Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
File:                     dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json)
Hash identifier:          GMJmNbm+nQUxlpNFIUxZagl9HVvJaYSZqC305CqNAZo=
Subject key identifier:   7B:10:C2:C9:93:C2:CA:70:EE:DA:D9:69:69:46:DF:88:12:44:A2:E6
Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88
Certificate issuer:       /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
Certificate serial:       11CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
Manifest number:          19D3
Signing time:             Fri 04 Apr 2025 17:17:01 +0000
Manifest this update:     Fri 04 Apr 2025 17:17:00 +0000
Manifest next update:     Fri 11 Apr 2025 17:17:00 +0000
Files and hashes:         1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: kK9EWhUVVItppvCsKkKIvs3BfLFMA1BhtOP9M07VoAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4556 (0x11cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8
        Validity
            Not Before: Apr  4 17:17:00 2025 GMT
            Not After : Apr 11 17:17:00 2025 GMT
        Subject: CN=67f0140d-5ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:ba:6e:50:93:92:b2:99:91:5e:80:ff:f4:
                    72:92:4d:3b:98:2b:c2:1a:27:5e:be:ee:cc:14:c5:
                    29:25:d1:4e:4c:bb:04:76:74:80:12:d7:0a:ea:7f:
                    c2:93:65:ad:c2:e7:d3:78:17:57:54:65:55:a1:71:
                    b3:b0:1e:69:fb:22:6d:51:af:f4:ba:cc:f4:2d:74:
                    ff:6b:ff:68:29:a8:59:83:99:de:78:7d:fb:91:4d:
                    ec:0c:e3:ba:a5:9c:88:26:de:dc:3a:83:79:ca:30:
                    f0:8f:e7:4d:e6:e4:c2:76:6d:f0:90:5e:fe:96:f3:
                    a2:a0:c3:a8:05:37:94:51:ca:5f:2a:f4:ed:93:cb:
                    83:09:a4:58:7b:d7:f7:5b:b6:68:69:28:86:e1:76:
                    c0:01:60:bd:d7:db:9d:1c:f7:a6:f4:a7:71:16:27:
                    d5:d1:73:17:14:ad:80:79:b7:e9:47:26:1e:7c:d4:
                    f0:47:af:29:ee:dd:05:72:d3:87:93:58:90:97:3b:
                    d3:b2:d6:65:b9:c2:5a:e4:a7:3b:b4:78:32:42:c0:
                    9c:ce:c4:ea:09:73:66:68:49:09:22:43:26:9f:0e:
                    57:dc:48:43:61:b4:d6:78:0c:1d:76:6a:9f:f1:8e:
                    f4:eb:e9:d5:20:5e:ed:cc:35:23:65:6d:84:3a:be:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:10:C2:C9:93:C2:CA:70:EE:DA:D9:69:69:46:DF:88:12:44:A2:E6
            X509v3 Authority Key Identifier:
                keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:6c:b8:25:f9:99:31:58:14:eb:75:fc:0b:88:65:14:a8:
         7f:f6:81:68:73:64:7e:3e:c4:5d:17:1c:24:27:36:b7:cf:bc:
         94:2b:5d:b5:43:b1:ab:e7:e7:03:48:5e:70:96:7a:9b:3c:e9:
         6b:c1:4d:3a:b5:6a:3f:fc:4f:88:98:59:5b:76:e0:35:76:52:
         ec:4f:db:12:28:97:2c:b3:75:de:c6:d4:bc:c9:e8:6b:0a:8f:
         f5:29:4f:8d:38:55:6f:60:c3:14:a4:32:d8:19:52:0c:63:4a:
         0a:da:32:e3:89:1d:3d:ab:9b:50:7c:0d:32:1a:a0:c7:2e:66:
         92:b4:33:36:91:26:2a:b0:04:c8:73:53:92:81:2f:91:50:bf:
         91:28:d4:d7:b3:ba:c8:b6:4c:e7:8c:71:88:2f:cc:a8:45:ac:
         a6:89:91:96:b9:b6:f3:f2:67:4b:0d:c4:6a:09:88:13:46:b7:
         a9:8c:06:e7:37:87:ea:b0:4c:6e:14:3d:b2:c4:35:d3:74:93:
         4b:f9:0d:ec:80:9d:04:34:cc:9d:ee:f2:41:8e:d5:25:86:b8:
         42:05:ac:49:2d:de:3e:c3:b6:45:ff:20:e7:ac:6e:56:37:a9:
         51:c0:ac:d8:91:cc:ef:16:53:c1:33:de:cc:a9:90:67:5f:d4:
         50:db:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:03 2025 by rpki-client