Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft
File:                     Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft (raw, json)
Hash identifier:          +WaEa0b7w+y53x1cHqwvAIDSHCc/IuV/hrPw77vgVzI=
Subject key identifier:   F7:76:64:23:78:72:C8:F0:45:30:1B:39:A2:77:55:BD:D6:B4:A3:2A
Authority key identifier: 36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78
Certificate issuer:       /CN=A91C5413/serialNumber=366C3653E4875DEF5EB64F98928FAFD30FEE8878
Certificate serial:       0660
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft
Manifest number:          07BA
Signing time:             Fri 04 Apr 2025 22:33:31 +0000
Manifest this update:     Fri 04 Apr 2025 22:33:31 +0000
Manifest next update:     Fri 11 Apr 2025 22:33:31 +0000
Files and hashes:         1: Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl (hash: QpNOwsuwulbDV1BYOg+cr4RNM5+AtGbGDTXLBTX/ZCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl
                          rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5413
        Validity
            Not Before: Apr  4 22:33:31 2025 GMT
            Not After : Apr 11 22:33:31 2025 GMT
        Subject: CN=67f05e3b-3943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:99:77:60:86:3b:e5:c2:43:f5:64:8c:5a:
                    b7:8f:8e:11:99:22:6e:e7:c6:ee:7d:f4:5b:f9:47:
                    db:e6:0c:46:6e:7a:eb:0f:02:85:f7:32:74:3d:c1:
                    6e:4d:fb:ef:f0:53:27:61:b2:d9:1d:08:66:18:d2:
                    4b:b3:f9:19:d2:5a:88:ee:cc:47:a5:c0:6a:94:01:
                    62:15:92:4b:04:d1:85:ba:8f:46:fa:65:4b:fe:ed:
                    f7:60:48:b2:6b:41:e7:17:62:96:06:b4:56:9d:30:
                    c2:b8:4c:f2:48:88:0d:9d:8b:1d:cd:63:f8:69:4d:
                    1b:4b:b8:87:9d:42:9d:06:fc:3e:45:a4:9b:54:cd:
                    64:7a:32:63:a9:59:b5:0b:ce:ed:83:d3:3d:33:d8:
                    fb:77:aa:0e:89:b4:26:ed:86:c7:97:dc:91:d1:16:
                    60:8b:8d:08:96:f3:43:ca:4a:2f:f7:20:09:7b:18:
                    be:71:27:dc:54:b8:56:29:b8:f7:da:27:d9:d0:b7:
                    94:b9:12:46:ff:10:c7:ba:14:39:1d:38:60:cc:ae:
                    9e:b1:f1:0e:8b:fb:be:33:e7:7b:a5:9d:ab:b7:a7:
                    74:b4:35:c9:aa:1e:57:39:14:4b:2b:39:99:d1:be:
                    bb:1f:ca:7d:14:f1:91:99:90:bc:29:a1:f7:d7:e1:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:64:23:78:72:C8:F0:45:30:1B:39:A2:77:55:BD:D6:B4:A3:2A
            X509v3 Authority Key Identifier:
                keyid:36:6C:36:53:E4:87:5D:EF:5E:B6:4F:98:92:8F:AF:D3:0F:EE:88:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nmw2U-SHXe9etk-Yko-v0w_uiHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/Nmw2U-SHXe9etk-Yko-v0w_uiHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:9b:0b:7d:d5:b7:12:15:1a:84:89:ea:d2:4b:a3:0e:02:
         0c:0d:ee:2d:57:b3:75:95:41:a2:f2:13:95:a2:6e:21:2a:86:
         c6:a1:23:cc:d8:3b:49:7b:6c:6a:5b:63:e6:a3:87:59:f3:8c:
         75:14:68:3b:3b:a5:0c:77:c4:52:35:bb:87:15:55:b1:c1:93:
         09:15:11:f9:8a:41:a8:76:2e:57:7f:df:fc:d9:36:22:69:1f:
         e5:f2:2c:89:e1:2c:2f:3f:6a:60:19:39:4f:db:45:06:74:63:
         a9:43:d5:05:2d:85:86:d8:63:01:a7:99:42:4c:43:8a:3a:ef:
         05:aa:d8:a2:5b:ba:cf:01:77:b3:13:7f:be:91:01:a4:43:00:
         d9:f5:8a:18:b1:b3:36:3e:7f:57:9c:bd:eb:91:11:3f:47:38:
         a2:4d:aa:4c:86:79:67:3b:97:49:dc:ea:ea:9d:46:81:de:1e:
         4c:35:74:95:dc:e5:ca:3e:69:68:b9:e1:1d:46:87:6d:6a:66:
         c1:f6:99:90:26:ba:27:79:8f:7e:11:42:f6:57:1d:3f:69:90:
         19:67:27:f5:64:e5:5c:bc:a7:37:ac:a1:db:e7:74:27:18:42:
         c4:4b:93:6a:10:d2:3a:42:a7:17:e9:69:5e:5e:ed:0d:12:c6:
         66:db:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:50 2025 by rpki-client