Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
File:                     d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json)
Hash identifier:          CCpZrbD8D9flNjUDUyL9h7h861UgePA9O/dE2VzCjjg=
Subject key identifier:   9B:9E:D3:8F:7B:83:1C:BE:3F:65:13:06:FA:EE:4A:FE:7B:50:A4:A6
Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
Certificate issuer:       /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Certificate serial:       0924
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
Manifest number:          0924
Signing time:             Fri 04 Apr 2025 20:26:46 +0000
Manifest this update:     Fri 04 Apr 2025 20:26:45 +0000
Manifest next update:     Fri 11 Apr 2025 20:26:45 +0000
Files and hashes:         1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: K8sCc6Ivaso2qoCDhj3Mvg+qmjfHtad8rn225i/MQGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 20:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340 (0x924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF26
        Validity
            Not Before: Apr  4 20:26:45 2025 GMT
            Not After : Apr 11 20:26:45 2025 GMT
        Subject: CN=67f04085-a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:3a:13:af:72:e0:65:9d:77:f9:8d:f2:21:
                    e8:a2:66:81:92:3d:ca:5a:7f:cf:e8:d3:dd:11:fa:
                    37:0a:da:7d:cd:bd:43:6a:e0:05:d9:4c:ec:60:20:
                    1d:8f:20:4c:0d:11:43:c4:d8:17:42:6e:fd:34:fd:
                    d6:1d:77:ee:99:72:67:8e:0c:f2:40:8a:4a:4f:9a:
                    f3:ae:28:53:89:e5:b7:ca:c9:1a:24:7d:65:48:c3:
                    8e:44:97:a1:bf:6c:87:47:ee:e3:92:5d:f8:7c:fe:
                    a4:fc:ac:2d:49:18:8b:fc:27:57:27:e0:bd:5c:e2:
                    cd:07:ab:30:23:f1:00:2e:41:8e:70:75:e7:7f:07:
                    b3:8d:47:35:19:20:82:29:93:dd:1e:ae:5c:a0:26:
                    5b:f5:e8:16:5d:32:a8:ce:81:aa:3d:f1:71:70:05:
                    1b:c5:1b:59:e5:51:b9:26:be:ea:67:79:af:d4:13:
                    0a:d5:62:28:db:3a:65:fa:61:35:89:37:51:d2:bd:
                    aa:33:87:98:51:ae:52:99:5c:71:d3:99:cd:ab:70:
                    c2:62:bf:a7:21:1d:f3:0b:77:c4:ed:47:ca:2c:92:
                    f0:1b:bf:7d:7b:71:fc:7d:0b:10:bf:3f:41:cd:90:
                    4c:d2:1c:f5:ef:19:a7:e0:46:3d:61:29:ab:68:2f:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9E:D3:8F:7B:83:1C:BE:3F:65:13:06:FA:EE:4A:FE:7B:50:A4:A6
            X509v3 Authority Key Identifier:
                keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:0a:1c:c2:af:2b:d2:46:2b:10:38:b1:71:33:1d:09:8d:
         e2:90:98:cf:19:05:23:4c:d4:44:50:d0:be:2d:d7:f5:f5:06:
         99:f7:c8:52:2c:a7:c5:57:72:92:61:12:2c:ab:2a:d5:09:0c:
         a9:53:1b:b2:31:f0:e0:23:e8:19:a9:ed:49:30:53:84:91:5b:
         f0:dc:ae:03:fc:fa:83:2b:39:3b:1d:eb:fb:66:b4:75:51:9a:
         5d:44:b1:18:30:4a:fe:8c:57:d1:b1:fc:a4:54:82:a9:35:dd:
         c1:19:3f:de:a5:54:41:c0:95:15:bc:50:72:9f:dd:e6:9b:23:
         b9:52:24:c5:1d:8c:4e:2a:b6:59:d3:01:88:ed:c7:02:4e:d0:
         15:0c:0b:23:5b:f6:29:5a:56:e4:37:52:99:f1:56:11:cd:ab:
         35:11:9b:f2:3e:e6:b2:17:cd:b9:fc:92:a3:8d:69:83:79:3e:
         5d:a7:a8:02:d7:d2:5d:75:bb:af:53:82:5c:4f:9c:4d:5a:09:
         dd:35:30:08:e9:c9:f6:4f:1b:27:60:00:92:57:66:60:5f:34:
         6d:a3:99:38:13:aa:67:47:4a:ff:fb:06:28:66:89:47:3b:3f:
         e7:48:59:21:e0:e9:35:50:7f:81:0b:a0:98:7a:f2:2d:ae:cb:
         c1:6a:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:52 2025 by rpki-client