Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier:          6dni9H6xwQ6FB08hD7ws2fRAoIPjfiAiY3jwTogz03A=
Subject key identifier:   C0:C7:ED:AF:9A:FE:34:DF:D8:B5:94:A3:FD:6D:1F:48:85:90:0E:99
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number:          48
Signing time:             Tue 13 May 2025 06:40:23 +0000
Manifest this update:     Tue 13 May 2025 06:40:22 +0000
Manifest next update:     Tue 20 May 2025 06:40:22 +0000
Files and hashes:         1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: g3YfS+ZnH9z/sKTBUADUAs56Ze1fst4FU/HbqKPCGTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: May 13 06:40:22 2025 GMT
            Not After : May 20 06:40:22 2025 GMT
        Subject: CN=6822e956-3513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5a:3f:d6:27:5c:5f:fb:96:ea:95:bb:3c:c7:
                    8e:d4:0e:d2:7b:09:1e:71:4d:da:3e:d5:f7:34:ff:
                    65:4e:5a:f3:4d:31:78:d0:0d:2b:71:9a:3d:c1:26:
                    70:7a:38:01:99:b4:77:96:02:07:01:43:21:e9:3c:
                    61:8c:27:29:dd:d7:e1:7f:d5:4b:2c:2a:6e:6f:48:
                    5d:82:2a:2d:54:96:70:e5:05:c0:8e:03:29:72:95:
                    6f:8b:1e:d0:0e:92:ca:07:03:a6:3f:2e:89:75:e0:
                    67:5b:2f:fc:bc:80:e2:35:e5:4a:de:de:c3:76:6e:
                    65:70:10:b1:b9:99:74:d1:fb:24:aa:01:ee:ff:cb:
                    0c:8d:da:73:0d:5f:50:3e:5c:21:5b:b2:89:c7:0a:
                    75:7b:e0:92:84:1a:80:ba:ec:93:bb:c7:20:c6:a7:
                    b3:30:ae:39:aa:dd:8d:ed:a4:b0:70:7e:90:70:6b:
                    15:13:9d:50:4e:d4:02:5f:59:56:79:64:84:25:2c:
                    1c:d1:46:9d:6b:fd:1a:54:5b:fe:59:c6:ed:79:0e:
                    d2:4b:c4:c1:48:e4:ee:e3:9a:70:cc:f3:3c:46:6f:
                    55:a0:89:cd:df:32:30:6c:ce:b5:c1:06:b1:c2:af:
                    84:f0:fa:ea:98:a7:38:ba:75:75:d8:73:d8:02:7d:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C7:ED:AF:9A:FE:34:DF:D8:B5:94:A3:FD:6D:1F:48:85:90:0E:99
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:37:6a:0d:85:36:05:f2:31:c8:cb:59:a1:ed:bc:4e:4c:0b:
         23:ec:a0:86:b0:94:fc:d5:1d:47:6c:d5:18:02:f9:27:c9:67:
         61:41:2b:d5:f8:46:ac:13:d8:73:50:47:80:19:b5:b9:01:75:
         1a:7d:73:13:9f:db:e6:84:5b:20:4d:89:2c:8e:02:38:84:b9:
         74:e6:74:a0:94:bd:25:fa:e2:5e:da:a2:74:1f:e3:7a:5f:1c:
         79:cb:d7:8e:d1:66:91:6f:1c:c0:9c:52:80:ad:26:06:24:4c:
         58:4b:b8:76:08:b3:fc:1f:10:0f:a9:db:4b:57:1c:a2:46:15:
         50:2d:cb:93:dd:69:43:cc:15:2d:f7:68:6c:57:7b:62:9e:78:
         f9:c9:ca:d7:ee:d4:75:31:c9:d0:48:02:20:00:6c:64:e3:68:
         66:73:89:a7:cb:19:dc:82:8d:cf:c9:11:c8:ba:f4:47:f6:7a:
         c5:20:72:98:c3:5d:84:74:91:e6:4d:9f:d3:96:91:34:06:f8:
         95:00:fc:0c:ca:a9:1c:07:4e:10:8b:74:15:3b:54:f5:80:d4:
         f4:d6:5d:88:8c:12:4c:c1:4c:35:c4:b1:1b:9e:4c:2c:52:2e:
         49:11:40:27:dc:32:32:b0:cd:b8:4a:60:6c:7f:58:ed:ba:44:
         b4:3a:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:36:26 2025 by rpki-client