Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          APNCNVU4eGBmtSqS+3e4F1P+uodAW3Z+HPKY7j5g1BQ=
Subject key identifier:   BF:F3:97:24:FC:CB:31:82:1B:DD:81:B1:99:6A:C2:8F:CE:49:7A:81
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       0647
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          0646
Signing time:             Wed 14 May 2025 14:48:04 +0000
Manifest this update:     Wed 14 May 2025 14:48:04 +0000
Manifest next update:     Wed 21 May 2025 14:48:04 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: 1zZuf7kiK9d/lE9PH5cwziJKHkVKHHZOvlmkqpjojK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 14:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: May 14 14:48:04 2025 GMT
            Not After : May 21 14:48:04 2025 GMT
        Subject: CN=6824ad24-bca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:66:c2:9e:00:45:3d:0c:88:64:ce:23:41:
                    ed:a1:42:cf:2f:6c:b0:9e:4f:0b:48:2d:ef:c7:04:
                    82:4e:fc:62:5f:f2:c1:65:ea:5c:93:42:6f:78:4d:
                    13:bf:55:a9:93:09:49:9f:df:40:aa:48:5f:25:59:
                    b5:77:f9:13:12:91:60:72:28:0b:67:ca:21:fd:db:
                    c6:a5:46:b0:4a:77:3f:cd:9e:93:e1:b5:63:23:da:
                    b8:51:c1:4a:8d:3c:46:b3:a7:12:f5:b2:64:75:d1:
                    9f:91:08:fe:b7:6c:4e:25:51:18:17:cc:3a:65:89:
                    31:17:fe:13:22:7d:c0:0d:fd:34:b0:db:0e:2f:7c:
                    7f:f4:2f:d5:3c:17:00:68:23:51:a2:fd:e3:8a:47:
                    7a:cf:b3:15:b6:22:95:3d:8f:93:24:a8:4c:56:87:
                    c8:1a:cf:bb:bc:80:ca:b3:df:ac:27:e3:14:ea:04:
                    85:a6:a6:48:18:90:71:42:78:33:d8:d9:0f:2b:90:
                    56:e2:b4:da:22:50:37:a0:1b:1d:2d:0c:38:a4:4e:
                    8a:31:90:c1:16:47:38:bf:61:6e:08:34:1e:5e:da:
                    71:d8:9c:67:d3:53:b4:27:6d:2f:99:d2:b9:40:01:
                    25:31:ef:a4:ea:1d:79:d3:54:80:6d:89:05:0b:f1:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:97:24:FC:CB:31:82:1B:DD:81:B1:99:6A:C2:8F:CE:49:7A:81
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:03:02:d6:c2:0f:60:d7:fd:15:8c:32:96:44:d5:93:cd:f4:
         5e:5b:66:a6:ce:d8:96:54:c1:17:7b:0f:f9:66:88:90:77:c0:
         74:91:aa:6a:f5:af:2c:72:d8:3d:dc:57:a5:2c:fd:5f:8f:4c:
         b1:6c:54:85:c9:b2:28:9a:55:f4:73:e1:f5:78:f1:b4:b7:4b:
         3a:1d:c4:d9:ff:eb:39:e4:7f:bb:b0:6a:bd:f3:ed:07:af:2f:
         0d:15:62:93:8f:d1:67:27:9d:fa:5d:7c:71:48:d8:ac:29:c4:
         da:69:15:b1:64:b0:d1:b9:7c:0b:28:7f:89:3e:52:69:d4:66:
         12:d4:92:0a:93:5b:46:27:72:a8:cc:51:72:ce:36:08:d3:1a:
         18:d1:58:62:4f:55:2d:8e:2b:c4:3b:62:87:93:d7:de:d5:a1:
         f4:76:c0:03:23:b8:3d:0d:a4:81:c2:9c:fe:c2:50:3f:28:40:
         26:13:14:4b:c3:6c:2f:2c:7a:24:d6:0b:14:13:c9:41:97:72:
         60:63:dd:f0:56:1c:38:68:af:33:b3:38:d7:0d:38:34:dc:2b:
         ed:37:2b:4b:28:22:0b:3e:64:96:d4:aa:e4:80:d4:f0:b3:b8:
         6c:23:cd:e5:f4:8e:5a:63:d2:03:c0:62:9f:df:7f:72:44:af:
         c9:0a:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:27:56 2025 by rpki-client