Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          K/YRSDZ75/mybMu6DAL9S8mFncUIQ6scGJQ6td5q6iA=
Subject key identifier:   3F:16:48:DD:70:9F:92:FD:F2:B5:25:53:EA:00:04:6E:1E:D8:50:CD
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          05A7
Signing time:             Fri 25 Apr 2025 00:07:12 +0000
Manifest this update:     Fri 25 Apr 2025 00:07:12 +0000
Manifest next update:     Fri 02 May 2025 00:07:12 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: F5Ze8G1vLXRMgm9PkIX5G32UzOB59gXWURBHpRGZKGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Apr 25 00:07:12 2025 GMT
            Not After : May  2 00:07:12 2025 GMT
        Subject: CN=680ad230-3d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:23:53:86:f9:61:13:a0:8e:93:73:5d:9c:
                    17:79:83:26:d4:d2:6c:6f:de:eb:11:ae:04:58:64:
                    4d:f1:2b:9f:d9:8e:3a:9c:c2:5c:7b:97:63:a0:6b:
                    b9:7a:b0:64:69:35:e7:26:ab:80:d8:86:37:10:79:
                    9b:df:85:49:65:50:ae:d1:fb:fc:fd:18:3a:b9:68:
                    23:84:19:59:20:83:e4:59:71:d6:04:2f:de:e6:61:
                    b0:c1:a8:6c:35:ab:ba:4c:05:a4:52:cb:83:76:4b:
                    f5:fa:e0:a6:be:ca:63:1f:e6:af:c3:b1:91:55:16:
                    29:df:0b:d5:c1:da:31:80:f6:7f:b9:7d:82:44:82:
                    60:da:3f:bd:52:fc:f8:e3:30:92:0c:81:1e:aa:d2:
                    ad:ce:ee:90:25:c7:6c:b3:f4:7c:d8:cc:f8:69:b4:
                    19:aa:56:31:31:a5:66:2d:34:cc:52:9e:75:61:8a:
                    d6:99:e9:7e:7d:74:5a:50:b0:07:d3:66:9b:f8:c9:
                    b9:5d:dc:50:ee:0b:81:91:42:0e:a1:63:c3:e5:2f:
                    56:e6:8a:d6:87:fd:86:20:e0:db:25:61:24:ad:06:
                    20:a3:07:ef:82:79:be:4b:7e:f2:07:c9:d8:f4:79:
                    9b:39:d3:1c:f0:98:c0:b6:98:2d:84:30:c2:71:b8:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:48:DD:70:9F:92:FD:F2:B5:25:53:EA:00:04:6E:1E:D8:50:CD
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:54:14:14:8a:3b:a7:c3:58:6d:93:9e:15:06:be:30:48:
         e3:54:ca:49:36:cd:9e:d8:99:7a:2b:c6:88:5f:97:83:6d:f5:
         21:04:54:0c:34:35:c1:e0:1d:92:b1:40:62:ea:a3:79:68:5e:
         4a:67:a5:a4:05:b2:e1:24:8b:49:49:ea:ab:f7:81:9d:5c:48:
         d5:f2:9f:f3:87:a3:3a:f2:4b:ea:0f:a0:c5:22:c2:18:54:53:
         3e:08:96:b4:6e:46:b3:87:ea:51:59:28:a1:51:35:43:90:5d:
         35:58:42:93:3d:55:dc:49:b7:dd:a4:80:dd:c4:66:76:27:5e:
         cd:4d:3a:9b:90:06:ba:3c:38:a6:2a:af:6b:08:8b:cc:69:01:
         d3:d0:2d:49:09:21:86:6c:f7:88:e1:a8:1d:c2:39:0e:d5:26:
         34:20:16:9a:25:df:74:51:09:3f:0e:55:d9:2c:38:c8:40:50:
         6b:39:bf:3a:30:53:86:0b:2d:0d:ce:a4:86:06:7f:8c:aa:0e:
         8f:af:f9:cd:0e:9e:62:78:98:0f:26:51:f1:15:83:13:7e:30:
         e2:55:09:b2:3d:8b:6c:71:f4:ee:4d:64:b6:0a:6c:31:e5:48:
         6f:f0:99:4f:dd:8d:f5:8c:6c:b7:19:36:10:ec:46:60:cc:e3:
         3c:03:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:55:06 2025 by rpki-client