Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File:                     TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier:          wGqT4blBF9rP9EirkDCkMt+rgiAP8epOBpe0nhXyBp0=
Subject key identifier:   2F:CD:1D:10:2F:A4:67:37:E0:04:E3:C6:4C:38:24:26:53:DD:DB:CA
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       0288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number:          0867
Signing time:             Fri 04 Apr 2025 23:05:18 +0000
Manifest this update:     Fri 04 Apr 2025 23:05:18 +0000
Manifest next update:     Fri 11 Apr 2025 23:05:18 +0000
Files and hashes:         1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: Vujt9AxDmozvt3FQCIU4VxwP6HfIdaXTeCMVH275398=)
                          2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: DMblA57/gS3EDB2YqHfXKXMUoBPfRO+vOE3aArums64=)
                          3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: eXiNprSP3Xqa5jUVIP50uCJTJWbuKph0+8u++H0ltD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F
        Validity
            Not Before: Apr  4 23:05:18 2025 GMT
            Not After : Apr 11 23:05:18 2025 GMT
        Subject: CN=67f065ae-d123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:51:bf:00:6f:41:bd:c7:ca:71:da:c5:d0:
                    72:20:91:a0:e8:4d:a7:b2:11:21:34:be:c8:cc:8e:
                    c1:e0:45:84:af:58:4e:e0:f9:99:db:b7:2c:8b:4b:
                    17:f0:75:ac:9f:82:61:0c:53:52:40:00:d6:6c:ee:
                    59:25:67:02:21:5e:24:3f:45:12:aa:01:e0:5d:f7:
                    83:2a:28:d5:35:98:27:d4:19:31:cd:46:60:91:b5:
                    1e:e9:8b:28:ba:08:30:63:2a:6b:bc:82:0c:fd:0e:
                    6f:19:3d:43:80:bc:da:e2:5b:9f:a3:fd:81:29:ac:
                    a7:2a:75:7d:80:2a:cc:7f:c9:f7:b5:54:64:80:26:
                    b5:a5:4c:6f:97:b4:4f:59:6c:b3:b2:aa:ea:81:e7:
                    13:3a:f0:93:7a:6d:69:b6:1f:e2:30:18:07:83:4a:
                    bd:5b:4c:d8:ad:bc:8f:f0:57:b8:fb:b8:99:95:af:
                    0f:f9:18:eb:69:a6:f1:d7:72:18:00:b3:de:69:b2:
                    6a:7d:31:8f:62:38:aa:d6:53:7c:2c:20:8d:c0:b8:
                    62:1d:08:28:81:93:c9:8e:39:64:ed:0e:6b:b8:02:
                    42:72:0b:cc:81:48:86:a0:5e:04:68:f2:93:e1:5e:
                    d2:72:a6:0e:e6:80:a1:83:b2:2e:97:7a:88:00:45:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CD:1D:10:2F:A4:67:37:E0:04:E3:C6:4C:38:24:26:53:DD:DB:CA
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:39:06:b8:43:af:5f:97:5c:40:7a:28:51:6e:99:e3:54:
         85:23:2d:b8:61:c4:12:1a:25:da:9e:62:63:11:de:7d:f2:28:
         55:8f:dc:ee:4d:72:c2:53:2f:55:6e:cf:32:41:74:28:ad:a2:
         8c:b9:21:a7:16:ed:b4:0e:79:82:07:42:d4:43:3d:0f:32:a9:
         35:b2:99:5e:68:53:76:23:6a:0b:13:4a:3b:e0:27:d9:a5:f4:
         40:fe:6b:84:c3:a9:e4:60:c3:f2:54:7d:35:58:2f:70:8a:e7:
         2b:81:7e:d7:1b:a3:c2:1f:a2:3e:61:b3:5b:c3:df:e9:3e:eb:
         94:29:43:ab:49:f5:c7:d3:d4:af:0a:77:04:5e:38:d2:3b:cc:
         44:89:ba:07:34:83:80:7a:ab:ca:96:41:3f:a2:c2:1d:ed:ed:
         e1:4a:2a:1e:0e:0e:1b:a3:bb:87:c9:88:87:7a:30:bd:ba:34:
         d7:b3:52:15:d8:de:e5:3f:61:f6:55:cf:53:ec:41:88:e3:d1:
         2d:d7:a8:9d:12:b0:59:09:43:c1:ed:13:0d:24:7b:d8:aa:ca:
         73:d8:e6:d8:66:67:45:5d:5f:b6:a7:31:09:dc:4e:c2:13:4a:
         fd:f0:5d:d9:d2:58:ba:80:bb:4a:16:4b:39:2a:9a:0c:a0:28:
         b1:77:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:02 2025 by rpki-client