Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File:                     7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier:          E2xlszsBu+Y9bMqeOPhoZEuEOylzs9X5Hd9wO//GUR8=
Subject key identifier:   A2:80:DB:54:A9:30:AF:1A:7F:00:1C:80:1F:32:02:EB:0D:02:CA:4D
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer:       /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number:          86
Signing time:             Sat 29 Mar 2025 05:52:21 +0000
Manifest this update:     Sat 29 Mar 2025 05:52:21 +0000
Manifest next update:     Sat 05 Apr 2025 05:52:21 +0000
Files and hashes:         1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: AgjaHUat4+ilaeEkROTJudUztrekRJCbToelVzMFlJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A
        Validity
            Not Before: Mar 29 05:52:21 2025 GMT
            Not After : Apr  5 05:52:21 2025 GMT
        Subject: CN=67e78a95-3a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:86:85:88:70:ba:c9:35:20:2d:3b:f4:f6:
                    d4:a4:41:7f:74:a6:de:9c:f2:98:4c:68:4c:2b:ee:
                    03:6e:fb:cd:fb:6f:e4:d8:39:07:01:e5:4f:d4:53:
                    d9:b7:03:48:7f:52:a6:fd:70:e1:42:4f:70:0f:a3:
                    29:9b:85:d4:e9:ce:d5:85:77:08:9e:30:3a:5c:52:
                    95:4a:f1:b9:3f:82:3e:d3:20:32:18:8e:08:86:64:
                    4d:53:c8:60:f6:4c:1c:e3:29:89:9b:73:17:48:a1:
                    ff:40:94:ad:a9:bf:5b:99:45:11:42:68:89:54:42:
                    7e:75:f8:51:67:0a:e0:44:1e:f7:69:30:e7:f8:ea:
                    f8:b3:2b:82:ab:c7:1c:26:1f:1c:3f:71:13:65:e1:
                    fe:b9:b1:e5:31:dc:c5:a3:67:72:65:60:4d:b9:4f:
                    73:3b:c6:02:86:2c:da:3e:d6:60:9b:b6:b4:b7:25:
                    84:d8:7e:b7:38:5a:08:42:b7:96:45:4b:29:0a:0c:
                    3a:50:4b:ab:3b:31:5e:ac:91:d1:3f:03:ff:e6:e8:
                    cc:80:6c:19:f4:86:bf:3c:6d:44:e6:04:fd:ae:c8:
                    d8:b3:18:6a:d4:79:69:b1:46:8e:0a:84:ca:d6:2b:
                    43:dc:71:19:6c:d1:b7:78:64:b4:ff:8e:27:5d:6b:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:DB:54:A9:30:AF:1A:7F:00:1C:80:1F:32:02:EB:0D:02:CA:4D
            X509v3 Authority Key Identifier:
                keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:70:36:34:8d:cf:89:c7:e9:75:fc:4e:dd:e0:aa:e9:c4:
         fd:67:08:52:74:c1:40:59:37:c5:ee:5c:1c:38:4b:e2:e0:74:
         ee:c6:bc:66:b2:11:ff:27:d0:86:64:87:d8:ca:96:d2:43:86:
         67:31:63:c3:5b:cb:ca:51:6a:53:11:55:2a:ad:16:f6:82:f6:
         c1:e5:36:e6:55:5b:0e:37:43:6f:38:1a:d8:d6:1b:59:a0:fa:
         bd:e3:e4:f5:6c:43:be:93:48:36:27:94:b5:21:16:b8:4c:d7:
         e3:8f:b4:6f:a8:c8:c3:c9:44:9b:33:c7:50:9d:4b:15:9e:24:
         31:0e:2b:63:46:20:b0:4d:9f:d8:66:64:73:02:ac:9a:3b:a4:
         29:3d:99:ef:48:75:16:ff:7a:04:ff:0d:e0:07:f2:28:9a:8e:
         e2:86:33:d2:a9:7e:75:13:77:9a:e1:bc:72:a3:a4:9a:3b:4b:
         ee:14:0e:f7:9f:ac:93:c1:6b:09:ad:65:e4:86:fe:37:a5:5c:
         9c:ae:88:18:57:f9:7c:2a:bd:6e:fb:13:d5:50:55:18:81:37:
         38:61:f7:45:b8:e5:74:be:fb:c4:3f:3b:1a:15:9f:0a:7d:de:
         9c:70:2a:a0:0a:3c:d8:7a:ae:92:fc:d1:48:71:57:76:98:ad:
         74:33:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:33 2025 by rpki-client