Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File:                     1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier:          t6BqGZk0zWWpfM4aAQMpV+S1TnDlxr2ETfKQ7PYa0qo=
Subject key identifier:   09:F6:D0:FC:73:95:15:A7:5C:19:8D:C0:AB:DA:18:00:7D:9B:6D:93
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer:       /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number:          014B
Signing time:             Thu 15 May 2025 03:36:33 +0000
Manifest this update:     Thu 15 May 2025 03:36:32 +0000
Manifest next update:     Thu 22 May 2025 03:36:32 +0000
Files and hashes:         1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: 6ttf2QX0U4OUXsmWqQX4PIhW3P2R2bI52J70SP4brj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
        Validity
            Not Before: May 15 03:36:32 2025 GMT
            Not After : May 22 03:36:32 2025 GMT
        Subject: CN=68256140-9988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:f3:2a:79:31:37:a4:0f:7b:96:36:c2:60:
                    a0:76:ec:38:45:10:b9:e5:12:de:0d:70:0e:35:b9:
                    9c:08:96:5c:64:e0:4f:cf:e1:eb:d2:aa:22:d4:d9:
                    1b:4c:30:93:f1:9d:3c:33:9b:2e:6a:9f:e5:29:08:
                    90:e4:24:b8:23:e9:6d:85:05:00:05:1b:7d:07:2e:
                    af:b8:81:b6:a9:ab:e3:9e:73:de:a4:f8:3b:e6:34:
                    f5:06:16:e2:02:e6:6c:60:3c:c9:50:2f:2e:d5:c5:
                    7b:89:97:97:97:a3:08:ef:11:08:b0:04:85:62:e8:
                    3f:4d:ae:ce:89:60:56:93:ab:1e:ed:7e:d9:a6:b1:
                    23:2b:8e:a4:f8:1d:22:5d:6f:ca:07:ee:5b:4b:e0:
                    09:c6:81:9c:a1:5b:c4:d3:12:e9:42:f3:c0:ff:2d:
                    b9:c3:89:f3:3f:ec:b5:7b:7a:cc:a7:ad:a1:ce:07:
                    6c:fc:c3:74:1d:3d:60:5d:c1:0d:c4:d0:90:71:75:
                    9b:a0:05:ed:df:88:c3:2e:c3:92:10:58:6b:d8:4e:
                    f0:57:84:66:16:75:2e:b5:70:ff:d0:ff:dd:01:4f:
                    95:4c:79:ae:d8:00:35:a7:7c:08:bb:12:98:9e:4e:
                    32:db:f5:a6:42:9e:ac:9c:bc:fd:19:2c:ec:df:38:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:D0:FC:73:95:15:A7:5C:19:8D:C0:AB:DA:18:00:7D:9B:6D:93
            X509v3 Authority Key Identifier:
                keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:47:83:2f:dd:42:09:27:ec:63:68:86:34:7f:cf:5e:49:51:
         02:1b:48:74:0d:03:25:f6:54:6b:91:a0:f1:3f:bc:2e:8b:dc:
         ff:b1:4f:ff:d2:8e:bb:5c:96:c9:4c:e3:ca:73:d3:68:71:ef:
         3c:bb:0c:3b:fb:48:5d:79:eb:40:06:7a:10:6b:b1:f6:96:46:
         c6:6c:80:83:15:19:c9:10:5a:8b:11:14:f9:83:db:7c:ff:31:
         16:ed:a9:0b:18:cb:58:dd:51:1c:c5:d1:ff:5e:18:f7:39:4d:
         f4:e2:60:f0:38:f5:06:91:ab:08:ac:63:7a:fd:a0:4b:b7:c2:
         e1:8e:9a:39:89:4f:4c:e6:7f:8a:38:c4:48:c6:0b:af:48:42:
         d6:3d:dd:60:cf:5c:17:65:d2:a8:bd:a5:7a:86:32:9b:a6:40:
         86:06:fc:51:06:7d:f9:07:aa:5e:bf:82:88:d4:11:55:8e:30:
         06:2a:d7:dd:45:79:c3:6f:45:3c:0b:da:32:45:90:98:dd:00:
         15:a8:dc:c3:8a:8d:08:6f:db:23:01:8c:b2:70:5e:68:48:4d:
         fd:1f:42:87:2f:81:0a:02:a7:40:72:07:6a:5f:0e:25:e2:b8:
         4f:39:f1:c3:94:4e:a8:88:0e:a3:34:49:e6:5d:7e:44:08:07:
         39:f8:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:01:04 2025 by rpki-client