Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          mCFt7SY98TDzN8OKD96g0eIhm+55M0V0ZE+FFbT9BQ4=
Subject key identifier:   F0:A2:93:D8:9B:BB:23:E5:CC:5E:79:13:B0:89:D7:75:64:12:83:39
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       0776
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          0776
Signing time:             Fri 14 Feb 2025 22:25:45 +0000
Manifest this update:     Fri 14 Feb 2025 22:25:44 +0000
Manifest next update:     Fri 21 Feb 2025 22:25:44 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: gDNaZ6JTWwFrD3m3B/DLGhtroDJ779e5JJ6cXI+4O+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3
        Validity
            Not Before: Feb 14 22:25:44 2025 GMT
            Not After : Feb 21 22:25:44 2025 GMT
        Subject: CN=67afc2e9-8bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:13:d7:7e:6f:39:48:5c:e2:de:93:f4:a0:
                    1f:b1:a6:c9:54:a3:9d:b3:f2:b8:2b:1e:fb:ac:1d:
                    c2:0d:f9:bd:0a:90:65:06:27:fa:46:ab:e7:01:31:
                    fc:76:40:f1:42:a9:ec:d3:64:78:64:a4:e9:70:c5:
                    3f:1e:56:dd:02:06:4c:87:dd:01:f8:69:84:7c:4c:
                    57:ef:44:8f:fa:15:3b:46:d0:2c:f2:46:d3:d8:5f:
                    23:d7:7e:b6:1a:a1:d5:95:93:02:37:bd:e3:61:5a:
                    5c:3b:b0:0a:c6:9a:fb:22:7b:4c:f1:e6:a5:45:41:
                    c9:1f:75:2a:bb:7e:8b:94:27:e9:eb:9b:26:b0:55:
                    4f:a2:df:37:9a:8e:c4:8a:14:3d:64:56:bb:1c:4d:
                    a8:52:66:35:9b:64:67:10:91:7c:48:6b:a3:24:65:
                    74:0c:35:47:3d:96:59:a3:e9:7c:5a:cd:d8:20:ba:
                    ca:95:c7:e4:22:8e:30:4c:ea:75:2c:1e:02:98:fa:
                    87:1c:d8:b5:7f:a1:28:5a:f0:5b:56:8a:b9:b1:32:
                    8d:da:16:02:25:e6:c4:fe:3c:f4:43:ae:4b:b8:b1:
                    8d:d9:af:0f:c7:c4:80:d2:46:2c:07:c0:73:c9:b8:
                    3b:91:09:5b:33:a8:26:e1:04:db:ce:5d:69:db:a0:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:93:D8:9B:BB:23:E5:CC:5E:79:13:B0:89:D7:75:64:12:83:39
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:a1:e3:14:c3:5b:68:a7:21:e1:9a:b9:43:cc:fe:a8:b8:
         bf:99:c2:75:52:2a:e0:3c:18:06:a1:8d:df:7c:92:8e:fd:cf:
         16:0a:89:e8:c9:91:53:77:4c:61:34:09:b7:4e:45:c8:7e:50:
         cc:fd:15:bb:8d:ed:15:f4:d7:54:fb:41:10:b9:c1:00:36:d0:
         3f:48:10:a8:41:98:fb:d1:3e:e0:a8:c8:02:63:b9:fb:ac:b1:
         3d:58:7b:fd:db:1d:9d:65:bb:1d:ea:49:58:e7:27:bd:0c:3d:
         09:31:85:1d:4c:41:6e:f7:d6:f3:17:7f:25:22:0b:a7:80:af:
         63:71:1a:cc:e2:f7:be:a1:4c:66:98:26:a2:4e:dc:4c:ca:bf:
         f1:96:ba:f2:c3:39:1c:79:22:bd:1d:5c:07:0f:83:02:67:99:
         ed:8d:66:e8:34:ae:2d:04:e4:68:9a:dd:21:9c:46:80:d8:c4:
         c5:6a:47:d9:bf:26:b9:66:c7:df:44:d2:d4:29:3a:c0:df:33:
         44:3e:41:b6:f6:ac:b8:cf:6c:54:28:e3:26:27:cc:41:83:c9:
         a1:e7:83:f9:70:8e:e3:4d:17:5f:47:d6:b7:81:1a:cf:c2:d5:
         f5:a2:b7:5b:45:a4:b3:0f:0c:53:a6:49:75:cd:5d:40:45:c7:
         de:0b:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:37 2025 by rpki-client