Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File:                     0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier:          6rR+t6BhXW9C8UJ/r3jOh5GpGHIAKPgDuggSGb0INyA=
Subject key identifier:   B6:CF:8C:40:27:87:D6:B2:93:C2:AA:36:19:15:CC:48:B4:45:3F:AB
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer:       /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial:       0A91
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number:          0A91
Signing time:             Fri 04 Apr 2025 16:46:55 +0000
Manifest this update:     Fri 04 Apr 2025 16:46:55 +0000
Manifest next update:     Fri 11 Apr 2025 16:46:55 +0000
Files and hashes:         1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: sC/DMiYI4c0Y7ub/PE8puydgra9Z0Vtai4T331tXc8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl
                          rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38
        Validity
            Not Before: Apr  4 16:46:55 2025 GMT
            Not After : Apr 11 16:46:55 2025 GMT
        Subject: CN=67f00cff-b6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:4f:5a:2e:08:fd:06:c4:c9:b2:0d:be:88:
                    cb:d6:93:38:31:63:c4:67:1a:83:a5:28:a4:c4:b2:
                    84:8f:aa:2d:d9:f6:88:20:35:e2:58:ca:72:06:30:
                    dc:39:0f:9d:aa:b6:0e:6a:c7:c1:98:d1:47:84:03:
                    94:fb:62:ab:76:ed:23:00:5b:4f:6f:9a:b9:3b:9a:
                    6a:dd:fe:7a:8d:d9:9c:42:98:48:5c:48:c4:1f:ba:
                    a8:17:3d:9b:5f:a2:11:79:60:e5:31:52:96:c7:a6:
                    84:51:c2:69:ea:ab:2a:02:d4:bd:1a:ea:2d:3e:12:
                    c7:a9:83:ff:47:18:82:03:71:76:8f:5c:07:72:1b:
                    5d:89:ee:9d:97:15:51:1d:d9:94:be:cd:a9:8d:b6:
                    47:22:db:22:35:54:8e:70:05:e9:9e:d2:41:ca:ab:
                    c0:ab:71:f2:f5:5d:32:22:80:8e:7c:40:b8:61:e4:
                    05:d2:c7:1c:8b:36:88:80:55:a2:0d:a2:12:53:d7:
                    7a:16:60:22:8c:92:21:49:b7:df:07:a6:74:c1:48:
                    0c:35:c2:1c:d0:ed:cc:88:c1:4d:3b:47:ca:28:d1:
                    53:02:54:41:ee:09:6d:a1:63:87:c7:43:55:54:ee:
                    a4:50:e0:21:15:db:66:ec:09:8e:7b:b6:45:c1:a3:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:8C:40:27:87:D6:B2:93:C2:AA:36:19:15:CC:48:B4:45:3F:AB
            X509v3 Authority Key Identifier:
                keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:01:fb:ed:1a:a1:30:34:3f:79:1c:17:0b:32:29:cb:f4:
         8b:8d:a7:d0:ac:f2:92:33:d3:b3:e7:9b:2f:ab:a8:eb:f6:28:
         c3:21:48:67:df:a4:1b:0c:6b:3d:ad:05:b3:50:82:27:2d:62:
         66:e0:29:d1:f7:7f:06:e6:6c:c4:24:cd:b0:08:a5:8a:e3:18:
         81:ca:e4:57:48:9c:c8:af:29:48:0b:04:10:4b:83:b0:47:bd:
         fc:24:76:aa:35:ac:bc:c2:c9:bc:0c:93:8a:90:63:92:46:f6:
         d6:54:5b:1a:8e:be:7f:0d:75:98:17:db:67:1b:a1:c2:46:16:
         7f:21:bd:0e:13:52:c1:d8:5f:8b:59:0b:c0:84:1f:ff:22:b6:
         a9:e8:88:a7:89:0b:bd:4e:41:58:50:1c:fe:1d:84:45:e1:74:
         e2:af:5b:14:ef:f0:a3:1b:79:fa:92:54:89:0a:6c:ea:9e:68:
         ed:a7:dd:31:07:55:78:e4:d8:e2:7c:b0:04:84:74:86:a2:a0:
         be:65:7d:a9:49:17:80:0e:f4:35:0d:5a:f6:93:b3:65:f7:1e:
         b4:3f:2e:11:c6:e5:88:87:3b:7f:a0:54:d2:a6:b6:91:66:7c:
         99:e6:d8:0b:70:7d:d4:ae:19:ab:1a:31:ed:74:50:4a:7b:c9:
         bf:7e:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:30 2025 by rpki-client