Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
File:                     aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json)
Hash identifier:          9qBENjwJnFVPXs7GJWf/J2ybW+xt7oDpW7ZM4Tj+mOU=
Subject key identifier:   33:09:FC:32:9A:71:7C:6F:89:43:1A:BE:57:E0:92:1B:58:E9:EF:F4
Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC
Certificate issuer:       /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
Certificate serial:       346E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
Manifest number:          346E
Signing time:             Fri 18 Apr 2025 15:11:23 +0000
Manifest this update:     Fri 18 Apr 2025 15:11:23 +0000
Manifest next update:     Fri 25 Apr 2025 15:11:23 +0000
Files and hashes:         1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: UOkumr5EzTWhzQS22Ap8kQ7JMUd0MVp/Jdj+2i/NyQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl
                          rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 15:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13422 (0x346e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7426, serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
        Validity
            Not Before: Apr 18 15:11:23 2025 GMT
            Not After : Apr 25 15:11:23 2025 GMT
        Subject: CN=68026b9b-43b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:e2:d6:a8:f4:39:a7:2a:5e:f3:1a:c7:24:
                    fa:c0:56:ba:1d:64:04:95:fa:4a:4c:32:94:dd:cc:
                    04:c8:80:51:ac:bf:e7:c2:85:84:b8:ea:c7:85:5a:
                    b2:00:10:a7:4f:44:76:58:9d:11:77:ef:7b:ee:5b:
                    1a:81:8a:23:ed:78:4c:eb:59:3e:2b:6d:bf:b1:6c:
                    16:1e:6c:72:30:ff:39:1a:07:ad:1d:f8:67:58:64:
                    82:a8:ed:a7:f7:fc:34:4f:ed:a8:86:00:d0:23:f3:
                    2d:d8:a7:61:bd:63:74:1a:9e:24:f0:58:54:74:81:
                    a0:da:ea:73:c5:70:a5:62:0d:88:70:43:20:0a:d8:
                    e3:8d:58:8f:41:a6:c9:e1:7f:c8:2f:4c:90:b9:88:
                    1e:f3:5a:46:f4:8b:7f:91:dd:fb:0a:6b:2a:c1:75:
                    ae:19:6c:17:e4:23:d2:85:a8:97:83:5b:19:a8:5d:
                    b2:01:2a:44:8e:66:97:21:08:c9:9e:56:be:de:34:
                    4b:d1:6f:ef:a4:db:10:4d:b9:97:d6:4c:e5:a1:3c:
                    a5:90:eb:eb:02:57:8e:3e:2a:db:86:56:7e:79:fe:
                    2e:e3:e2:5e:04:2a:13:da:0a:c0:37:27:fc:48:e3:
                    22:ef:c4:b8:30:ee:55:c4:b6:8c:89:54:80:43:da:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:FC:32:9A:71:7C:6F:89:43:1A:BE:57:E0:92:1B:58:E9:EF:F4
            X509v3 Authority Key Identifier:
                keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:a2:06:3a:d8:6f:d5:68:35:3f:35:da:5f:fc:7d:b4:24:
         05:5b:5e:ea:5a:3f:6c:89:d1:d4:77:3e:6d:23:ab:71:f7:47:
         bb:82:65:27:32:a3:43:30:96:5e:65:42:06:de:ec:9e:4f:b4:
         75:72:91:43:d1:f1:ab:38:38:65:f0:4c:0a:10:f3:44:fa:41:
         91:7e:f7:76:91:f8:7b:0f:73:f0:25:e1:46:75:18:f5:d0:22:
         1b:01:76:e4:3d:35:85:e4:a3:7d:df:6d:cc:6e:c4:8e:b3:ac:
         3a:a9:99:0b:17:c9:42:2f:1e:17:cb:6d:60:ae:42:cc:a1:26:
         bb:e4:69:90:59:35:0a:9e:92:6b:91:64:4a:8a:3d:ce:6d:14:
         54:33:f0:76:6c:8a:95:d5:f2:70:24:2d:68:c7:7f:02:75:64:
         b0:18:7e:6d:1e:0d:c1:e2:a4:03:f6:38:53:68:c1:b9:a3:50:
         f8:4a:df:7f:e3:2a:1b:c1:9a:ae:ee:4a:85:e4:70:84:e5:3c:
         e6:b4:c9:03:f4:2b:66:ad:3b:ec:ba:c1:8b:5e:52:f1:61:c1:
         61:9a:2b:06:81:b6:31:31:ae:83:f5:30:12:f6:b8:3c:e9:d4:
         27:59:94:eb:7a:60:27:fd:fd:c1:be:63:06:d2:79:b4:c7:f0:
         a6:e5:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:16:41 2025 by rpki-client