Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
File:                     r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json)
Hash identifier:          Jbq8tVzYbjUe/e+Qe0OrNWmWB5NReaGd+ELV7CRn2y0=
Subject key identifier:   19:F6:11:97:68:B3:C2:BD:E0:B2:27:82:96:61:42:B8:1B:D7:91:62
Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1
Certificate issuer:       /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
Manifest number:          7F
Signing time:             Sat 17 May 2025 06:10:47 +0000
Manifest this update:     Sat 17 May 2025 06:10:47 +0000
Manifest next update:     Sat 24 May 2025 06:10:47 +0000
Files and hashes:         1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: gDLCdRSVup/oCUcbTBsnxrHay0lJoETc9inLLf2FChk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl
                          rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 06:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E22, serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
        Validity
            Not Before: May 17 06:10:47 2025 GMT
            Not After : May 24 06:10:47 2025 GMT
        Subject: CN=68282867-ec3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:30:13:06:d9:35:e4:4c:c8:26:cd:d8:c3:
                    a3:9b:26:42:b9:64:20:e2:37:29:2e:d4:88:91:b7:
                    98:6c:43:67:60:ef:38:73:4d:72:df:60:65:90:51:
                    40:78:31:4a:81:93:44:2b:1f:e7:ed:61:3e:44:73:
                    90:43:1a:a5:b0:2f:f6:30:e5:c3:b6:15:38:64:0e:
                    6a:78:b1:63:5d:4b:f3:a7:66:1e:dc:4f:94:ab:ca:
                    9f:ef:49:29:f2:80:e7:0d:e1:86:d0:bc:a5:82:fe:
                    df:7d:93:bf:ef:bc:fd:c4:65:58:b3:32:bf:06:48:
                    26:b6:be:b3:f6:5e:fb:07:bb:9a:fd:71:04:37:d4:
                    af:72:d6:03:91:a4:37:24:a4:a4:c4:43:7c:08:b1:
                    0c:9d:67:84:75:55:d8:b8:84:cb:d1:c6:1d:03:24:
                    23:f8:46:a6:f0:9f:86:87:b5:78:32:f4:57:9d:25:
                    d7:9f:4f:cd:df:d9:34:04:9c:dd:ff:db:b5:07:f5:
                    bb:3c:f7:5b:50:7f:98:30:69:3a:d0:2e:77:f5:57:
                    9f:93:be:88:80:49:e0:a3:f3:63:a3:d6:78:0b:65:
                    76:00:2c:bc:09:04:dd:f1:87:14:b4:9d:8b:0c:11:
                    0f:2e:3e:d8:5a:18:ff:a4:40:73:f0:15:7d:20:dc:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:11:97:68:B3:C2:BD:E0:B2:27:82:96:61:42:B8:1B:D7:91:62
            X509v3 Authority Key Identifier:
                keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:36:c4:8c:92:6b:ae:ed:d0:27:a7:d0:08:65:c7:83:bb:f8:
         d3:f9:20:2e:8a:b3:e9:dc:f3:a6:e7:6b:e1:ff:7c:fa:73:b4:
         4d:18:36:5d:f4:c0:e2:d0:3d:16:4d:76:98:6d:4b:37:5c:ad:
         8e:1f:d7:e1:50:94:bb:b4:15:44:78:c9:7a:f5:b3:48:08:77:
         b9:0a:23:d2:eb:c1:c0:3a:55:a6:c0:09:15:74:68:e8:97:fc:
         98:e9:7b:23:06:92:28:47:a4:97:0b:c1:c8:8b:e7:86:0c:77:
         2c:8a:e7:52:37:08:f6:9a:e5:f6:75:21:19:58:c5:05:88:e2:
         4c:59:a5:8c:c2:02:82:a7:12:0c:73:53:ad:04:9f:3d:0a:66:
         fd:86:79:32:d8:60:f6:d9:d8:e5:7d:2d:f0:76:78:64:01:78:
         c2:b9:84:25:04:d0:4a:f5:44:30:52:29:9d:17:38:7b:aa:43:
         05:a8:84:7a:b1:3f:bf:49:59:ce:26:37:f2:56:c0:ec:04:07:
         d8:c7:c4:e8:a1:e7:5d:0c:bf:35:19:1a:dd:5e:ab:c8:43:83:
         d4:2c:e7:cf:7e:09:4a:1e:5c:97:dd:2a:2d:13:26:2f:30:80:
         51:df:87:a9:cc:88:7f:9e:9c:66:b3:ff:82:8d:c4:6d:39:3f:
         f3:8e:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:52:55 2025 by rpki-client