Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
File:                     4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json)
Hash identifier:          13gDXexqmLfMDLU3vAnnEYQtFwAPdIM6wth3K4B0Wb8=
Subject key identifier:   33:32:4E:61:46:20:E5:59:E2:85:87:CA:18:2E:60:0A:43:6E:2D:35
Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11
Certificate issuer:       /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
Certificate serial:       092E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
Manifest number:          092E
Signing time:             Tue 10 Jun 2025 20:09:15 +0000
Manifest this update:     Tue 10 Jun 2025 20:09:15 +0000
Manifest next update:     Tue 17 Jun 2025 20:09:15 +0000
Files and hashes:         1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: GTEE9x/fKg6FtD2INBKQaC/53IbqynbxdGKTB/qcMQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl
                          rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 20:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
        Validity
            Not Before: Jun 10 20:09:15 2025 GMT
            Not After : Jun 17 20:09:15 2025 GMT
        Subject: CN=684890eb-ce74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:1c:3d:bd:00:f0:94:79:88:9c:f8:4f:8c:
                    a8:9c:68:5d:39:07:cb:22:20:ee:91:95:3a:f1:6d:
                    90:fa:3e:4d:5e:a4:06:f5:fd:4e:8a:d2:dd:a8:09:
                    06:a3:64:fe:cf:12:6c:c4:14:0e:da:e0:74:e1:43:
                    43:c1:f7:f7:11:95:16:e9:e6:c7:4b:62:09:d4:8b:
                    d5:b6:5b:9c:14:1a:3c:e4:cf:de:5b:2b:d8:fa:50:
                    68:d4:70:01:60:cf:63:7b:9a:64:4f:b0:f6:b3:c2:
                    e6:94:93:0d:35:38:69:30:41:21:d0:57:d0:c6:25:
                    58:7e:ba:49:56:bd:b9:c6:24:c5:8d:5e:1c:28:f8:
                    38:5c:35:45:dc:23:27:74:88:1a:13:d7:3a:76:5d:
                    9b:60:92:f8:74:5a:51:5a:0d:20:6d:bf:17:03:80:
                    df:d2:8d:e1:1c:d4:01:8b:7b:bf:8d:3f:73:30:f2:
                    19:e3:cd:15:dd:f0:bd:e7:f5:12:b5:17:84:30:3c:
                    83:a9:7a:91:2d:12:ae:e5:af:45:55:9f:76:15:eb:
                    b5:41:12:5f:5c:7a:1b:74:76:37:1f:fe:63:1f:46:
                    c8:9d:39:3f:5c:b9:95:8c:38:cd:c6:53:af:42:2d:
                    fc:80:a7:83:ee:17:97:f7:91:d1:42:f6:7a:15:99:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:4E:61:46:20:E5:59:E2:85:87:CA:18:2E:60:0A:43:6E:2D:35
            X509v3 Authority Key Identifier:
                keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:bb:1a:02:88:eb:d4:03:05:fc:bf:4f:35:c3:df:5e:e6:17:
         e5:3d:ab:55:6f:6f:52:ce:cd:6f:a4:ad:66:26:b0:70:d8:0f:
         e8:f5:21:ac:74:bb:00:84:54:92:47:3d:09:25:94:52:57:b5:
         53:5e:3e:9f:49:36:56:93:de:00:f7:cc:06:48:dc:22:b4:50:
         d5:d0:d7:40:08:cf:5f:3a:f8:03:e7:62:e5:1e:42:46:23:34:
         f9:15:95:df:13:95:5c:a0:a5:a9:cf:8b:26:dc:e4:e0:02:73:
         de:40:7f:6a:4c:23:3e:bf:99:1b:44:99:82:0e:c3:53:3c:8f:
         d1:af:f5:2c:5a:e0:20:25:65:40:9f:c5:83:ee:90:91:72:db:
         ee:e7:69:f2:67:89:ff:e4:83:7d:de:6e:02:49:9c:24:f3:64:
         1c:e3:75:0b:e1:87:ab:c9:97:48:c9:15:60:9a:a6:96:92:87:
         d4:21:2b:ee:cb:2d:01:97:34:ac:0e:bb:d3:be:56:17:db:ac:
         b5:ba:a5:a1:96:34:33:80:b9:b1:cf:cd:67:1f:fd:63:d3:9c:
         25:ab:5f:0b:f5:4a:f8:e7:31:30:bd:64:9e:b6:c3:7b:d2:3d:
         ac:0b:35:de:ea:75:4b:10:c7:8f:73:90:62:be:b0:10:32:0e:
         41:7f:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:15:39 2025 by rpki-client