Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File:                     tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier:          WDX5aSl7J6OV1Ey1SEdjBNW7t3i5LHu929YGGTRwtwE=
Subject key identifier:   90:BB:FB:C9:10:81:85:2E:8D:61:A5:26:9C:FF:53:56:61:91:06:3A
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer:       /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number:          0CCC
Signing time:             Fri 04 Apr 2025 18:14:46 +0000
Manifest this update:     Fri 04 Apr 2025 18:14:46 +0000
Manifest next update:     Fri 11 Apr 2025 18:14:46 +0000
Files and hashes:         1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: lif5YXb4Yvx4q/eK1opAMoz8fmJ02ONMq/HClrru66Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB551
        Validity
            Not Before: Apr  4 18:14:46 2025 GMT
            Not After : Apr 11 18:14:46 2025 GMT
        Subject: CN=67f02196-9efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:e4:ab:75:5a:f3:4a:9e:50:23:6c:24:e4:
                    37:06:9b:c3:15:af:7c:bb:83:6a:12:27:81:22:56:
                    21:9e:a3:4d:25:95:3b:fe:dd:fb:1c:8b:f7:40:cf:
                    2c:5e:73:d5:10:73:3a:7e:83:68:f5:f9:39:2e:ac:
                    06:e4:7e:6a:cc:a3:ad:f1:5e:69:eb:58:64:24:07:
                    59:b6:6e:3b:3a:f8:b5:6c:86:03:76:f9:a6:a3:e7:
                    b2:95:17:4b:ac:1f:0d:11:cd:0e:85:99:e7:a4:d6:
                    2e:b4:49:32:c1:6c:e3:25:52:cc:19:05:75:c8:c3:
                    a2:1a:81:98:60:f8:5c:72:35:ee:bf:ac:0c:53:1c:
                    66:86:19:d4:a4:fc:72:7f:3b:64:73:77:d4:67:55:
                    f9:c8:d4:3b:46:ff:af:44:e4:18:00:e0:c6:c3:00:
                    a0:d7:82:02:55:d9:66:37:8c:88:d7:38:91:f0:d8:
                    57:5e:de:73:41:bb:89:a7:88:6b:73:ec:be:1f:48:
                    80:c3:59:44:8b:d0:15:0c:5f:6e:75:26:25:bb:27:
                    0e:46:74:37:26:b2:7a:0b:2f:c6:ba:39:a6:84:65:
                    82:93:f9:8b:86:7d:20:48:dd:e2:2a:f1:51:45:d5:
                    3a:22:2a:66:d8:7d:be:e7:13:d9:19:e7:fa:c7:ab:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:FB:C9:10:81:85:2E:8D:61:A5:26:9C:FF:53:56:61:91:06:3A
            X509v3 Authority Key Identifier:
                keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:66:46:65:32:f2:84:fb:e5:97:99:79:0c:09:dc:00:28:
         13:41:36:96:f0:63:ba:67:21:7d:8a:ab:68:a4:b6:ef:30:41:
         8a:fd:27:f5:3b:fd:b1:b3:fa:e3:fb:a6:6b:74:c2:ac:31:0d:
         d7:d9:84:ae:5c:7f:6c:40:97:73:44:2c:1b:08:8a:01:ed:2d:
         ec:e0:8e:83:54:e0:f5:7d:56:f4:d4:ac:a9:d0:bd:89:26:a1:
         fd:33:42:d5:07:dc:b1:10:8d:6d:d7:b7:6a:bd:37:a2:df:5a:
         eb:27:61:cf:0e:11:c9:80:a1:ef:d0:68:2f:00:7c:4b:ce:ad:
         54:14:bb:bf:02:6e:36:22:7a:95:1a:aa:18:b3:6c:8a:6a:82:
         3c:3f:8d:44:e2:93:d5:54:cc:46:47:a3:71:a4:12:ae:cb:5e:
         4c:b3:69:50:59:23:ae:54:00:ac:20:5e:b2:b1:06:2b:63:30:
         ce:9a:a1:18:ac:63:9e:bd:36:15:55:db:16:90:07:8b:b8:ca:
         80:92:d9:ca:18:b7:e6:eb:81:89:0f:6e:83:38:83:e8:71:61:
         c5:cf:d9:8b:8d:f6:24:b3:0c:24:f4:9a:cc:17:0d:24:19:82:
         9c:c9:48:09:59:39:bd:ed:ce:f0:83:9b:db:95:73:77:5f:08:
         85:81:47:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0
MTg5QUYxOTgwHhcNMjUwNDA0MTgxNDQ2WhcNMjUwNDExMTgxNDQ2WjAYMRYwFAYD
VQQDEw02N2YwMjE5Ni05ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4Pkq3Va80qeUCNsJOQ3BpvDFa98u4NqEieBIlYhnqNNJZU7/t37HIv3QM8s
XnPVEHM6foNo9fk5LqwG5H5qzKOt8V5p61hkJAdZtm47Ovi1bIYDdvmmo+eylRdL
rB8NEc0OhZnnpNYutEkywWzjJVLMGQV1yMOiGoGYYPhccjXuv6wMUxxmhhnUpPxy
fztkc3fUZ1X5yNQ7Rv+vROQYAODGwwCg14ICVdlmN4yI1ziR8NhXXt5zQbuJp4hr
c+y+H0iAw1lEi9AVDF9udSYluycORnQ3JrJ6Cy/GujmmhGWCk/mLhn0gSN3iKvFR
RdU6Iipm2H2+5xPZGef6x6v2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC7+8kQ
gYUujWGlJpz/U1ZhkQY6MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy
RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX
clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtMWZGZTLyhPvll5l5DAncACgTQTaW8GO6ZyF9iqtopLbvMEGK/Sf1
O/2xs/rj+6ZrdMKsMQ3X2YSuXH9sQJdzRCwbCIoB7S3s4I6DVOD1fVb01Kyp0L2J
JqH9M0LVB9yxEI1t17dqvTei31rrJ2HPDhHJgKHv0GgvAHxLzq1UFLu/Am42InqV
GqoYs2yKaoI8P41E4pPVVMxGR6NxpBKuy15Ms2lQWSOuVACsIF6ysQYrYzDOmqEY
rGOevTYVVdsWkAeLuMqAktnKGLfm64GJD26DOIPocWHFz9mLjfYkswwk9JrMFw0k
GYKcyUgJWTm97c7wg5vblXN3XwiFgUf9
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:02:25 2025 by rpki-client