Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File:                     2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier:          NhUYr5n8HMZb2rrcEbbP9KnxaQ7MXqdcj6X70u+l9Qg=
Subject key identifier:   73:2A:50:B4:48:7A:2D:73:75:CC:0B:A4:4E:45:C4:BC:DE:60:CA:EA
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer:       /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number:          026E
Signing time:             Sat 05 Apr 2025 01:51:52 +0000
Manifest this update:     Sat 05 Apr 2025 01:51:52 +0000
Manifest next update:     Sat 12 Apr 2025 01:51:51 +0000
Files and hashes:         1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: XPdB9vD/VLlUxLWIpD/UP6M00mqgGT7e3qY9ro1Kyeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8
        Validity
            Not Before: Apr  5 01:51:52 2025 GMT
            Not After : Apr 12 01:51:51 2025 GMT
        Subject: CN=67f08cb8-bebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:7d:04:96:dd:fa:06:d7:5f:c3:9c:60:07:
                    bd:e3:37:8b:1b:9c:6b:77:63:b9:88:e9:4e:ee:c3:
                    bd:2c:3b:67:fc:e4:96:c8:15:cd:22:10:46:b2:cf:
                    fc:a8:1b:da:13:5c:ec:16:66:af:bd:38:1f:a0:7f:
                    eb:d9:19:53:f1:ec:c4:05:19:8d:35:dd:7c:61:86:
                    dd:aa:0f:61:48:5f:71:b3:2c:4a:15:75:d8:a2:60:
                    58:44:48:f1:c5:cb:a2:aa:13:12:a2:1f:e3:f0:75:
                    6d:dc:e2:62:c3:1b:d2:c3:38:d2:e9:2f:23:f8:c7:
                    c4:bf:65:94:89:6d:e8:42:0a:8e:1e:87:13:37:4a:
                    aa:d4:e0:35:2e:28:6f:26:e8:f4:6e:d7:e7:bf:b6:
                    4c:3e:08:29:e9:ec:f5:8b:bd:3c:a0:48:10:f1:d6:
                    e2:e5:36:0d:42:a6:be:ff:be:98:44:43:67:0c:c6:
                    e9:0d:7f:b2:83:92:de:a2:6f:4c:2c:ca:c6:d1:aa:
                    e7:21:0a:fc:d7:0f:22:89:5a:66:ca:42:a1:dd:97:
                    69:0f:d8:83:5d:9f:7e:b3:f0:39:8b:94:4c:41:33:
                    e8:9c:5d:2d:52:6c:01:3c:ee:04:45:49:6d:20:cf:
                    37:0b:0e:7f:dc:e2:74:cf:a8:ba:3e:3f:b5:bf:23:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:50:B4:48:7A:2D:73:75:CC:0B:A4:4E:45:C4:BC:DE:60:CA:EA
            X509v3 Authority Key Identifier:
                keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:7d:3d:9b:c5:a6:0e:e0:21:56:d7:57:02:fd:9c:28:25:
         32:e1:81:88:34:ac:2c:9b:2a:ca:c1:5a:e3:3a:26:fc:8a:79:
         bb:5b:1f:d0:02:9c:ad:9c:7a:cf:3b:29:63:9f:f6:2a:71:2d:
         47:c6:81:bd:a8:c2:e4:ea:ff:ae:f8:8a:d5:2e:98:97:26:9b:
         24:fb:1d:4a:1e:39:bf:f7:27:89:92:88:9f:b1:41:df:95:b2:
         aa:8c:69:c6:ba:a1:00:ff:07:33:83:dc:39:07:ad:21:fb:7a:
         c7:72:ed:95:0d:f3:48:e4:8e:cc:8f:a3:92:a9:b9:fe:cb:00:
         f6:bc:dc:28:91:b7:98:22:fa:32:a2:f5:9f:6f:a1:23:ed:e3:
         88:58:cf:b4:b4:79:a2:b6:41:2e:d1:a0:02:05:98:d1:fe:18:
         72:1c:25:50:de:28:69:48:79:7d:83:e7:58:4e:3a:17:2c:e5:
         f6:27:df:cf:5e:13:eb:7f:f5:64:9f:b4:41:9f:a0:cb:46:d9:
         7a:c3:a0:15:0e:c3:2b:f4:40:69:8b:29:78:a9:10:fb:a3:a4:
         f3:94:b9:7c:90:00:92:00:89:b5:13:1e:28:91:81:94:dc:0e:
         d8:3f:c2:9c:32:dc:66:fc:45:f8:8e:51:26:d5:a8:13:7d:0d:
         31:ab:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:20 2025 by rpki-client