Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
File:                     67mxD9JPdAljNjwtk1eAidsN5_U.mft (raw, json)
Hash identifier:          uDPzHMNNGu+D+Mkwa9lXooH/PYluK65pjWAdupIXCXs=
Subject key identifier:   EA:45:F4:68:CE:9E:9F:80:BA:A2:41:EC:29:96:9D:A1:EC:8E:5D:38
Authority key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Certificate issuer:       /CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
Manifest number:          85
Signing time:             Sun 11 May 2025 05:20:09 +0000
Manifest this update:     Sun 11 May 2025 05:20:08 +0000
Manifest next update:     Sun 18 May 2025 05:20:08 +0000
Files and hashes:         1: 67mxD9JPdAljNjwtk1eAidsN5_U.crl (hash: kPd2YHakmAqa5Lk+lp4J3QGYl8P/LIQnr9MsiPuKnMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
        Validity
            Not Before: May 11 05:20:08 2025 GMT
            Not After : May 18 05:20:08 2025 GMT
        Subject: CN=68203389-1a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:9a:dc:fd:5d:ac:54:b9:3a:a7:d1:7a:86:
                    12:10:27:d0:34:65:9a:74:c9:5e:e0:1c:bf:2c:22:
                    36:9a:25:be:29:ca:a3:50:40:70:0d:ba:6b:50:de:
                    9f:9a:f5:38:ec:16:69:27:ef:9d:d3:83:67:1d:00:
                    d5:3f:ef:e4:f6:74:24:7d:79:e7:87:c7:45:83:25:
                    ca:93:69:b7:89:79:d1:d7:db:fd:54:46:e0:f1:22:
                    4a:13:a9:60:f9:eb:50:54:00:6f:b1:b3:d3:71:e4:
                    e9:7d:90:2e:5a:52:51:7a:e1:ef:92:ea:33:2c:a6:
                    96:51:28:7f:57:4b:7c:4a:49:25:f1:ff:57:54:fc:
                    27:a0:37:43:ea:84:85:10:df:90:27:ae:19:75:06:
                    2a:41:51:d0:b7:25:c5:1a:63:15:71:fe:2c:fc:1a:
                    46:01:48:a5:77:d4:80:65:05:bd:c5:1f:3d:46:02:
                    a1:03:b6:92:09:6d:1b:2e:c7:e1:3e:f8:1a:e2:95:
                    d2:23:20:10:a4:99:ab:51:cd:fc:f9:3a:53:3f:d3:
                    5f:02:90:8f:69:37:f8:31:f9:27:05:6f:25:5b:de:
                    99:df:12:59:a6:5a:65:9c:a6:1e:07:42:18:57:eb:
                    55:78:54:13:0f:e3:f9:47:e6:9a:29:3f:69:10:86:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:45:F4:68:CE:9E:9F:80:BA:A2:41:EC:29:96:9D:A1:EC:8E:5D:38
            X509v3 Authority Key Identifier:
                keyid:EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:59:29:82:c9:8a:8d:bd:3e:2a:e7:cc:b8:f6:63:7f:a7:a1:
         9b:19:77:46:da:42:8d:43:2d:92:19:5f:6f:c6:6d:ed:8c:ea:
         44:ea:54:4a:ef:e7:0c:d1:0d:c0:e5:bc:a8:3e:79:5e:d1:23:
         76:55:2d:5c:82:77:fe:e1:02:77:7e:43:fc:59:b7:79:15:f0:
         fb:f4:44:70:69:b6:23:7d:7c:c6:99:45:36:19:4e:1c:44:55:
         4b:5d:e3:38:02:21:f2:10:2e:fd:22:5b:2c:3a:36:fd:4b:fa:
         ba:e0:2f:3b:c8:41:e2:90:e9:a3:2d:00:c8:8e:c8:93:aa:3f:
         4f:be:ac:5b:57:2d:93:ac:70:4e:fe:92:7e:85:75:ca:88:32:
         25:26:62:4d:08:50:51:a9:e0:db:6b:4c:80:b0:bb:8a:53:eb:
         da:a4:d6:0a:a0:d2:10:10:c2:51:bf:95:39:8b:72:32:4e:06:
         8e:0c:d5:cc:bc:96:fe:4a:38:4d:48:ca:0a:85:f7:2d:0e:8e:
         fe:10:dc:f4:7a:82:08:c1:a6:49:7d:ed:0e:2e:2e:39:a5:e6:
         30:88:ef:ef:73:e4:79:6f:e2:3a:42:b6:82:c1:83:b6:ae:53:
         16:f1:a3:eb:31:5b:e7:b8:b5:71:9b:77:a4:70:7c:69:4a:28:
         63:f6:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:47:53 2025 by rpki-client