62:66:b9:5c:07:28:71:c1:
         37:af:55:30:b3:e0:5d:ba:8b:06:ed:7b:2a:36:c0:fd:31:4e:
         e5:55:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:56:52 2025 by rpki-client