Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          GMokws3vXTuoaslxPMm9tGHO7ycm634xLxKKf0wmn+U=
Subject key identifier:   F6:52:31:44:56:58:15:71:A7:01:1C:3A:0E:C3:1A:2F:87:4F:9A:10
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       1105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1D47
Signing time:             Fri 04 Apr 2025 17:22:42 +0000
Manifest this update:     Fri 04 Apr 2025 17:22:42 +0000
Manifest next update:     Fri 11 Apr 2025 17:22:42 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: UnXHoQO1DsyCBJAyiHH8DTUECgnmOdp9+xfjAXUuBtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4357 (0x1105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0
        Validity
            Not Before: Apr  4 17:22:42 2025 GMT
            Not After : Apr 11 17:22:42 2025 GMT
        Subject: CN=67f01562-7376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:45:ca:d7:59:ef:f1:c7:9f:2c:ab:75:7e:
                    b8:8b:bc:5c:9c:b7:d9:fb:dd:3f:34:ae:eb:67:ad:
                    72:67:7b:5a:00:f8:92:19:f7:88:46:22:03:ac:5c:
                    3f:c5:6e:3b:9e:93:8e:e4:8e:00:31:ff:77:fa:71:
                    87:3f:bf:65:aa:83:bf:d9:87:2e:ee:46:25:4c:46:
                    5c:44:e2:34:8a:84:7f:94:9f:c7:fe:22:a7:97:a8:
                    6c:25:08:38:15:b1:24:95:79:a6:0d:98:0c:93:e5:
                    0c:e8:95:12:16:e4:5f:f3:45:de:05:ca:6c:17:dc:
                    68:1a:73:8c:3b:80:d5:d6:bf:d9:40:5a:5e:48:32:
                    2c:43:46:80:d7:3a:84:ab:63:79:e8:cf:b7:9f:25:
                    bf:3b:1c:4f:75:ce:91:8a:aa:ad:82:4e:53:b7:cd:
                    cd:b8:f5:aa:bd:b4:00:97:0e:c0:d3:37:74:f9:b9:
                    b0:2d:5b:d7:8a:4d:5e:0b:a3:2c:b4:8f:51:8f:41:
                    5c:2c:62:6e:b6:c3:03:0c:bd:19:b3:fe:c5:b6:f5:
                    c4:dc:08:89:0e:fd:fa:ca:85:1c:ed:37:4b:6d:8a:
                    bd:ae:5b:f0:01:09:b3:6a:d8:5a:4a:45:ca:76:ce:
                    a2:53:28:a3:1a:19:92:28:37:cd:06:fa:03:65:e4:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:31:44:56:58:15:71:A7:01:1C:3A:0E:C3:1A:2F:87:4F:9A:10
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:71:91:7b:f1:28:d9:44:e1:b6:f9:c7:1a:a0:2f:9e:25:
         ff:af:94:e4:be:9e:9c:d1:61:13:4f:ad:13:d4:aa:47:bc:9f:
         e1:fb:44:ba:48:08:6b:bd:cd:2e:48:e3:be:c4:e2:36:4f:98:
         80:16:ae:f0:f4:e2:5a:a1:40:a9:ff:bc:ef:bf:5d:69:61:e5:
         20:4b:ce:f5:e7:d2:c6:63:18:27:0f:0e:78:6d:d7:8f:cb:15:
         d8:dd:09:6d:da:43:02:77:3f:b6:9c:8a:be:c7:01:7b:c7:51:
         d7:3f:81:91:4e:ab:2c:ab:4e:85:37:c0:2f:aa:5e:db:c5:0b:
         a8:68:0d:b6:bc:ae:1e:7a:f9:24:cf:f0:8b:47:f3:6a:2e:6d:
         aa:5d:15:cd:46:3a:da:c6:2b:43:d2:08:48:67:70:67:1a:b0:
         56:44:ae:13:ed:96:30:5c:55:7e:10:04:54:9e:df:1a:b5:58:
         c6:68:0d:42:7d:8e:c4:54:1f:d6:b7:00:62:57:81:53:63:bb:
         26:2d:3e:18:cf:d9:a9:d3:79:21:13:ea:83:27:07:4e:e3:52:
         81:c8:5e:be:4f:a8:21:4b:3f:2f:0d:59:4c:0d:37:a9:2c:f8:
         fd:32:e0:80:b7:66:87:58:0d:3c:21:0e:d1:c3:22:13:06:2d:
         86:63:e3:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKDZGN0I0NUUzREM3NjI2QzM3RjhBMDFFMEFCOEVBNEFG
MDU1RjQ5OEEwHhcNMjUwNDA0MTcyMjQyWhcNMjUwNDExMTcyMjQyWjAYMRYwFAYD
VQQDEw02N2YwMTU2Mi03Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKZFytdZ7/HHnyyrdX64i7xcnLfZ+90/NK7rZ61yZ3taAPiSGfeIRiIDrFw/
xW47npOO5I4AMf93+nGHP79lqoO/2Ycu7kYlTEZcROI0ioR/lJ/H/iKnl6hsJQg4
FbEklXmmDZgMk+UM6JUSFuRf80XeBcpsF9xoGnOMO4DV1r/ZQFpeSDIsQ0aA1zqE
q2N56M+3nyW/OxxPdc6Riqqtgk5Tt83NuPWqvbQAlw7A0zd0+bmwLVvXik1eC6Ms
tI9Rj0FcLGJutsMDDL0Zs/7FtvXE3AiJDv36yoUc7TdLbYq9rlvwAQmzathaSkXK
ds6iUyijGhmSKDfNBvoDZeQtOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZSMURW
WBVxpwEcOg7DGi+HT5oQMB8GA1UdIwQYMBaAFG97RePcdibDf4oB4KuOpK8FX0mK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4MkpzTl9pZ0hncTQ2a3J3VmZT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IzdEY0OXgySnNOX2lnSGdxNDZrcndWZlNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4Mkpz
Tl9pZ0hncTQ2a3J3VmZTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6OXGRe/Eo2UThtvnHGqAvniX/r5Tkvp6c0WETT60T1KpHvJ/h+0S6
SAhrvc0uSOO+xOI2T5iAFq7w9OJaoUCp/7zvv11pYeUgS87159LGYxgnDw54bdeP
yxXY3Qlt2kMCdz+2nIq+xwF7x1HXP4GRTqssq06FN8Avql7bxQuoaA22vK4eevkk
z/CLR/NqLm2qXRXNRjraxitD0ghIZ3BnGrBWRK4T7ZYwXFV+EARUnt8atVjGaA1C
fY7EVB/WtwBiV4FTY7smLT4Yz9mp03khE+qDJwdO41KByF6+T6ghSz8vDVlMDTep
LPj9MuCAt2aHWA08IQ7RwyITBi2GY+NS
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:24 2025 by rpki-client