Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
File:                     tMuMrEr2jfxZVs5gy7DYDTECkYw.mft (raw, json)
Hash identifier:          2gLi8IWJwtIx5vZ8vDvauNnVcoDGpoZ9ZoF0vSY7T40=
Subject key identifier:   F9:B2:89:51:44:08:F9:0D:19:A5:72:95:F3:A9:FC:0A:19:DF:AE:80
Authority key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C
Certificate issuer:       /CN=A9110477/serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
Manifest number:          26
Signing time:             Fri 25 Apr 2025 06:45:34 +0000
Manifest this update:     Fri 25 Apr 2025 06:45:34 +0000
Manifest next update:     Fri 02 May 2025 06:45:34 +0000
Files and hashes:         1: tMuMrEr2jfxZVs5gy7DYDTECkYw.crl (hash: r3naglB4O1EGwQ08sAhyoVhXJf7qY/GO5T7m5rVUON0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
        Validity
            Not Before: Apr 25 06:45:34 2025 GMT
            Not After : May  2 06:45:34 2025 GMT
        Subject: CN=680b2f8e-0ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:51:ce:c9:c0:94:e0:20:0f:fe:f8:03:9a:
                    c9:28:8f:5a:f4:e8:ac:4f:1d:15:e3:9f:be:55:73:
                    89:1a:b2:22:91:bd:3a:a0:38:ac:5c:5f:5b:a6:a6:
                    2f:1c:5a:ff:81:16:7f:e8:12:ad:08:00:b8:44:13:
                    80:42:06:68:ac:4f:c8:61:79:9f:e7:00:e6:b9:73:
                    59:92:53:72:f4:7c:dd:9b:99:bc:1b:4b:e9:27:f5:
                    3d:4f:e3:7a:ea:81:fa:77:4e:b0:1a:3a:e0:2d:2a:
                    a0:a0:31:06:bb:69:78:b6:41:63:1e:2c:1c:f9:45:
                    5e:4a:71:0c:46:7b:4e:90:78:ab:9d:29:5f:65:c2:
                    90:79:d4:e9:79:34:ac:68:f9:4f:e3:96:6c:31:98:
                    50:1b:f0:4f:56:76:ad:07:fb:6d:03:7f:77:1f:0e:
                    2b:2e:63:6d:75:a3:f9:8b:8f:09:dd:16:96:2a:6a:
                    c0:f8:95:43:9c:2f:e2:db:f0:1e:5f:70:b9:e3:e4:
                    8e:2d:aa:a4:99:2e:c0:ec:55:6f:75:37:5c:e5:67:
                    05:1f:1e:e8:1f:83:bc:4e:d0:b1:3d:7c:14:76:f2:
                    61:68:f5:67:d0:4b:27:b2:9f:3d:bf:f8:1f:79:f0:
                    83:9f:7e:43:5d:b6:1f:bd:56:eb:d6:a5:3f:04:b9:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:89:51:44:08:F9:0D:19:A5:72:95:F3:A9:FC:0A:19:DF:AE:80
            X509v3 Authority Key Identifier:
                keyid:B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:1e:79:a2:e7:4f:72:81:34:20:67:df:0a:e0:14:47:41:
         f0:8c:bb:71:35:10:ec:19:7c:47:78:68:c4:13:dd:1e:ea:27:
         35:37:06:20:96:57:e5:6f:4f:63:93:d3:ff:e5:16:35:6b:f4:
         b7:8e:9d:fb:93:6b:f2:8c:e6:82:56:86:82:30:7b:36:30:81:
         4b:e3:a1:1f:9e:39:a3:a9:e6:ec:84:17:30:ee:ff:dc:91:58:
         11:88:e7:6a:6d:4d:6a:60:11:60:d3:9c:9b:41:39:46:e8:2a:
         1d:8b:dd:d9:db:c2:31:66:5d:6a:eb:37:27:01:cf:c8:c9:a6:
         55:be:3e:d9:ee:a6:ea:51:11:6e:a6:1f:12:86:23:a9:e1:ca:
         10:88:d4:f1:7e:d6:e8:2b:f3:b2:e1:60:80:48:ce:f4:da:f5:
         bf:70:af:b2:27:2a:ac:d2:d0:9e:60:2b:c3:f1:cf:a3:22:79:
         a6:86:b8:e0:7c:ed:d8:f3:05:80:d4:84:39:84:09:d9:e9:22:
         f6:5e:3e:92:8a:98:99:a5:27:f9:3e:3f:c3:d4:43:67:6f:c7:
         b4:53:4c:ba:5b:77:27:81:ca:c8:aa:36:b9:ca:70:50:3c:82:
         0c:c2:18:3a:df:f0:be:1c:38:66:34:a6:d0:08:68:50:9c:aa:
         0b:50:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:07 2025 by rpki-client