Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          VPOaGZxA+1XVFdUJ8tRhtBY3fVJXUzMBafuFizp5QGE=
Subject key identifier:   24:2B:75:22:EF:38:73:55:7B:BC:E9:63:F2:05:3F:0C:F8:D8:D2:39
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       0783
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          0783
Signing time:             Wed 12 Mar 2025 21:02:11 +0000
Manifest this update:     Wed 12 Mar 2025 21:02:11 +0000
Manifest next update:     Wed 19 Mar 2025 21:02:11 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: UiPjc+6ttUXz/hPALwGwdXqaMrVPcsgvhKFn8FpezBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 21:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3
        Validity
            Not Before: Mar 12 21:02:11 2025 GMT
            Not After : Mar 19 21:02:11 2025 GMT
        Subject: CN=67d1f653-a360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:3d:9e:89:a4:9b:e4:7e:e5:fb:8f:b7:73:
                    13:ce:23:e8:3f:c5:f5:1b:58:6d:40:2f:ac:07:8e:
                    44:e2:f9:69:c8:ad:d9:6f:27:ed:1c:4f:db:65:fe:
                    04:61:93:e8:96:0a:8a:aa:d6:08:61:42:32:22:f0:
                    03:98:25:16:5d:69:8c:2d:bf:02:57:2d:97:44:df:
                    cf:33:4c:df:7f:07:96:cf:15:1a:e6:b3:3c:63:5f:
                    03:70:eb:ab:37:f7:f6:3e:21:b1:ca:12:ab:b0:b9:
                    f7:b1:52:aa:c3:98:7e:90:50:34:38:ca:61:0b:d8:
                    05:9b:3d:a7:c1:d2:de:ea:39:b0:d3:99:6f:08:22:
                    94:66:04:14:f5:a5:64:60:77:df:bf:8b:7b:8a:64:
                    cf:be:32:20:31:bf:18:1a:3f:ab:86:dd:0d:f9:5e:
                    87:98:81:32:79:f2:30:04:bc:b3:a4:71:88:29:3a:
                    07:07:53:06:08:f4:f9:ca:04:ad:fe:cf:12:32:27:
                    9c:95:33:62:ec:8a:4e:93:a5:e6:b3:bd:2d:f2:21:
                    d4:b6:32:6d:a7:ab:67:3c:bd:56:bf:6e:9d:f2:71:
                    9a:cc:6e:5a:d2:dd:6a:58:f6:f2:06:d9:c5:63:ae:
                    9e:0a:e6:6b:4e:0a:b2:c4:c5:81:92:1c:06:0a:24:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:75:22:EF:38:73:55:7B:BC:E9:63:F2:05:3F:0C:F8:D8:D2:39
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:36:07:07:a7:58:d4:57:f9:24:52:5d:b2:ea:7c:d1:8b:
         f6:00:2f:bf:d3:be:c7:8e:df:26:5f:ab:5d:91:06:e7:6a:4b:
         f2:ac:14:f8:c9:a1:c8:bc:e8:45:01:a1:e3:ce:83:44:a3:46:
         26:ec:40:34:10:13:6a:86:a9:2d:38:cf:d2:79:d0:31:ab:7e:
         65:19:f3:bf:ec:50:84:20:86:09:b8:cc:e8:fc:35:21:62:ad:
         cd:00:4f:ee:c1:d6:3c:fb:3a:cb:53:5c:35:39:e2:b4:07:ae:
         42:1d:74:a2:ab:dd:98:89:ee:61:6b:d9:d8:ca:d9:ec:f0:ea:
         15:f2:25:c2:2b:7a:2a:f5:05:a7:00:40:aa:07:1c:79:86:e5:
         be:6c:4c:33:97:16:77:1d:6a:27:4f:e4:b7:18:35:75:af:77:
         2c:93:31:d0:7e:2e:96:30:7c:8b:3f:e8:f5:00:d0:4a:0d:0a:
         ad:de:7c:6c:21:22:b3:81:17:66:ed:8d:19:3a:ed:47:ed:5f:
         4e:bc:db:ae:47:6a:e6:e5:43:93:57:d6:d8:ad:26:3e:cc:0c:
         63:62:41:a0:2b:49:df:0a:08:71:5f:95:aa:1e:98:a4:9f:c7:
         89:b8:82:db:75:31:2c:1e:b9:69:e0:75:1f:5e:56:f8:dd:ae:
         97:fa:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:30:56 2025 by rpki-client