Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          8XTPZbK0AH83xR2AERGpFshZJ/8TawaOj11oMNhX3gs=
Subject key identifier:   F7:32:6C:87:83:FC:51:41:0A:33:33:5A:37:8E:AD:32:9B:D2:5B:EA
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          60
Signing time:             Fri 09 May 2025 06:07:03 +0000
Manifest this update:     Fri 09 May 2025 06:07:02 +0000
Manifest next update:     Fri 16 May 2025 06:07:02 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: O+DGt3MY6eMmOu72Ke0xbQEk+evxtcuOdkpxThNsICc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 06:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: May  9 06:07:02 2025 GMT
            Not After : May 16 06:07:02 2025 GMT
        Subject: CN=681d9b87-8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:aa:9a:b4:84:e6:90:ce:e8:e7:03:7d:2e:
                    46:49:15:25:e2:89:1b:98:62:4f:cc:0d:be:7e:78:
                    91:28:62:1b:a0:26:b0:bc:75:7a:03:a4:b8:9a:fc:
                    75:18:46:83:ad:3b:ef:06:47:c3:7b:7d:7b:1f:9f:
                    98:dc:51:6c:af:10:05:ea:7a:db:26:a4:79:a4:69:
                    8e:56:49:9a:aa:5f:79:3c:ad:3e:ed:ec:59:97:42:
                    e7:72:51:53:af:d0:1d:7b:df:ea:b6:ae:dc:09:c1:
                    7b:48:e2:39:42:1e:c1:ea:a1:dd:32:63:5e:cd:a1:
                    6e:9a:33:8e:cd:cf:a1:b6:a7:4f:4b:a1:6f:5b:02:
                    d0:fb:19:62:c9:d9:29:0e:d7:1f:ef:24:de:db:fd:
                    a9:f6:be:d3:7c:f8:38:2c:1e:cf:45:4d:1b:df:c7:
                    8f:6a:1f:3a:71:14:2b:b3:ac:f3:13:7f:e8:07:bd:
                    7d:0d:c7:32:0e:e4:db:24:d9:1a:05:50:7d:96:e0:
                    c3:a7:b9:67:3b:a9:35:b2:e0:2c:e8:44:52:59:a2:
                    7b:53:b0:b2:fd:5a:4c:85:9c:69:0a:ea:d2:6a:00:
                    81:b5:df:71:be:d2:8f:52:c0:b4:b3:10:0d:9d:c8:
                    98:7e:9a:1c:1c:d7:15:0b:43:65:60:63:3b:25:fe:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:6C:87:83:FC:51:41:0A:33:33:5A:37:8E:AD:32:9B:D2:5B:EA
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:22:6c:5b:91:f2:ac:f8:26:ba:71:f8:2a:a6:c9:c0:b3:53:
         ea:a8:6b:62:71:cd:86:fb:fe:52:82:fd:27:8d:04:e9:b2:5e:
         3a:d2:fb:25:e7:63:2d:59:ad:55:6a:ad:03:f9:a5:cb:44:e7:
         3e:7b:87:e2:f6:18:37:bf:23:5c:6d:75:0d:04:6a:0e:0b:1c:
         c5:19:01:34:be:f0:cc:b7:45:2d:1d:83:42:b8:56:73:3e:c9:
         93:07:67:01:7a:f3:28:11:e8:7a:c7:18:fc:88:f4:88:1c:21:
         e0:dc:87:db:40:44:cc:ac:ba:5f:28:a8:a4:86:dd:ca:6c:96:
         8d:3b:c2:fc:55:88:3c:38:10:2b:a1:97:84:ef:53:8a:62:13:
         00:b7:9d:ea:34:6b:6f:a8:65:4a:26:be:53:c6:fa:05:6f:e6:
         ee:fd:f3:c0:f7:42:cd:78:39:7d:94:ed:fc:17:77:68:06:71:
         bc:6e:30:b3:48:fc:c1:91:77:e9:23:18:71:29:9a:e1:6d:5f:
         d0:48:04:cc:1a:c1:64:c4:88:2e:97:56:c0:74:e0:c7:26:e9:
         7b:d9:41:78:71:0d:58:7d:d0:c9:bc:2d:70:1a:37:5c:47:09:
         cc:52:3c:cc:63:44:55:d0:74:e1:3c:6b:60:28:51:33:16:4d:
         fc:53:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:34:09 2025 by rpki-client