Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
File:                     Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json)
Hash identifier:          lSmjXe8GyuCG+NVwGcGm/uPFiDBre05W+ZY1H/zvtz8=
Subject key identifier:   0B:F0:6B:0D:FF:56:01:E6:69:76:D5:A3:00:7A:CD:4A:70:73:F2:F6
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Certificate issuer:       /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
Manifest number:          85
Signing time:             Thu 03 Apr 2025 05:48:20 +0000
Manifest this update:     Thu 03 Apr 2025 05:48:19 +0000
Manifest next update:     Thu 10 Apr 2025 05:48:19 +0000
Files and hashes:         1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: 1VkuV+PLhWS2nT4yvz82TiA/xUkAwxGN8OrGsLmszOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 05:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F
        Validity
            Not Before: Apr  3 05:48:19 2025 GMT
            Not After : Apr 10 05:48:19 2025 GMT
        Subject: CN=67ee2123-8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:01:84:40:9c:40:e4:be:f4:3c:18:e7:6f:
                    cb:5c:83:3a:6d:1b:18:27:1b:21:6a:37:7c:0a:0f:
                    6c:1b:70:88:8c:f2:a5:d5:e8:ab:a3:f8:0c:74:7f:
                    09:66:bd:65:ca:1a:e3:e2:8f:ba:fd:c5:c1:c6:f3:
                    5c:f0:65:12:eb:7d:4d:6e:e0:d9:4a:2f:52:5f:e0:
                    f4:2d:2e:bc:72:01:6e:a4:f7:79:20:f0:fe:e1:ad:
                    33:46:39:2c:78:ac:6f:dd:a5:7b:ae:65:d8:95:7a:
                    9b:e5:18:d7:13:ce:97:47:fa:f2:42:49:57:72:06:
                    5d:6f:50:ad:9d:b5:c8:bd:ff:4e:84:d0:0d:a8:2d:
                    cc:8a:ef:c7:c3:c3:48:6d:b1:e7:14:a6:5b:0b:5a:
                    44:6f:a9:07:59:39:ad:48:fe:f7:39:c5:1c:57:eb:
                    68:68:7c:85:da:3c:ad:45:ca:c7:65:20:82:9a:8c:
                    9a:4d:89:d2:79:3f:82:7d:f6:15:78:a8:b5:22:98:
                    b5:3d:6e:5a:fa:a4:e0:bc:7b:b6:a8:78:39:23:4b:
                    b6:88:08:00:9d:26:54:be:55:8c:74:fd:29:f1:e5:
                    27:4d:a8:72:77:60:8c:64:56:13:de:3f:b0:2f:65:
                    d4:cc:3d:0c:66:9f:ab:c1:68:b8:b8:3c:74:71:be:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:6B:0D:FF:56:01:E6:69:76:D5:A3:00:7A:CD:4A:70:73:F2:F6
            X509v3 Authority Key Identifier:
                keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:ad:9e:5e:89:39:5c:91:06:fc:04:aa:90:c5:5e:8c:38:
         f6:5b:fb:c5:1c:15:87:55:d2:ed:c3:41:41:5c:7c:25:0d:00:
         85:66:74:ae:d7:62:0a:69:ab:a5:a6:3a:83:0d:03:61:67:a3:
         ba:f7:9b:20:42:32:7b:56:cb:6b:32:69:5b:d9:4e:18:74:52:
         76:1c:88:a2:f3:b7:ea:34:4c:cf:70:65:11:42:19:c4:d2:11:
         48:0e:71:70:c3:f6:77:10:32:64:bb:58:2b:7a:19:36:23:d1:
         5f:fd:5c:e0:57:f5:a2:90:f9:df:f4:82:4b:61:7a:2e:dd:22:
         2a:15:2c:9d:15:30:b2:d5:92:e5:c8:aa:ff:88:e1:22:8f:08:
         10:97:ae:fa:6d:c8:e4:09:9d:78:d3:17:e1:32:26:c6:20:dc:
         62:54:55:c6:16:c8:8a:fc:dd:09:f1:1f:b2:49:6b:4f:83:20:
         23:db:73:ed:38:79:0e:4a:2a:cd:a3:e4:9a:4a:58:eb:73:98:
         b5:fa:d1:b8:a0:71:7d:c8:55:6f:ec:61:05:12:0e:a3:54:ee:
         77:d0:83:fa:6d:6b:6d:ec:e3:a9:ef:5e:bd:e9:f7:1b:ea:d4:
         ac:ef:97:7a:45:e6:a6:ee:42:bc:64:34:7d:7d:cf:39:f2:1d:
         6b:28:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:53 2025 by rpki-client