Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft
File:                     e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json)
Hash identifier:          NxPgAQdUt/7AfogbOMWvgcn4nexBAct4M75qqrQ4EHw=
Subject key identifier:   28:6B:49:91:30:7E:D0:EE:DB:51:69:8C:37:E8:29:6F:04:66:7D:64
Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11
Certificate issuer:       /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft
Manifest number:          09D4
Signing time:             Wed 12 Mar 2025 19:42:20 +0000
Manifest this update:     Wed 12 Mar 2025 19:42:20 +0000
Manifest next update:     Wed 19 Mar 2025 19:42:20 +0000
Files and hashes:         1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: VXBXJSL+gNe5osHDDBMuTbXqrNZ2VDy7liqeYg8HnPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl
                          rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 19:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F3A
        Validity
            Not Before: Mar 12 19:42:20 2025 GMT
            Not After : Mar 19 19:42:20 2025 GMT
        Subject: CN=67d1e39c-53bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:18:98:44:87:e5:34:37:f2:d8:20:d7:5e:
                    29:f6:54:3d:46:c0:23:eb:79:4d:74:ad:9e:da:6f:
                    c6:72:ce:a6:b8:73:20:ed:33:54:25:65:16:c2:d5:
                    32:de:96:fb:09:2c:a9:ca:46:dc:bb:ba:c7:05:16:
                    8b:a6:74:a6:79:ee:74:a0:a0:19:8e:83:78:cb:3a:
                    65:92:1c:30:5e:a5:50:d9:c5:dd:dc:36:a7:a8:75:
                    c1:22:35:45:b1:2e:fb:1d:82:e3:30:5a:3a:a9:52:
                    6b:b2:f4:ec:0c:f2:e0:0d:ed:fb:fc:18:1b:56:7d:
                    22:00:1f:4f:d4:62:11:fa:72:67:9d:81:dd:d2:28:
                    40:ec:3c:49:9a:c1:33:81:52:e3:9a:77:52:3c:80:
                    76:3d:67:55:39:db:b5:bb:b6:a4:83:08:28:83:df:
                    42:86:9d:19:c5:85:14:99:6d:b9:6f:4d:2a:b7:e4:
                    67:36:dd:f0:44:cf:57:8c:8d:0d:fb:80:8c:bc:90:
                    c5:7a:89:17:b3:b0:cd:00:e7:cc:c8:45:12:e1:d9:
                    bf:37:f7:cd:c2:4c:bf:1f:c6:94:1c:24:58:27:c3:
                    5b:c0:77:b5:1e:78:d5:5e:30:cd:5a:9a:cc:d4:32:
                    43:c8:8c:13:aa:63:f8:22:dd:7a:79:24:4b:77:ae:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:49:91:30:7E:D0:EE:DB:51:69:8C:37:E8:29:6F:04:66:7D:64
            X509v3 Authority Key Identifier:
                keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:69:a7:ba:bf:6d:09:53:10:60:2b:7c:cf:76:2a:24:85:
         a4:e5:cf:b4:14:79:67:b1:65:62:56:4f:b1:aa:a1:d5:86:ea:
         79:00:64:ae:5c:63:6f:75:ca:d6:3d:9b:27:63:98:99:8c:bc:
         e4:6c:f7:46:15:53:4c:14:38:cf:d2:9b:90:6e:12:b7:fe:6d:
         6b:db:00:ea:44:0c:ab:c5:97:82:a8:63:b2:f7:12:c4:d0:c5:
         7e:95:44:54:c7:78:50:e0:ca:7f:bb:73:2d:57:3a:38:cf:0a:
         2a:c5:5c:89:0f:46:35:ed:03:10:b9:6d:85:8d:10:bd:a6:ae:
         5e:04:ac:1e:90:49:a5:2e:fe:43:89:f4:aa:2b:99:00:f3:b4:
         55:44:4b:c8:47:0e:e5:a4:4a:28:24:45:18:d5:e2:87:2c:67:
         05:d5:5b:10:67:2a:97:7f:05:5d:53:48:2a:1f:9d:6d:6d:ea:
         e2:ca:55:10:55:09:32:86:df:38:97:7b:a7:6f:f7:38:fc:64:
         6b:74:06:53:37:35:ec:ac:2e:7b:c5:6b:3b:cf:55:51:2f:53:
         6b:44:1c:b7:19:2f:63:51:63:02:dd:7a:7b:58:97:68:78:b5:
         46:e3:e4:75:b6:84:bb:84:f2:c8:46:20:53:ef:1d:e9:38:68:
         64:63:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:28:20 2025 by rpki-client