Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
File:                     e1mk24bvVBn3rb3aHfUrUJ7m33U.mft (raw, json)
Hash identifier:          LaMWHj4WCBlLvUzXXENccYqFaV7Ap7XQfPnw7V+RYTc=
Subject key identifier:   E7:69:FA:B2:97:B0:53:91:B1:6E:5E:AF:7E:65:F4:4C:E7:76:EB:A8
Authority key identifier: 7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
Certificate issuer:       /CN=A91F3853/serialNumber=7B59A4DB86EF5419F7ADBDDA1DF52B509EE6DF75
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
Manifest number:          0124
Signing time:             Wed 09 Apr 2025 03:39:48 +0000
Manifest this update:     Wed 09 Apr 2025 03:39:47 +0000
Manifest next update:     Wed 16 Apr 2025 03:39:47 +0000
Files and hashes:         1: e1mk24bvVBn3rb3aHfUrUJ7m33U.crl (hash: dFDjXv66TizpEqo3J8oGfepY1DFCUdFmvMGQS7s/0iQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.crl
                          rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 03:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3853
        Validity
            Not Before: Apr  9 03:39:47 2025 GMT
            Not After : Apr 16 03:39:47 2025 GMT
        Subject: CN=67f5ec03-9df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:06:98:90:05:a5:f7:3f:22:91:95:4b:a5:
                    65:5c:66:b2:70:29:3b:6c:87:64:3b:7f:4b:95:7f:
                    34:12:e6:e7:01:05:1a:2e:11:f0:34:69:83:94:74:
                    13:89:16:91:8a:3e:6b:83:16:af:62:cc:b6:81:6d:
                    61:fa:1e:dc:40:59:2a:42:f8:15:2f:e7:bf:ad:53:
                    a1:92:13:2a:4f:28:c3:88:f2:7c:5b:cc:7d:42:64:
                    4e:bd:d4:dc:87:b1:8f:73:7e:81:c9:54:37:25:e0:
                    6a:3a:ec:f5:c4:66:e0:3b:3d:55:a2:ac:f1:89:c0:
                    60:46:bc:a8:b3:6c:da:8b:82:01:bc:d5:3f:8f:85:
                    e6:2b:a7:e8:a5:36:65:06:b5:35:5c:30:68:ff:1d:
                    c6:63:03:38:87:6a:4c:d6:09:78:9d:a4:c5:e8:07:
                    d3:c8:f6:70:bb:34:90:b4:da:c6:09:b2:51:25:01:
                    ae:69:65:74:6b:df:de:71:65:98:76:93:50:f6:56:
                    b8:43:87:8e:61:0d:2c:9d:82:ca:e3:9e:4b:8e:01:
                    cd:8a:aa:8a:b2:37:43:af:a8:19:17:16:28:77:df:
                    87:af:62:e1:a9:ae:f0:bb:35:e1:67:b9:7d:eb:76:
                    5b:29:5d:05:f1:94:d0:ed:58:ff:9b:14:24:44:a5:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:FA:B2:97:B0:53:91:B1:6E:5E:AF:7E:65:F4:4C:E7:76:EB:A8
            X509v3 Authority Key Identifier:
                keyid:7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:5a:8a:7b:a6:6b:d7:a9:0e:c4:d1:fc:a1:33:7f:b9:ca:
         47:f9:c2:21:68:84:fd:8d:ec:c0:be:07:c0:03:22:55:ae:72:
         65:cd:29:15:61:04:8d:fe:ab:dd:02:16:8c:ca:c5:a2:14:ae:
         45:d0:55:21:57:36:24:a6:ef:43:7e:0a:1a:aa:4d:cd:ea:74:
         15:7c:59:b2:72:a8:54:90:09:a7:ef:ca:23:79:57:62:99:fa:
         34:e1:36:43:3d:3c:46:01:c0:3b:dd:57:b4:c2:e5:0a:4e:91:
         88:cc:02:5c:57:00:6a:10:f1:a2:28:c8:7c:d8:1e:4d:96:08:
         a5:b8:d7:48:b9:87:a7:c1:87:ea:f4:ff:42:48:44:1d:f3:38:
         bb:a1:71:59:80:8f:71:cd:4c:4e:e2:03:19:5e:94:1e:0d:81:
         d1:75:aa:8d:e4:90:a5:ee:0a:f0:d2:b8:70:3c:59:31:cf:57:
         77:e1:2e:59:0f:94:f2:4f:e4:77:8a:37:b5:45:c5:60:65:cc:
         1e:4c:7a:c4:6d:07:38:07:a2:a2:38:c6:7a:0d:7e:af:b2:d5:
         0c:3f:9b:fa:d7:b2:76:44:12:4b:6f:ac:2d:df:a9:93:15:6e:
         fd:f7:91:6b:18:43:6a:57:41:7c:0e:55:ad:13:e7:39:fa:29:
         fd:23:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:32:38 2025 by rpki-client