Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          d9c2AeJC01VAcJCHjHmu+0N0iblo1UojrbhJwQzhbY0=
Subject key identifier:   54:56:32:A4:94:62:47:86:F3:A3:45:6A:1C:F8:FA:E8:68:6C:00:DE
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1435
Signing time:             Thu 24 Apr 2025 18:45:34 +0000
Manifest this update:     Thu 24 Apr 2025 18:45:33 +0000
Manifest next update:     Thu 01 May 2025 18:45:33 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: wkFmYu8uKB6t2N3tQPRnbfS//tBcvyb2S2eK8i+CIuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Apr 24 18:45:33 2025 GMT
            Not After : May  1 18:45:33 2025 GMT
        Subject: CN=680a86cd-0985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:b2:12:6b:30:84:fc:7d:7f:7d:42:ae:ee:
                    de:38:81:ef:8c:dc:c8:43:af:17:f3:a1:aa:dc:64:
                    c8:aa:5a:81:d6:6f:95:d1:a9:fa:0f:e1:a4:c2:ba:
                    51:02:32:89:b7:7c:23:28:c4:f9:df:c4:72:ce:a1:
                    aa:95:15:32:ef:96:87:b7:77:a6:8f:3d:2b:a4:83:
                    ce:dd:bf:77:d5:7c:4a:45:4d:48:d9:4a:5c:37:3c:
                    e9:c6:ea:f6:65:20:f7:01:08:80:9c:b4:30:79:93:
                    33:83:95:08:03:7a:ed:ad:4c:cf:26:d1:04:4b:d5:
                    80:6f:1c:7f:5a:a5:d7:da:f6:30:7f:79:60:bd:4b:
                    90:c3:ea:8c:c2:9b:b7:b4:bb:4e:da:09:05:ee:d3:
                    82:e8:dc:87:44:9f:87:97:82:57:e7:5b:a0:ca:f2:
                    80:bf:f2:4c:08:ab:7f:13:29:fb:44:8e:7b:14:2b:
                    33:f5:6c:19:b0:5b:f1:ac:bd:bc:fb:ee:c1:1f:ae:
                    8e:1e:bc:d3:7c:83:c1:a3:0b:83:3b:26:5a:e6:32:
                    2f:d0:24:65:69:8d:f3:04:a6:ec:95:b9:e2:27:af:
                    3b:1e:fe:a9:b1:d0:a8:df:ee:45:42:51:da:c1:9a:
                    d8:38:36:7f:ff:6a:7d:cf:d6:e2:87:7e:f6:18:e6:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:56:32:A4:94:62:47:86:F3:A3:45:6A:1C:F8:FA:E8:68:6C:00:DE
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:00:2f:74:b8:5f:58:f0:3b:8c:14:3f:7d:d8:27:43:21:
         1f:fd:76:f3:73:07:7c:02:47:5c:9f:be:17:8d:10:42:a7:bd:
         4e:a2:ee:f6:2b:5b:76:73:64:07:c9:97:4c:5e:3f:db:81:43:
         d4:36:70:e3:7f:f3:b8:83:e0:4c:67:85:54:c4:90:9d:b3:f3:
         56:34:25:24:e8:b3:9c:3f:0f:a9:0f:b2:b9:bf:d4:62:86:b8:
         0e:09:31:ff:83:75:69:55:aa:25:13:dc:53:29:7b:6b:e7:83:
         4d:5f:94:98:1b:27:ec:ce:a9:d1:95:7f:d4:7b:f0:45:b2:f2:
         9c:f0:ae:48:d5:dc:ac:e3:d0:98:73:63:19:e1:a0:d8:eb:26:
         e5:6b:53:87:3e:55:b0:88:06:81:ca:62:c1:03:3a:29:34:50:
         65:2f:e1:81:bf:d6:c9:98:7c:14:37:b9:30:f5:ee:d0:2e:01:
         8b:df:34:e4:37:5a:03:2d:de:7d:77:d8:83:2c:04:22:c6:88:
         0f:af:5a:a8:93:85:31:89:38:bd:00:0c:6a:2c:78:cd:4e:14:
         a9:24:c9:13:ed:3f:9e:ab:63:7d:3d:eb:4c:4a:0e:9e:82:a0:
         a5:dc:37:1a:c7:ef:9f:af:a7:f8:8e:38:f3:b1:df:b7:57:f5:
         de:90:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:46:35 2025 by rpki-client