Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          /pL3zMFzeSH5e+y8SKXEwJ9k801lKd4Ebi+ObELhdGk=
Subject key identifier:   44:4C:08:97:9B:F5:34:53:25:21:D4:34:12:34:A3:81:32:1F:0D:22
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          50
Signing time:             Tue 13 May 2025 06:30:59 +0000
Manifest this update:     Tue 13 May 2025 06:30:58 +0000
Manifest next update:     Tue 20 May 2025 06:30:58 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: WbTBW2QU0iAcsFJhrXk/4V11GweIyFckxHB4251mwKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: May 13 06:30:58 2025 GMT
            Not After : May 20 06:30:58 2025 GMT
        Subject: CN=6822e722-4e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:62:3b:9f:ff:af:f9:a8:0e:1c:b8:85:ce:
                    1a:11:6c:0e:40:cd:55:7a:33:5f:e6:3b:c2:d1:9f:
                    d7:5d:89:81:6e:e3:5c:1c:d0:ad:b5:a5:1e:90:71:
                    f6:0c:d3:37:d9:7e:3e:d2:e0:09:5b:25:4d:11:4c:
                    2c:ad:14:87:42:cc:b5:57:e0:a5:b7:d0:0b:da:e1:
                    00:77:b0:45:16:df:af:1a:f4:c7:9a:ff:e2:60:9a:
                    d8:ec:28:f9:6c:cc:59:d4:52:dc:96:d6:82:bd:fb:
                    86:c6:4f:37:42:ae:0b:5b:bd:10:ad:89:a5:e8:b6:
                    20:ca:3d:7c:83:a1:68:36:0c:39:91:39:80:17:10:
                    44:d3:66:cc:05:7f:b6:dc:4e:df:a4:e0:9c:ba:08:
                    34:8d:81:3a:a3:26:1e:cd:81:c1:d8:c9:9f:7c:43:
                    47:4b:33:d9:5e:da:e4:98:2a:9e:98:4d:2d:f3:8c:
                    21:cd:ac:0c:5a:80:ff:b5:a8:d1:1e:a7:c0:9e:3b:
                    65:bd:c9:84:32:1b:2e:02:29:56:5d:00:2d:dd:9d:
                    6b:8c:76:50:17:dd:3e:45:f7:5a:b1:6e:a0:3a:f5:
                    56:9c:49:92:55:14:a0:97:f7:f0:97:c9:e4:ae:a8:
                    77:33:8e:31:ee:70:44:bf:75:6d:1e:46:f1:2b:2c:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:08:97:9B:F5:34:53:25:21:D4:34:12:34:A3:81:32:1F:0D:22
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:dd:51:bc:d8:c7:01:af:dc:29:fe:2a:1d:56:87:c3:63:
         bd:b3:c2:cf:b6:40:fc:b2:aa:9b:6e:cf:63:43:02:fa:18:78:
         95:f7:33:dd:cf:cd:3f:b2:fb:8e:bc:e8:81:e3:56:18:2e:b2:
         68:a5:41:64:d1:e9:a5:43:62:b1:0e:35:c7:92:ce:fe:13:4e:
         77:ca:6a:eb:51:1a:8e:b3:cc:c4:e1:00:84:fb:58:d4:fd:e9:
         da:b8:de:79:d9:1a:19:f2:35:25:a3:c6:04:70:81:77:09:60:
         ed:4e:3c:62:76:d6:76:89:47:6e:96:a0:fe:5b:70:4d:4c:7d:
         fc:be:cd:34:3c:01:3e:cb:c5:04:ef:74:9b:1e:66:37:07:ed:
         1b:b3:36:82:84:07:01:c5:b9:9e:79:bb:82:74:73:68:4c:ba:
         57:4b:18:03:45:be:3d:b6:2d:01:b1:e1:c1:90:08:fe:24:9d:
         ac:54:e5:c8:88:10:5e:2c:a2:ae:49:5f:c1:27:43:23:50:28:
         22:b2:8c:c1:a9:40:ac:90:64:70:1b:59:36:7a:09:33:cb:71:
         2a:8f:30:20:84:e1:3c:c1:55:0c:46:5a:8b:b1:55:38:ea:f4:
         61:b8:b1:9d:d1:27:b0:c8:b6:b2:2b:cd:2e:ec:70:70:26:f7:
         98:85:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:57:31 2025 by rpki-client