Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          N0O8t7e3D9k0bp0vPaPH1/+/PEVKBLU1hvs0yFJumGo=
Subject key identifier:   85:FD:A9:F3:E3:3B:63:09:BB:27:A6:2B:91:1B:DC:5E:7A:29:E9:3A
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          A0
Signing time:             Tue 13 May 2025 05:23:56 +0000
Manifest this update:     Tue 13 May 2025 05:23:55 +0000
Manifest next update:     Tue 20 May 2025 05:23:55 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: syd5aKzaKnJsWUKrWjhjwJc/B3g/lUAEuE1xX2XKk7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: May 13 05:23:55 2025 GMT
            Not After : May 20 05:23:55 2025 GMT
        Subject: CN=6822d76c-ad4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:26:8c:3d:e3:6b:07:af:34:f7:7b:d7:a0:
                    54:d9:44:38:a0:ed:61:79:44:d8:05:10:87:b1:1b:
                    fa:a7:f1:ea:14:0c:33:3c:c5:3a:c0:66:6a:2f:9f:
                    39:a0:27:45:06:eb:ac:a8:7f:8a:01:eb:d3:97:df:
                    55:f2:0d:17:48:98:80:8d:60:53:56:79:99:11:d2:
                    8c:7e:b2:af:8b:75:5c:c1:59:91:8a:f0:72:6f:c0:
                    bc:7b:66:70:9c:97:19:13:36:07:55:02:de:9d:00:
                    27:05:93:38:35:a6:6f:f0:98:fe:cd:d5:37:76:a3:
                    91:c4:34:82:42:07:2c:aa:41:70:47:74:3b:d0:b4:
                    9e:cb:03:f2:29:78:a4:3f:80:84:00:09:ff:f0:f4:
                    dc:64:db:71:d2:51:7c:30:05:c2:b1:bf:8f:d1:ba:
                    11:f6:12:fc:e1:04:8f:b8:58:f9:1b:0c:72:06:ad:
                    eb:66:3b:c8:9d:b5:f7:cc:9d:4c:bc:64:64:7e:d7:
                    e2:fd:ad:fb:88:58:8a:75:36:0b:65:45:08:1a:ba:
                    f6:98:99:1a:ae:7d:78:56:00:de:3b:e0:6b:6b:d5:
                    08:1a:c7:f4:a9:1a:00:97:2b:f1:62:f5:37:61:31:
                    dd:79:51:43:8b:39:c0:40:da:34:0e:7b:2e:37:20:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:A9:F3:E3:3B:63:09:BB:27:A6:2B:91:1B:DC:5E:7A:29:E9:3A
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:08:b7:e9:e9:05:b5:e8:80:35:bc:39:28:fd:a7:c1:8c:
         c4:bc:b2:0c:d0:10:68:49:9b:0c:02:fa:88:cb:7f:df:8c:f5:
         42:29:fa:39:0c:03:6e:d1:90:bb:95:0b:f8:60:63:48:82:33:
         18:91:60:a8:47:7c:68:e7:03:25:17:70:16:be:5b:c8:4f:84:
         49:9e:ee:f4:c4:25:ba:30:40:56:30:ad:4b:0b:d9:c4:5b:fa:
         e9:a0:f0:41:fb:22:8b:a7:ac:0e:fe:5d:2d:ed:59:6b:c3:d8:
         0a:d2:41:79:b5:59:1a:56:ad:63:91:b2:f0:13:7c:32:1f:36:
         01:e1:34:c9:9d:f5:dd:79:fd:03:83:4a:fa:5e:9e:e5:5f:cc:
         1d:fc:2b:ea:63:1e:33:62:81:4a:c1:31:28:05:9b:d7:9c:78:
         cd:81:eb:e0:35:da:fd:29:a8:d6:38:5f:83:2c:54:f5:d1:f2:
         34:f4:78:0b:af:29:22:12:4f:9e:0f:ae:0f:89:3c:4f:d9:d0:
         10:ab:44:b9:67:13:df:f6:d4:74:a4:9f:0d:9e:04:eb:b0:f0:
         59:65:88:5e:6a:66:f6:ea:45:74:a6:81:c5:32:56:56:e0:f8:
         9a:89:f6:46:cd:cf:e1:11:87:d1:d1:16:46:bb:ce:63:99:69:
         9d:c7:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:10:32 2025 by rpki-client