Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          jQCAS1T2Jt37Kx5jSXs04kLfAKkgJ+pHskl06ceLEIE=
Subject key identifier:   A7:F4:11:66:9A:93:92:56:D7:06:D8:1F:D9:7E:3B:E7:55:80:2F:F8
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0C7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          13EB
Signing time:             Thu 24 Apr 2025 18:11:10 +0000
Manifest this update:     Thu 24 Apr 2025 18:11:10 +0000
Manifest next update:     Thu 01 May 2025 18:11:10 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: Sl+nM3LvT3DEf/VJKi3dc3TvABd2r3DbTY6vAmAgneo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3198 (0xc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Apr 24 18:11:10 2025 GMT
            Not After : May  1 18:11:10 2025 GMT
        Subject: CN=680a7ebe-a371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:5f:03:26:5f:fb:9c:a6:e9:36:1a:94:46:
                    80:5d:62:de:76:f5:08:3e:7c:2b:55:39:24:04:35:
                    27:e5:53:cb:88:65:eb:8f:01:24:64:87:30:f9:78:
                    cf:bf:28:ee:0e:3a:fe:bb:37:e8:a5:49:b6:d2:3f:
                    42:d7:f7:95:4e:5e:b8:f5:1e:0d:c4:a2:9f:eb:5b:
                    22:40:c3:3b:f2:da:52:a9:fe:d6:4b:f4:a1:2b:24:
                    0b:78:04:3a:c5:57:2c:05:1c:1b:b6:72:08:e2:fd:
                    0d:ab:74:a8:58:2e:3c:2d:51:d3:4b:70:79:01:47:
                    1a:e2:25:a3:94:ab:51:50:8a:c1:06:71:a0:5d:86:
                    43:eb:23:84:dd:93:4b:ff:2a:ce:a3:0a:6d:c8:bb:
                    16:11:54:19:77:99:af:16:e0:7b:c8:67:24:b9:6a:
                    3b:12:5a:54:d1:be:cb:86:6f:77:97:3f:5c:61:1e:
                    48:d0:53:18:13:0a:b7:e1:58:f6:d7:1b:5c:b7:f6:
                    90:b5:53:d8:96:f5:ad:c6:1f:5d:97:b1:10:58:21:
                    46:c1:4d:43:42:08:69:bb:80:90:d0:2a:dc:c9:26:
                    0f:dd:65:fc:19:06:0a:4a:66:45:71:7a:21:34:8b:
                    b0:4f:27:83:d2:fd:77:35:4e:90:11:f4:75:5a:40:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:11:66:9A:93:92:56:D7:06:D8:1F:D9:7E:3B:E7:55:80:2F:F8
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:39:f4:d7:17:17:fe:99:a4:91:80:c5:1f:68:66:38:77:
         6a:08:85:e6:c3:67:81:1d:c2:b0:69:c6:7d:d3:7b:fd:f0:9b:
         f8:54:72:7c:6e:fd:d3:e4:b1:16:80:35:dc:b4:25:63:07:fc:
         6f:19:35:4f:b8:2d:f3:a6:18:2c:56:ed:20:48:9e:e4:e3:cb:
         35:03:32:ca:54:dc:e8:fc:2b:6b:29:d3:e1:a4:76:e2:ed:6b:
         ef:18:02:ce:ad:2f:9e:da:fd:90:11:65:77:28:47:2a:c9:c9:
         26:14:25:3c:ec:4b:b6:37:79:a3:9a:7c:a7:1e:cd:5a:f0:97:
         a0:c8:92:f0:d1:de:77:02:22:d1:dd:1f:eb:9d:1a:a5:ce:d3:
         97:12:c9:71:4b:dd:72:d8:0b:9c:e3:46:c5:a5:0c:20:91:81:
         03:66:11:50:2e:1e:3a:d5:1d:53:f0:3b:9d:d1:56:7b:bc:7d:
         b9:ce:90:c3:5c:01:9b:28:e3:1a:fb:2d:e2:e7:1c:fb:90:6f:
         55:1e:63:b4:4d:be:64:a0:ae:35:43:5d:88:19:78:69:8f:91:
         0a:98:13:a9:43:b6:44:90:c8:0f:8c:50:d3:86:5e:26:77:8a:
         04:94:61:a1:27:e8:fd:ce:63:77:b7:87:53:1f:75:a9:b3:2d:
         eb:52:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:52 2025 by rpki-client