Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File:                     1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier:          qsuzASTzEi4N1VjJvttonB5s+YOUeVRhC4+eUZZLwLc=
Subject key identifier:   76:28:5A:A1:CD:C8:F5:13:BC:62:1D:CD:FE:2F:54:A2:93:76:3A:10
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer:       /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number:          0136
Signing time:             Thu 03 Apr 2025 03:42:20 +0000
Manifest this update:     Thu 03 Apr 2025 03:42:19 +0000
Manifest next update:     Thu 10 Apr 2025 03:42:19 +0000
Files and hashes:         1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: ncV/Wmksn+TucfkIJzoJ2u94kS3n6+WGnymZ+GEmTRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0A98
        Validity
            Not Before: Apr  3 03:42:19 2025 GMT
            Not After : Apr 10 03:42:19 2025 GMT
        Subject: CN=67ee039c-2cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:55:ea:19:95:d9:59:e9:b3:70:89:61:84:72:
                    b2:e3:d6:32:f0:5e:e8:bd:d7:59:2f:c8:de:f0:6e:
                    97:c8:5e:5d:e8:c7:41:bd:81:f2:92:cc:5f:98:bc:
                    ab:aa:6d:ff:b5:32:c9:49:54:c5:f1:fe:da:75:0a:
                    2f:a6:4a:8d:6d:36:38:91:41:11:76:6a:c3:e0:d3:
                    90:fc:3c:6c:6f:e1:7d:47:b7:20:5f:f5:9e:cd:44:
                    46:e2:88:3b:55:ed:f3:a8:79:fc:b5:f3:3d:04:eb:
                    bb:a2:15:68:e8:c9:84:39:e5:4e:4a:14:d3:5b:17:
                    00:96:ce:95:6b:9f:f0:b6:6b:98:77:08:05:1c:2d:
                    82:58:ed:bb:8c:14:b1:52:31:8a:95:a3:31:0c:ee:
                    51:71:1d:6d:74:27:c5:e1:ad:2c:d4:2a:2e:ff:bb:
                    bb:3a:7c:6d:ad:88:48:db:63:df:5d:45:1c:15:ea:
                    bb:b6:1a:0b:b0:91:cc:cc:b8:4a:36:4a:7c:a6:2f:
                    ec:f4:63:4b:53:4b:7f:0c:b7:d1:0c:21:e2:86:5b:
                    55:1d:51:f2:18:9a:cc:15:6b:2b:11:ee:50:f3:73:
                    82:24:9f:90:fc:c9:87:80:6e:44:55:4d:20:b7:06:
                    97:c6:14:25:8e:28:09:0b:96:89:1e:1d:c5:ef:da:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:5A:A1:CD:C8:F5:13:BC:62:1D:CD:FE:2F:54:A2:93:76:3A:10
            X509v3 Authority Key Identifier:
                keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:78:7a:01:37:4d:d0:bd:37:1f:f2:d2:40:8e:94:a4:20:1c:
         25:41:71:4c:0c:5f:cc:75:72:e4:92:40:51:05:e1:fd:49:16:
         92:0e:aa:88:62:3b:1b:39:4e:d0:93:fa:6b:79:a9:08:9a:e4:
         3a:f0:9d:d5:93:13:ce:5f:e0:2b:35:d0:11:b3:7b:52:49:48:
         28:43:f3:ec:41:39:91:33:76:3a:06:85:81:68:df:98:a7:eb:
         27:a6:8f:04:1f:95:c5:ee:7e:b1:7a:17:ff:66:85:1b:bd:38:
         ec:96:a7:e8:83:f1:31:94:26:78:23:ff:ab:52:df:86:d7:80:
         45:11:dd:6b:98:e5:de:f3:c2:96:05:63:76:c3:67:a2:7e:1b:
         9e:ee:a3:ff:a6:5e:21:29:78:cb:78:7d:43:45:06:97:43:92:
         25:69:c6:3b:8d:d9:40:34:c9:e6:19:1c:99:c1:4d:2b:94:7e:
         a2:e4:5e:85:d2:2f:39:4e:e9:a3:87:fb:b5:b9:76:c5:e2:70:
         7c:55:da:1b:a4:1a:81:95:20:fd:0e:b6:93:00:ab:3a:92:0d:
         0e:97:0e:33:4a:28:03:32:ad:a8:a3:0d:50:16:14:fc:03:a8:
         37:5a:7e:73:04:0f:2c:13:2c:cd:6a:a3:7b:89:d0:30:8c:60:
         b9:e4:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:49 2025 by rpki-client