Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
File:                     RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json)
Hash identifier:          36zunvh/JMAPrIN7tsAkaDEb6x/p05MOsKV+7qPuLhw=
Subject key identifier:   90:8C:D6:54:71:A3:71:07:04:B2:CD:74:00:6E:52:53:29:82:D1:15
Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7
Certificate issuer:       /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
Manifest number:          4D
Signing time:             Thu 03 Apr 2025 06:32:25 +0000
Manifest this update:     Thu 03 Apr 2025 06:32:24 +0000
Manifest next update:     Thu 10 Apr 2025 06:32:24 +0000
Files and hashes:         1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: K7+zuzgeDpLaLSKz+DpAru8uVfhFKcN1DzkA0F9KGb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA46
        Validity
            Not Before: Apr  3 06:32:24 2025 GMT
            Not After : Apr 10 06:32:24 2025 GMT
        Subject: CN=67ee2b78-3c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:dc:1b:79:ba:b3:fd:54:50:db:d0:61:84:
                    17:84:74:c5:75:ed:0e:95:02:f3:65:ff:c6:f6:2e:
                    b0:22:f9:8f:a2:76:b8:f9:98:51:66:e0:31:e9:1f:
                    1a:69:73:1e:f1:b1:d0:c6:ad:29:ed:a2:7c:74:5d:
                    95:6a:7b:9b:66:46:76:ef:98:bf:81:ac:4f:26:2a:
                    81:ef:df:44:d3:14:cd:7f:f0:eb:4d:63:16:37:c8:
                    12:63:ea:17:cc:e7:51:80:1a:c4:92:be:6e:c5:11:
                    57:66:c3:d1:ed:42:77:5f:6c:54:55:47:25:23:80:
                    3f:b5:8d:8e:92:55:0e:af:ea:a9:97:f3:9e:31:c1:
                    18:f8:4c:1b:bb:d9:28:ea:5a:bf:ed:17:b6:7e:7a:
                    69:0c:ab:92:e9:10:f6:30:ec:d3:7f:e5:7b:60:28:
                    ac:74:c0:33:4a:60:97:bb:98:a9:cb:70:00:cd:ed:
                    01:59:5f:db:43:70:05:ab:c2:cf:fd:23:91:01:db:
                    d9:26:4e:91:b9:e7:13:b4:f4:47:36:b9:e2:41:39:
                    21:1b:d9:41:3e:a0:23:7f:0f:9a:4e:5f:51:99:a5:
                    25:ee:3f:0d:7b:11:7c:16:15:d4:be:d8:d0:49:59:
                    e9:54:2f:0e:07:2c:a2:3a:88:98:4b:29:1d:4a:b8:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:D6:54:71:A3:71:07:04:B2:CD:74:00:6E:52:53:29:82:D1:15
            X509v3 Authority Key Identifier:
                keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3a:77:cb:75:06:8a:68:e8:b3:46:ea:54:e8:3d:3e:74:f0:
         19:c9:48:75:83:93:af:c0:d8:c7:3c:e5:18:66:93:10:fd:37:
         4c:f2:77:57:e9:79:91:eb:8d:e2:df:b1:b0:f6:69:12:6e:3f:
         57:f7:fe:c2:6a:c9:ba:5b:f8:76:8a:8f:5c:71:ea:33:d6:b9:
         d6:7d:29:20:8e:bc:24:46:d0:63:37:6f:f3:9d:8a:48:1d:9f:
         54:dd:ac:f7:31:b7:14:44:3d:59:e7:42:07:b9:93:fa:a2:e5:
         b0:a4:02:4a:e7:1e:ea:68:7f:42:11:74:fb:fa:39:4d:66:3b:
         08:63:0e:38:ce:32:56:05:4b:5f:51:dc:0e:58:d5:c8:a6:51:
         d8:2b:ee:b4:08:18:2c:30:45:9b:b2:4a:5a:4f:69:10:6e:79:
         bd:e6:2d:5f:ed:6a:e5:ba:eb:11:4f:c2:a5:53:1d:98:00:4f:
         ee:ae:9f:c2:6a:e2:7c:c3:74:b6:90:b1:21:43:db:fd:69:3f:
         23:b1:c8:24:ed:1f:3f:57:ae:41:43:26:4b:a9:1c:5d:33:02:
         a6:57:33:01:78:be:32:b8:32:aa:62:20:25:ba:60:06:eb:9f:
         80:96:24:e0:df:62:c4:fc:b1:08:4d:db:42:bc:af:04:32:cc:
         18:70:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:42 2025 by rpki-client