Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
File:                     7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json)
Hash identifier:          C5vvVzr+8yoZpundt04MHcd2vl7YKJesmNWQZEIElms=
Subject key identifier:   A1:7D:44:08:9E:09:AA:2D:60:78:DF:57:E9:AC:D4:2B:0F:9F:D2:73
Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06
Certificate issuer:       /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
Manifest number:          06D8
Signing time:             Sat 29 Mar 2025 00:54:50 +0000
Manifest this update:     Sat 29 Mar 2025 00:54:50 +0000
Manifest next update:     Sat 05 Apr 2025 00:54:50 +0000
Files and hashes:         1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: z2iK5KyNIWqvdLFXiXblFhiow2dSYR2XRoELoPfsUa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 00:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710
        Validity
            Not Before: Mar 29 00:54:50 2025 GMT
            Not After : Apr  5 00:54:50 2025 GMT
        Subject: CN=67e744da-d9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:e3:11:ed:55:fd:9b:47:2d:5c:95:58:0c:
                    a5:5a:a6:c7:9e:ac:c1:5a:0c:9f:6b:94:a4:38:32:
                    45:15:8b:b0:66:a3:ff:d9:79:44:78:47:70:9a:09:
                    c2:df:4b:95:2d:66:97:84:62:d4:9c:90:cc:61:2f:
                    b2:7e:5c:e8:e9:c6:d5:63:f8:dd:d0:cf:dc:01:c0:
                    2b:9f:fb:02:02:44:1a:de:66:70:97:b9:a2:30:55:
                    b0:01:6d:6e:4d:75:d2:ec:3f:e5:8a:cf:a5:1e:d4:
                    7f:8b:1c:77:ca:89:9b:15:72:a9:4e:ae:7a:4d:76:
                    52:b8:d5:35:35:0c:fa:8c:07:a5:af:b0:49:f1:e3:
                    51:12:b3:93:56:e3:00:e1:6e:c5:9a:52:08:d8:e4:
                    6c:45:93:70:9e:f8:67:0f:28:9f:86:20:a8:78:69:
                    a4:8f:f2:fe:9c:73:d4:ad:bb:d0:84:93:16:80:63:
                    72:21:4b:e2:a0:39:f8:3b:2e:9b:92:a7:bb:ef:a0:
                    ec:68:57:c2:27:17:28:ad:e1:0a:49:08:d4:68:88:
                    46:44:90:ca:2f:20:d3:e8:e2:2d:3a:de:64:a6:ed:
                    57:b1:b7:af:7a:fa:37:c8:19:24:3b:0d:df:0f:b5:
                    72:0c:d9:71:c9:56:d7:e6:75:c7:45:4f:b2:4a:05:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:44:08:9E:09:AA:2D:60:78:DF:57:E9:AC:D4:2B:0F:9F:D2:73
            X509v3 Authority Key Identifier:
                keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:44:72:97:fd:9c:2b:38:40:3d:21:35:37:20:11:cf:8a:
         2b:fb:aa:9e:ea:7f:02:5c:5d:b9:ec:ef:aa:38:ca:24:7c:55:
         ca:2c:79:c8:4d:4d:b2:13:84:ea:15:54:5c:38:51:ef:2b:e9:
         c0:20:06:cc:d7:0a:e0:ae:60:e6:05:c1:c1:10:cd:5c:28:20:
         df:89:0c:e9:8c:3f:9a:01:77:58:6d:e0:59:4f:35:9c:22:bb:
         75:63:ef:f4:7a:71:d3:4b:80:48:6b:0e:0e:b0:17:53:11:1b:
         03:f1:d7:c1:44:2b:cc:b8:a0:0b:25:f8:20:d0:3b:9b:31:c3:
         74:9a:c4:20:4e:dd:ce:e4:4a:e7:79:a9:18:21:0b:69:81:80:
         7f:60:be:df:26:19:ee:ba:0e:3c:87:e1:de:7b:7a:61:d5:9f:
         ca:63:69:d9:21:91:35:20:60:a1:bf:65:f0:6b:d4:f9:e4:54:
         87:2c:93:f0:a8:21:32:09:8d:09:34:2e:52:18:28:46:e0:41:
         90:d7:dc:c4:47:bb:72:d6:6e:6e:d5:a7:4f:3b:e6:0a:ef:8a:
         35:1a:36:af:e8:da:ca:eb:22:46:39:a0:67:28:2c:ff:9c:2c:
         96:b7:ab:70:99:2e:9b:05:b5:9c:50:d4:d4:e8:53:1c:89:a5:
         7b:d6:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:15 2025 by rpki-client