Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          LrCunuu3MDBAeNJXTlFHOLfZ77zRUv+I1hTKxSmSZSM=
Subject key identifier:   C5:DA:00:94:9F:72:8F:9A:FA:F2:BE:F4:9D:69:1F:41:A6:9D:8D:77
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          1F
Signing time:             Wed 05 Feb 2025 06:20:04 +0000
Manifest this update:     Wed 05 Feb 2025 06:20:04 +0000
Manifest next update:     Wed 12 Feb 2025 06:20:04 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: F6qkAzJdUni/loEq+VY+StQSMc9J4xqPX/UT8C0/1/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47
        Validity
            Not Before: Feb  5 06:20:04 2025 GMT
            Not After : Feb 12 06:20:04 2025 GMT
        Subject: CN=67a30314-8e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:52:2a:3b:04:5e:06:d6:12:63:ff:7d:13:
                    72:60:bf:f4:f4:b2:c6:39:64:0a:02:3f:eb:0d:07:
                    4e:4f:b1:84:bb:72:3e:07:62:93:ab:5f:97:12:a0:
                    a6:22:47:cd:5e:e6:54:0c:b9:f7:81:87:a5:77:a9:
                    ba:67:e1:37:64:22:94:c1:ef:09:a4:0e:99:9b:1b:
                    4d:0f:31:14:1b:d3:23:1e:2e:47:05:50:37:e7:11:
                    e8:39:ce:fc:e5:0f:44:2c:4b:d7:ad:36:a1:30:85:
                    7c:70:00:a5:70:86:ba:77:43:e8:af:20:ba:13:1d:
                    b5:f7:27:6e:24:f9:5c:e0:3b:c8:f7:46:ff:5f:7b:
                    4a:34:29:ca:78:94:ef:2b:55:5f:43:05:3b:ed:99:
                    2b:b1:c0:6f:7e:f8:19:e4:9c:58:21:55:94:29:c7:
                    30:f3:82:13:07:02:aa:4c:4f:0e:64:5e:23:6c:ee:
                    ab:45:e4:3f:8c:47:a7:b8:0d:2c:ab:9c:d7:1b:77:
                    ba:35:93:de:62:ef:b0:37:d0:1c:74:88:54:28:99:
                    f1:51:89:ca:1a:83:d1:df:b4:6c:38:3d:a2:e3:68:
                    e0:ea:d3:69:40:eb:5f:9c:af:79:1c:b1:33:72:cc:
                    33:9f:ab:b8:5a:0a:72:37:ef:ae:21:9c:fe:75:86:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:00:94:9F:72:8F:9A:FA:F2:BE:F4:9D:69:1F:41:A6:9D:8D:77
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:6d:0e:c3:ae:2a:75:2b:f9:fd:b1:a7:af:fc:b0:85:8d:
         54:39:f1:00:08:a6:02:b8:be:fe:f4:d7:50:23:28:63:71:11:
         a1:4e:26:59:74:af:f2:bb:58:08:b7:0d:d6:af:c0:d7:62:b1:
         3b:be:f4:cc:44:cc:3f:4e:fc:78:d7:2f:ad:dd:6c:af:ca:38:
         b4:4a:02:cb:e7:c5:5b:01:a3:84:bb:8d:67:d1:8b:49:d1:c7:
         00:cf:99:fd:60:13:2f:44:c6:15:33:f0:ba:fc:6a:f0:61:7d:
         3d:71:e0:c2:b9:2b:fc:bd:51:89:75:c7:c7:ce:5f:67:eb:93:
         a0:67:5c:bc:16:92:e9:b2:1f:4e:4b:ac:47:ab:8e:b8:26:1a:
         68:d3:3e:30:31:f9:d6:0f:40:e1:47:85:2d:7d:69:13:d5:7a:
         be:f7:29:cc:95:3d:86:a7:09:52:dd:58:61:1a:db:66:a8:74:
         2b:d1:50:01:ea:bc:62:b9:70:3a:c6:9f:6f:3e:74:7b:63:ab:
         fb:d9:1e:09:64:07:3d:60:a7:41:c2:9a:f0:88:36:99:6a:7f:
         4d:e0:78:49:eb:88:00:02:db:63:c6:ee:f8:85:2e:fa:c3:e7:
         f8:d5:39:6d:04:82:33:ce:e8:48:c6:ff:79:4b:63:ae:db:fc:
         47:81:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 06:18:23 2025 by rpki-client