Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
File:                     wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json)
Hash identifier:          4D+CH48Bzv3cgMsrHF1vpjZTPJ45T9ETT7nwNYb+Y1U=
Subject key identifier:   2F:ED:0E:DA:F0:FD:75:27:48:58:1A:FA:A1:A0:8F:FB:FB:AB:C3:26
Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
Certificate issuer:       /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
Manifest number:          83
Signing time:             Sat 15 Feb 2025 07:46:06 +0000
Manifest this update:     Sat 15 Feb 2025 07:46:05 +0000
Manifest next update:     Sat 22 Feb 2025 07:46:05 +0000
Files and hashes:         1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: UItB1JLC/SCNTmNLgAqcvikwjCNZ8XxHjx3Ci68kr/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
                          rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB9A
        Validity
            Not Before: Feb 15 07:46:05 2025 GMT
            Not After : Feb 22 07:46:05 2025 GMT
        Subject: CN=67b0463d-f4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:97:4b:9d:bd:7b:a9:3d:38:da:ff:e7:ae:
                    b3:b5:3a:13:b8:f9:19:d5:da:6e:b7:d9:7e:36:f0:
                    8d:01:09:68:8b:17:0a:08:96:af:e2:d0:d9:72:a6:
                    46:81:3f:52:da:22:51:b9:e2:ba:0a:2f:59:4a:7a:
                    74:56:71:bc:5f:d7:20:85:49:36:07:73:1f:5f:fe:
                    b1:4e:72:f3:9a:06:71:74:8f:a9:d5:27:8a:8d:60:
                    43:81:0a:48:1a:55:b6:a7:18:89:8f:42:8e:41:fe:
                    87:3e:8e:94:18:16:da:17:3c:6a:ad:36:5d:98:51:
                    78:34:a5:4b:47:4c:e9:77:c0:ab:f9:60:92:73:6b:
                    18:dd:53:d4:ff:57:2f:a7:7e:95:ee:f2:67:cc:a9:
                    f1:ca:ef:c6:b3:26:b4:d8:87:1b:f5:34:9d:64:d2:
                    11:5f:88:96:03:dc:a6:5b:06:d7:f2:c2:cc:48:87:
                    7e:84:46:73:19:b6:f9:b9:b2:21:87:1f:80:07:e6:
                    c6:9c:52:d3:15:1d:96:28:73:75:9a:33:4b:fc:97:
                    4a:44:b7:3c:9a:84:03:dc:9f:c7:00:8f:21:23:1b:
                    8a:e4:ee:62:64:a7:a7:73:5a:38:70:4f:4c:ec:c1:
                    b2:e2:52:e9:55:66:54:3a:5e:0d:9e:d0:37:06:1a:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:ED:0E:DA:F0:FD:75:27:48:58:1A:FA:A1:A0:8F:FB:FB:AB:C3:26
            X509v3 Authority Key Identifier:
                keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:70:cb:22:05:4d:1e:61:fb:df:a4:ba:e9:69:66:36:ea:
         0d:8d:cb:0a:42:97:df:1d:61:f7:f7:8d:ec:5e:66:f6:94:a3:
         41:4c:9e:df:bc:e4:bb:bf:0d:66:63:ab:87:bf:56:64:5e:32:
         1e:5c:01:eb:ab:1e:c0:7c:ee:f5:24:4f:4c:00:ce:6f:e4:0f:
         a7:4e:ae:7b:11:41:84:5b:ea:78:04:30:a8:2d:1a:17:1d:bd:
         2f:3b:47:65:37:1e:ef:8e:26:f9:44:cf:86:03:c4:2c:9c:e0:
         93:fb:9a:7e:f7:7e:23:32:61:e4:9d:00:c9:43:e5:b4:7c:32:
         9d:a4:56:35:89:3d:70:2e:c4:6a:f3:10:a8:b9:3e:42:99:c7:
         cf:21:f7:ae:cb:5f:c9:58:72:ae:16:16:95:91:c5:31:6f:50:
         f8:26:e8:2e:92:0f:f1:6a:3e:e6:30:fd:c3:fc:cf:31:79:11:
         f3:33:2d:6c:87:e7:a6:ad:8b:df:f9:47:b2:a7:93:82:45:47:
         b4:fa:24:09:56:b2:ae:38:45:59:b2:92:82:1c:ad:fe:2b:f3:
         24:f0:77:f3:3f:fe:71:57:1a:37:17:00:f6:08:e1:ce:bb:bf:
         da:42:e1:cd:95:d3:6c:02:a1:f9:1c:72:3b:55:e9:d1:4c:d7:
         c1:3c:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:22 2025 by rpki-client