Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          EyBJSRBOpA3YY+9HacAt19p1EuyOydWO+MRB955gM28=
Subject key identifier:   5E:17:56:EF:E1:12:FC:EF:6E:F9:BA:A7:07:77:D1:55:96:E7:E3:9F
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          18
Signing time:             Wed 05 Feb 2025 06:22:24 +0000
Manifest this update:     Wed 05 Feb 2025 06:22:24 +0000
Manifest next update:     Wed 12 Feb 2025 06:22:24 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: vhmSNWztl2LU7tf+MCKvFRH0u5GS5cilh5iQidbMhQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207
        Validity
            Not Before: Feb  5 06:22:24 2025 GMT
            Not After : Feb 12 06:22:24 2025 GMT
        Subject: CN=67a303a0-adb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:8d:c3:f2:b8:1b:6f:91:68:4c:8d:b3:87:
                    cd:e8:1e:1d:19:1d:82:30:05:02:75:c2:b1:78:6d:
                    68:db:80:bb:8d:38:ae:f9:dc:82:63:be:e2:e2:03:
                    73:55:d8:04:2b:b5:e0:ce:35:75:9a:2e:42:5b:d7:
                    7f:b6:5e:6e:a6:63:7e:31:c4:ce:82:55:c8:77:a7:
                    f4:85:d5:1f:58:4b:12:9d:6d:2e:e5:31:e8:45:af:
                    b9:52:f8:da:af:93:99:a8:0e:e7:ba:15:25:be:25:
                    9c:43:a4:31:5c:a9:fc:df:7c:5d:c0:f7:88:ab:94:
                    72:73:07:7c:5e:40:06:35:58:46:65:29:14:7c:3a:
                    b5:f0:40:5f:6d:04:69:2c:d3:0a:a0:ec:b9:17:c2:
                    f3:90:05:5a:69:ef:38:2e:0e:3b:e5:48:be:ce:f7:
                    f5:ba:3b:d9:e3:2b:dc:77:27:34:c6:54:07:19:a6:
                    94:29:98:c7:81:1c:26:cb:61:86:9e:62:06:c1:7e:
                    bf:01:1a:9f:67:31:42:51:91:70:c6:d3:f4:2d:cd:
                    45:df:90:3b:64:0d:09:28:8d:18:59:2d:fa:3c:dc:
                    e5:49:a4:17:11:79:5c:de:11:93:21:e8:0a:be:62:
                    66:5b:29:02:4d:e6:25:d2:de:c6:61:b7:b4:7a:ea:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:56:EF:E1:12:FC:EF:6E:F9:BA:A7:07:77:D1:55:96:E7:E3:9F
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:12:02:35:ca:ce:ec:60:b1:0d:a0:f5:71:da:e7:24:59:a6:
         d8:99:29:48:38:fc:02:8e:70:76:af:73:54:61:12:6b:ee:cd:
         38:c5:a8:6b:38:73:ea:00:a4:2f:f4:ba:50:c4:93:09:fe:a3:
         ff:a6:e1:2f:be:f7:af:8b:0e:9d:40:a4:72:ef:68:a4:ea:ee:
         ac:1c:0c:20:92:b2:06:57:6c:8b:ca:84:7a:f6:bd:c8:d3:d7:
         12:62:54:fa:ab:e3:7e:43:16:e4:5e:0f:18:1e:c1:82:a0:72:
         e9:3d:2d:92:fb:32:8d:39:04:a3:a3:3b:bf:e9:96:1f:67:e2:
         13:72:16:04:97:2e:9f:83:ec:1d:e2:9e:dd:09:39:ea:03:8a:
         e2:f0:34:18:74:e2:76:df:c5:85:26:9a:65:c1:6f:54:1c:0e:
         79:fb:80:ab:18:2a:c3:5a:cd:28:29:bd:30:39:8c:95:6a:ac:
         46:9d:a6:46:16:34:35:58:00:93:27:76:f3:a2:f3:33:e5:f7:
         d7:17:cc:5b:44:fa:e5:ed:52:83:53:2e:ef:07:35:c8:66:1b:
         55:ca:23:17:61:c7:e2:51:23:5a:df:3d:4d:2f:fa:e9:4e:9f:
         91:2e:4a:c8:de:d3:bc:01:95:b9:b3:e1:f6:c4:51:17:2c:14:
         36:70:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 04:44:08 2025 by rpki-client