Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          NHnHXbFbl79uLZ5xjznfU+Ogddy+f5i3+ubRsV3bPWA=
Subject key identifier:   8B:F6:49:B9:89:DE:0E:46:CD:17:1E:5A:F2:10:37:E5:38:C4:DA:70
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          52
Signing time:             Sat 29 Mar 2025 06:33:59 +0000
Manifest this update:     Sat 29 Mar 2025 06:33:59 +0000
Manifest next update:     Sat 05 Apr 2025 06:33:59 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: 3QFUi0uRdQyRFiSWBVOdOq9iemgvzEsiUXpANpITTEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5
        Validity
            Not Before: Mar 29 06:33:59 2025 GMT
            Not After : Apr  5 06:33:59 2025 GMT
        Subject: CN=67e79457-b865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:ca:e3:c2:a4:02:44:d5:7a:a0:ae:6d:df:
                    68:4d:fe:d3:59:11:00:60:26:df:10:dc:aa:4b:6e:
                    b7:d9:f2:09:cf:e2:da:a1:46:9a:cc:02:30:99:50:
                    e3:19:74:d4:fc:af:63:92:79:27:ca:2d:1b:ec:0a:
                    34:26:1d:a0:44:27:be:53:fc:b3:68:4c:7d:cd:2e:
                    bb:b9:27:89:b9:2f:27:53:62:d6:2a:57:a6:62:28:
                    db:da:f7:00:b0:2f:4b:dd:32:ce:31:86:5f:47:b3:
                    66:68:e7:85:58:8e:d3:89:8b:61:64:25:95:3d:8c:
                    12:0c:48:52:5c:d8:80:ea:1f:1b:38:1a:80:e7:62:
                    22:f5:6d:aa:03:a7:cf:3c:c6:e4:84:cf:6c:af:63:
                    06:f5:45:d6:be:c1:b5:a4:67:c4:c3:29:57:35:b1:
                    63:da:16:40:69:32:32:b4:ba:a1:2a:ce:96:6f:7a:
                    18:7d:58:10:c3:c2:b1:46:3b:b8:6a:a7:19:8a:97:
                    9b:00:34:38:a3:ce:15:9d:06:39:51:91:6e:e3:a3:
                    c9:28:8f:e1:52:c4:3a:93:4f:67:7c:ee:74:d1:30:
                    bc:e0:40:83:6f:15:3f:3c:9b:79:20:07:a3:ef:44:
                    2b:9e:ad:12:53:ae:7d:79:f3:a3:11:37:f7:ba:84:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:49:B9:89:DE:0E:46:CD:17:1E:5A:F2:10:37:E5:38:C4:DA:70
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:d6:09:70:db:69:55:c3:e2:e1:aa:5d:1f:a6:fb:ab:d8:
         f5:c6:99:d4:80:3d:5c:68:23:67:a7:39:6f:5a:04:c3:77:51:
         5e:01:4c:1c:08:46:9a:89:17:55:b3:23:01:6b:a2:83:5b:65:
         53:b2:4e:57:db:06:79:7f:54:75:5c:8e:85:de:2f:d5:47:c5:
         82:84:e4:64:ec:62:1d:34:d4:6d:f9:31:75:56:45:3b:7a:8a:
         cf:ec:46:c5:be:82:99:a7:64:51:32:1c:00:51:5a:35:33:d8:
         f8:7c:d2:69:bb:be:f1:a5:2a:1a:f9:4b:40:7c:f7:04:27:e3:
         3e:f6:d6:28:3b:98:16:f0:64:be:3e:17:0b:50:c2:87:7f:eb:
         92:e3:22:5b:c7:e5:fe:d2:0c:78:84:da:a3:6c:c9:bb:12:34:
         2d:f0:33:5b:73:89:d7:54:90:c7:8c:0d:a7:bc:53:dc:74:d7:
         0e:22:b2:f8:4f:ef:3b:b6:9d:1f:40:e3:ca:3f:1e:45:5f:15:
         46:a7:52:1c:b6:92:99:a8:7d:af:d7:38:16:49:45:74:93:06:
         b2:a0:21:d1:a4:3d:0d:5c:70:b2:9c:c2:d3:89:19:93:52:df:
         6b:27:e8:5e:ba:4e:b8:20:4a:42:86:84:34:55:d7:14:8d:54:
         59:9c:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:56 2025 by rpki-client