Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          pDk1A7zd0W4JJqIYB8VNSmcQBDN5L1FMOg4JMRZCszE=
Subject key identifier:   2C:1B:1A:79:35:C6:33:A4:51:37:5B:F6:40:E8:F2:78:F1:4C:AE:C0
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          59
Signing time:             Fri 25 Apr 2025 06:10:57 +0000
Manifest this update:     Fri 25 Apr 2025 06:10:57 +0000
Manifest next update:     Fri 02 May 2025 06:10:57 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: Y+O0/2ihyZRyU/IoDHgl//GgEf+Gm6iDYYGLOpVjrUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Apr 25 06:10:57 2025 GMT
            Not After : May  2 06:10:57 2025 GMT
        Subject: CN=680b2771-3110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:50:a3:ee:11:1e:cf:68:a7:98:40:4d:6b:
                    88:5f:a9:49:00:60:1b:37:9a:ff:7b:43:37:0d:a0:
                    b3:3b:ec:b8:50:8b:2b:e0:9d:d1:08:86:5d:b5:2b:
                    77:87:2d:01:5a:b9:2a:cd:46:52:7a:8e:bd:5a:e5:
                    e6:56:af:5e:21:01:66:1d:05:6f:1c:68:28:7e:69:
                    b0:a9:b3:62:69:24:29:63:07:2d:1a:fe:eb:a1:27:
                    83:0c:97:3b:a5:c7:bf:21:b3:86:9d:14:fb:71:fb:
                    38:58:18:9d:00:4c:d4:c0:06:e0:c1:47:60:1e:fe:
                    31:44:7c:14:1b:c9:12:a0:f3:64:0c:2d:df:35:84:
                    ac:19:e5:24:a5:96:2a:ac:06:ac:d2:60:b1:3c:b4:
                    06:da:97:83:66:17:db:f0:cd:41:d6:46:15:35:27:
                    b7:71:05:c0:20:1a:57:fc:06:dc:60:ba:b7:f2:ab:
                    f8:3a:28:16:ee:cc:c0:ca:ea:4e:21:92:bb:fd:80:
                    fd:c0:4e:33:d5:d9:9f:8f:1f:a6:91:0c:98:17:75:
                    c6:81:c4:44:4e:0c:34:af:98:c3:dd:8c:12:06:bc:
                    15:60:4c:c5:94:be:85:2f:c5:80:0d:06:cc:c3:c8:
                    0d:05:3c:a9:b7:87:8a:44:2a:09:4c:fe:b5:a7:28:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:1A:79:35:C6:33:A4:51:37:5B:F6:40:E8:F2:78:F1:4C:AE:C0
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:00:6b:e7:9d:d4:6a:9b:b2:42:b2:7f:a4:1c:47:ad:3d:
         81:04:a4:f6:d9:2c:84:68:a5:43:d7:11:bc:a3:a5:a9:ab:fe:
         a1:e2:ad:37:7b:2b:a2:8e:48:97:79:28:d1:41:9b:ca:c7:af:
         38:ea:40:02:84:58:f8:70:d6:39:47:04:0a:dd:05:4d:f5:63:
         b0:ca:b8:9d:39:7e:58:a7:e0:b7:a4:57:ee:1a:4d:b2:e1:4b:
         24:b0:87:61:0b:f3:f6:d9:98:a9:99:00:f3:cd:3a:38:3e:5f:
         42:61:15:4d:2b:4b:5c:4f:ca:4b:1e:c3:42:8e:f3:ac:5e:97:
         05:c7:4d:79:bd:1f:27:1d:54:20:9a:ec:77:85:98:9a:cf:cc:
         79:9e:2e:fc:cb:cf:83:70:d4:56:03:9d:d6:5e:b8:d3:8b:20:
         96:28:6a:ac:b3:e0:d3:de:bb:af:8e:c0:e0:5c:aa:fb:e3:c9:
         37:de:85:54:31:2f:29:18:dc:08:d8:d7:be:33:30:12:33:28:
         ed:d9:4b:7f:4f:74:1e:06:4e:ce:dd:17:cc:ae:36:4f:66:df:
         ed:39:dc:18:aa:74:91:9c:32:46:9c:f9:80:26:94:1c:6b:ac:
         e0:15:b9:a7:78:ca:c6:3d:63:c8:e8:2a:69:90:4e:fc:11:89:
         4b:de:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:57 2025 by rpki-client