Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
File:                     d6V15x8FqSPAyxKXxZzmW0u90z0.mft (raw, json)
Hash identifier:          TvETM+F2Zu2pL3Ic18c2ED9xx4kSLlGqlhJ8NfKLGWI=
Subject key identifier:   C8:74:62:55:3E:86:9C:6E:A9:B3:BF:01:D0:0D:7D:3C:69:F0:A5:FC
Authority key identifier: 77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D
Certificate issuer:       /CN=A9144F34/serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
Manifest number:          1B
Signing time:             Wed 05 Feb 2025 06:21:27 +0000
Manifest this update:     Wed 05 Feb 2025 06:21:26 +0000
Manifest next update:     Wed 12 Feb 2025 06:21:26 +0000
Files and hashes:         1: d6V15x8FqSPAyxKXxZzmW0u90z0.crl (hash: w4695iZS9wGyZCsmFoZ+Ds907dVxgNImossPa8ewjao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl
                          rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F34
        Validity
            Not Before: Feb  5 06:21:26 2025 GMT
            Not After : Feb 12 06:21:26 2025 GMT
        Subject: CN=67a30367-efd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:18:c9:a6:b8:2f:35:05:8a:fb:da:d6:31:
                    b8:a1:4a:10:59:81:fc:f9:9f:71:01:22:d0:fa:b2:
                    32:67:81:fa:82:ff:49:30:78:a0:2a:8c:13:d9:c2:
                    de:85:93:f0:7a:72:e0:e4:c7:93:58:66:44:78:ca:
                    db:35:d6:05:40:92:7b:18:d5:13:c3:56:ff:41:a0:
                    7a:c5:13:9b:a9:1a:8e:09:39:d6:49:f4:15:86:c3:
                    4b:8e:c0:fc:bb:b1:1b:82:c5:80:06:c1:10:bc:cf:
                    df:c5:78:14:36:d1:2b:6a:67:c2:5c:c0:c1:d5:a7:
                    11:68:1e:a8:52:07:9a:38:bc:b7:71:06:e7:70:91:
                    ae:81:d3:47:1b:43:0f:2b:df:90:a0:0e:e1:fc:8f:
                    a5:86:af:c5:93:b7:2b:e5:78:a7:f6:d5:b9:be:8a:
                    d6:21:bd:92:67:0d:b0:89:2b:c1:2f:30:54:18:6d:
                    96:a3:cd:a5:38:14:3f:28:f4:6e:6e:ea:d9:aa:fa:
                    02:47:14:fc:79:66:18:82:e4:46:1b:06:54:5d:95:
                    9c:65:51:ac:cc:f2:78:9f:16:d9:e5:0d:c2:48:78:
                    9f:ca:90:d9:bb:bc:b5:a9:76:85:67:64:55:4c:f0:
                    52:d8:b5:87:04:f9:f4:78:5a:79:16:67:31:62:2f:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:62:55:3E:86:9C:6E:A9:B3:BF:01:D0:0D:7D:3C:69:F0:A5:FC
            X509v3 Authority Key Identifier:
                keyid:77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:75:3b:24:66:a9:0d:82:e8:df:aa:f4:5b:31:d5:64:25:ee:
         d3:35:df:3a:bb:40:91:a6:79:57:a0:51:30:8e:95:26:8c:e8:
         57:a3:85:cd:cc:4a:73:ee:7c:ec:94:19:9c:5e:58:1d:78:90:
         c7:5c:34:7d:99:c9:10:90:06:14:29:50:9b:70:80:8e:4e:6c:
         60:2b:34:76:d3:b7:a8:a8:e5:9d:7d:0b:93:fb:70:a9:5b:a4:
         07:67:6a:97:b7:bf:7b:60:ee:a9:46:22:7f:0a:c4:27:5f:5c:
         6f:01:87:a1:65:7b:ec:cf:9a:cb:20:75:7a:7f:f1:1b:be:66:
         09:69:c2:6c:45:03:6a:dd:e5:a0:02:d0:8e:c1:f1:50:32:4f:
         6c:c7:ef:6b:5f:dd:03:45:14:bf:52:0d:b1:32:13:5c:65:33:
         0e:21:7c:a7:a8:5b:5a:e7:07:93:a2:f5:68:ef:69:68:de:f2:
         35:14:ea:d5:43:c2:dd:f1:81:8d:aa:13:2a:67:70:3f:be:30:
         45:92:4d:47:bd:9f:17:0c:dc:f8:1e:cd:65:a2:d4:10:e8:b2:
         09:43:a3:83:5d:54:de:75:a9:66:11:ca:a0:da:85:28:e9:0a:
         fa:51:20:27:cf:bb:12:4c:7d:95:74:21:db:e4:83:d3:8d:71:
         b3:b4:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 04:34:47 2025 by rpki-client