Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
File:                     5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json)
Hash identifier:          ne0N12cW+6oW2QXDws7rR7ztxD1DFkI1B6Z1F3ofCCc=
Subject key identifier:   40:9B:DE:BD:1D:92:4B:E8:E5:DF:06:D8:8A:03:15:9E:1C:44:1F:15
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Certificate issuer:       /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial:       0427
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
Manifest number:          0564
Signing time:             Thu 13 Mar 2025 00:00:15 +0000
Manifest this update:     Thu 13 Mar 2025 00:00:15 +0000
Manifest next update:     Thu 20 Mar 2025 00:00:15 +0000
Files and hashes:         1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: Yc5Iu62b1VkkvRbSNL3WnEicDSXxDPIXfIbObzXtiak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363
        Validity
            Not Before: Mar 13 00:00:15 2025 GMT
            Not After : Mar 20 00:00:15 2025 GMT
        Subject: CN=67d2200f-0acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:45:90:a1:7c:36:ac:73:b5:8a:07:68:41:
                    6e:5a:80:df:e4:ae:24:13:19:1c:fb:e0:4c:87:f7:
                    ed:8e:cb:3d:a4:dd:02:ef:56:5f:93:6f:1d:71:3d:
                    d6:c8:49:94:e8:56:09:f3:f7:70:e4:fc:c5:fb:f7:
                    9f:8c:81:ae:4e:d4:16:e2:c8:d6:6d:c6:58:91:69:
                    43:b3:bf:dd:3e:74:4c:7c:04:c2:0f:73:8b:f6:78:
                    f1:77:10:b1:e9:a0:fd:f8:2b:75:3d:3d:e4:69:a8:
                    c8:65:de:b5:22:b8:c8:26:db:e8:85:d3:2b:2b:7d:
                    86:62:94:b3:7e:fc:12:7c:c1:02:21:d6:bc:bc:af:
                    b4:29:99:66:82:2b:75:f7:40:db:46:36:de:9d:16:
                    d6:3b:eb:76:07:a5:21:8b:09:6b:eb:58:7e:90:31:
                    cc:13:75:99:61:3d:f5:96:63:c4:2c:e3:0a:1a:fd:
                    0c:b6:7e:9a:ba:0c:d3:85:3d:3a:70:f1:07:f2:b6:
                    4b:46:3c:f1:82:e8:3d:0a:ce:16:14:4f:74:55:19:
                    3d:72:fb:ac:05:3e:de:ad:17:94:a3:03:f4:12:63:
                    08:17:0c:53:e2:11:56:05:db:a3:dd:f7:4c:1e:d8:
                    ee:0b:6f:62:86:6f:9f:78:4f:25:8f:d3:f5:27:ef:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:DE:BD:1D:92:4B:E8:E5:DF:06:D8:8A:03:15:9E:1C:44:1F:15
            X509v3 Authority Key Identifier:
                keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:6d:3d:40:44:ff:a8:7b:96:38:e8:ba:78:79:f7:75:13:
         fc:87:ce:84:a0:ef:07:1f:7d:21:45:de:68:49:22:2b:cf:89:
         03:e8:4b:61:69:96:4a:0c:39:ea:60:04:e0:77:d5:73:e4:f3:
         81:0e:3d:b3:21:97:1f:86:79:f1:e0:3a:f4:62:9e:ab:82:1e:
         97:bc:80:66:75:9d:2c:bc:f2:63:2a:ea:d1:5a:af:06:2a:4b:
         d7:f0:58:d3:00:b0:91:d8:7c:9b:3a:35:87:6a:99:fd:c6:b6:
         fb:e7:88:c0:31:b0:38:a4:f1:ed:f7:e6:5d:0a:18:0d:d9:bf:
         20:62:14:31:79:1a:1c:e7:cd:f4:77:4e:2e:65:2d:f9:08:65:
         72:ad:40:c1:8b:bf:ff:af:fb:98:1d:9d:6d:1c:58:4d:7a:52:
         b7:42:ff:d5:c0:b1:04:26:10:c8:5e:04:e6:69:d1:fb:3f:ca:
         06:7f:29:37:98:47:20:a4:63:0b:d5:6b:d3:ab:67:09:ca:aa:
         32:11:75:24:83:98:f4:54:06:59:e5:bb:17:71:f1:ac:19:cd:
         36:84:40:98:bf:db:ad:a4:7c:48:b1:17:b8:95:25:37:2d:1a:
         56:c8:6f:21:36:4d:86:d6:d2:7b:0c:20:42:25:4b:bc:58:66:
         f2:c0:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:29:10 2025 by rpki-client