Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
File:                     jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json)
Hash identifier:          44dw6g/FyRojAffb+lT9PNBVRZegYgBrarv+o1AApx0=
Subject key identifier:   52:0E:A2:3A:41:95:49:56:41:BA:DD:EC:FD:A3:8D:55:BE:41:24:9D
Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
Certificate issuer:       /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
Manifest number:          72
Signing time:             Thu 03 Apr 2025 06:04:06 +0000
Manifest this update:     Thu 03 Apr 2025 06:04:05 +0000
Manifest next update:     Thu 10 Apr 2025 06:04:05 +0000
Files and hashes:         1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: zMeNWop1uIH7svsoMRJigOFHAoFEPLHKB9gP5GZDykU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B
        Validity
            Not Before: Apr  3 06:04:05 2025 GMT
            Not After : Apr 10 06:04:05 2025 GMT
        Subject: CN=67ee24d6-f360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:34:b5:c3:12:30:6e:ed:a7:dd:f8:a6:38:
                    87:ca:22:81:9b:cc:04:c2:6e:96:9e:24:d4:21:fb:
                    2b:83:16:9e:9d:4a:f5:f6:bc:b2:72:64:d5:4f:78:
                    68:2d:de:04:7f:c4:c8:df:ab:60:9c:a1:2f:fb:b6:
                    1e:ca:46:72:e1:7e:33:e9:21:93:19:ad:f4:05:d5:
                    d4:41:25:49:1f:ec:b8:91:26:a3:bf:77:b9:34:10:
                    64:76:b4:6f:7b:02:37:57:a4:3d:74:fc:f5:40:e5:
                    73:a2:b1:61:ca:5a:bd:04:d0:37:8e:af:1a:2a:24:
                    7f:89:e0:6f:e1:2a:16:41:fb:c7:a2:cb:08:bd:35:
                    ed:86:5d:0b:7a:79:2a:9e:60:da:e7:de:3c:67:b1:
                    7a:c7:20:b8:3f:0c:04:fc:6c:d1:6d:5d:98:80:0f:
                    2e:47:03:8e:e3:07:c7:b7:15:ee:c2:ed:4f:96:c1:
                    c4:46:82:00:4d:4f:8e:0f:4d:2b:2d:c8:92:57:c3:
                    e4:ef:e2:1a:06:ec:d0:56:fc:ed:5d:92:b1:1a:d5:
                    91:5c:ff:6d:8e:7c:5f:f1:18:94:48:87:c5:dc:43:
                    cf:d6:d6:fc:ef:7f:49:66:7e:9a:f0:f4:cd:ce:50:
                    e5:1a:33:ea:00:d2:b4:ce:94:75:a7:47:f9:da:54:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0E:A2:3A:41:95:49:56:41:BA:DD:EC:FD:A3:8D:55:BE:41:24:9D
            X509v3 Authority Key Identifier:
                keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:8e:b8:f8:d9:25:86:d4:82:4a:2f:fe:90:fe:5d:6b:6f:
         43:8a:82:bb:9f:ed:31:e7:34:73:91:f6:dd:4f:58:a6:45:30:
         c1:12:94:47:96:c6:6e:57:03:64:46:b9:51:50:13:db:65:58:
         03:e3:28:e9:c8:b8:55:05:85:b6:c8:c5:aa:c3:17:fb:f5:04:
         66:4e:d7:4a:7f:a7:c2:bc:22:86:40:bc:1d:db:84:26:77:67:
         e2:93:be:3a:79:02:e8:5d:f3:36:8b:4b:c3:02:b8:86:b2:1d:
         95:27:72:f8:56:ad:88:d8:82:73:c2:4c:20:c3:cf:7b:bb:7c:
         0b:d8:d4:dd:f2:cb:93:fd:82:27:6b:7c:fd:4b:0c:02:83:13:
         0c:6e:6c:04:1f:81:ad:78:b1:8e:f4:97:1d:89:08:16:6f:de:
         af:cf:ab:40:20:a7:74:13:f9:b9:b9:a4:dd:82:0a:08:c7:87:
         a8:76:31:8d:5d:33:b7:00:8d:ab:c0:6c:14:74:c6:bb:ed:c3:
         c3:8f:e5:72:af:4e:e9:15:b3:7c:c5:e5:a9:1c:f2:06:76:4a:
         d3:8f:97:e8:eb:78:95:98:e4:eb:de:4a:c6:76:c0:b2:27:11:
         b0:4a:24:ec:9f:1e:0a:9e:ec:a6:9d:01:b3:08:c0:f0:b2:12:
         cf:ff:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:32 2025 by rpki-client