Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
File:                     sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json)
Hash identifier:          IJrs2eXK70JDIF216Pn0ONtPaUuJ5slfLXuhzyjPTeM=
Subject key identifier:   AA:7F:FF:04:A9:27:54:48:FC:C6:32:C2:08:B9:35:D9:31:AD:5F:86
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Certificate issuer:       /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
Manifest number:          0244
Signing time:             Thu 03 Apr 2025 01:52:49 +0000
Manifest this update:     Thu 03 Apr 2025 01:52:48 +0000
Manifest next update:     Thu 10 Apr 2025 01:52:48 +0000
Files and hashes:         1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: H5Fkwp1WvgAv9ydJii95/iUcwh5vsf4CwdEnIrvYZ1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
                          rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9327
        Validity
            Not Before: Apr  3 01:52:48 2025 GMT
            Not After : Apr 10 01:52:48 2025 GMT
        Subject: CN=67ede9f0-0a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:f1:95:5e:8b:83:c5:35:0d:ae:8c:57:5f:
                    b9:70:88:2f:df:32:58:83:b2:5f:a2:bc:b8:dc:d6:
                    a1:25:fd:35:c8:9f:07:1a:a2:4c:4f:62:a4:60:52:
                    c7:1d:18:96:c5:e6:c4:33:f8:b9:61:e2:99:42:94:
                    92:09:0d:46:57:65:50:09:7b:b4:37:9e:32:1d:49:
                    5b:0f:b2:cd:f7:8f:8b:fc:b6:95:96:dd:8f:49:f3:
                    1e:36:9c:13:54:15:c4:a9:1a:0c:3d:1c:7d:38:13:
                    da:e3:0a:45:20:30:16:0c:20:c2:f5:02:36:99:34:
                    76:e1:25:61:7b:d0:4d:39:61:0a:09:70:76:37:1d:
                    57:00:0b:30:4a:b9:87:cd:d3:36:72:96:78:49:73:
                    9e:dc:d2:79:f3:e2:e5:48:aa:9f:b9:db:f8:92:f8:
                    2f:ad:d2:3a:d6:df:f9:e5:92:b2:7b:61:84:61:56:
                    5b:5f:7e:44:1c:38:02:ac:98:4a:bc:0b:8a:e6:0f:
                    4a:b7:bd:75:f1:a6:bf:ad:03:d3:43:01:46:e0:c2:
                    3c:ed:f8:af:50:96:e7:44:70:d8:48:65:46:64:55:
                    88:69:3e:e7:e5:87:a8:33:a9:2a:8e:d3:7e:12:8a:
                    2f:47:c0:8f:90:7c:4b:8f:7d:33:a9:82:c5:ed:ab:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:FF:04:A9:27:54:48:FC:C6:32:C2:08:B9:35:D9:31:AD:5F:86
            X509v3 Authority Key Identifier:
                keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:60:bd:62:50:6c:ac:ac:74:9a:54:af:46:40:fd:7e:c0:
         1d:b8:ae:be:f3:00:ca:26:6d:a8:9f:3d:af:db:65:8b:a1:a2:
         c0:95:68:4e:ce:91:d1:d8:a1:26:34:a0:77:9b:2b:63:e5:04:
         30:76:ff:62:fc:b1:0e:ba:ac:bc:a9:4d:c6:55:9b:dd:7c:52:
         b2:a1:ff:0b:4b:19:14:6c:bb:5c:59:99:37:89:c7:ca:57:e9:
         e0:d8:fd:d0:21:ee:a8:f9:41:39:49:ef:a9:f9:54:ef:52:77:
         8a:17:0c:f5:a2:16:30:d0:af:cd:9e:47:88:08:71:40:5c:e4:
         32:48:46:9e:f2:8e:fb:da:b5:34:d5:e2:f6:9c:d6:f5:e5:7f:
         bc:b4:d2:be:61:a8:fd:b2:a2:c8:28:8e:aa:1b:b3:aa:d5:04:
         19:01:62:bc:cb:ea:fe:38:f6:bd:a5:e6:84:a5:48:3d:7b:76:
         44:07:78:79:81:8c:8a:ec:a6:5c:b5:42:61:b9:ac:5f:00:87:
         62:89:f5:12:11:c3:24:e5:5c:ad:12:2b:5e:1c:6a:46:6c:f6:
         d9:c7:a9:5e:80:88:04:ca:a6:1f:13:ec:4a:ff:c6:3b:e3:39:
         e9:39:57:c5:14:38:fa:d4:f9:96:50:d9:8c:b1:b0:5d:e6:d5:
         c0:09:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:56 2025 by rpki-client