Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          vS0v+YcRHou9TogC7mmDRqzBuXeMYzVRoIN8CrYSHYI=
Subject key identifier:   23:C7:B9:72:24:53:F1:11:84:A9:17:9A:AE:FB:DC:EC:F7:0F:C4:57
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0440
Signing time:             Wed 30 Apr 2025 23:49:01 +0000
Manifest this update:     Wed 30 Apr 2025 23:49:00 +0000
Manifest next update:     Wed 07 May 2025 23:49:00 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: J8G1d+nZEYpI+fFIrlmD3LwH2OI0j3lx6DFqs368kYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 May 2025 23:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: Apr 30 23:49:00 2025 GMT
            Not After : May  7 23:49:00 2025 GMT
        Subject: CN=6812b6ec-877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:cf:4b:54:d4:32:f1:79:b3:e7:d7:f1:0c:
                    25:02:36:c3:a7:c8:21:c6:80:13:73:31:fa:b7:e7:
                    dd:6b:6c:47:38:03:7b:6d:dd:b0:26:d8:ce:81:9a:
                    6d:94:de:48:77:50:62:c7:2f:c5:2a:68:35:19:ec:
                    31:6c:04:73:b6:64:4c:9e:d2:e0:02:bd:22:f9:7a:
                    b5:a8:9b:8f:f3:67:40:28:9f:bb:7e:65:5b:1f:1c:
                    d7:84:0e:bd:33:1c:c3:fa:76:3c:ef:da:8a:01:78:
                    06:1f:96:81:27:63:94:26:bc:4b:0d:b6:d8:15:09:
                    25:7a:50:f9:a2:d7:d6:be:9e:1c:07:53:1e:fd:9d:
                    4f:af:a0:0c:23:5c:d5:8e:8e:21:5b:d1:1b:79:ec:
                    d4:96:60:1f:d2:6c:54:0a:c4:84:d9:a5:46:a6:17:
                    7f:5b:3c:a1:39:d1:ce:d3:a1:94:b9:71:4e:f6:46:
                    c1:2e:5e:20:c9:26:d9:73:8d:36:7e:fa:eb:c0:89:
                    4b:65:e3:8f:a0:5f:76:e7:6b:60:ac:b3:08:9a:3e:
                    44:8d:4c:2f:58:54:a1:1d:6f:4d:e2:22:06:27:f3:
                    71:13:3d:62:0f:17:72:d2:51:5b:9b:ff:c1:91:2f:
                    03:2d:44:43:45:26:42:14:7e:6e:af:ec:be:90:0a:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:B9:72:24:53:F1:11:84:A9:17:9A:AE:FB:DC:EC:F7:0F:C4:57
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:37:bc:95:7d:84:ce:25:4e:a2:65:ee:36:30:2e:00:8f:
         7d:14:31:b4:a3:58:ab:87:48:67:d8:fe:a1:96:7f:94:ab:0a:
         e5:ea:4f:d0:d7:c2:3e:fa:20:74:33:14:17:6d:b3:ec:a1:70:
         10:7c:d1:99:83:6c:75:f9:93:af:48:17:5f:7b:6d:dc:82:68:
         2d:59:08:23:e1:c4:68:68:56:4e:12:5a:b5:2f:7c:5d:8c:45:
         43:bb:7c:8e:79:17:b2:39:82:32:a6:3d:e7:73:fa:c4:22:19:
         97:fc:2c:dc:7e:c2:32:0b:80:2f:9a:1d:c1:7c:21:1d:b0:29:
         e0:a0:04:c2:67:17:ec:56:08:2b:d2:77:a6:5e:ea:c2:ed:92:
         74:3c:e6:74:1b:2d:87:58:df:a2:cd:54:a7:87:ef:ff:b9:5e:
         0e:f1:44:69:0d:e8:c4:3d:93:84:f3:10:f8:0b:de:2b:3a:1c:
         ff:7b:34:75:ef:19:e8:c5:12:cb:62:30:66:a9:e1:6d:35:21:
         d0:5a:5a:13:2f:d9:3a:f1:33:4d:05:12:fe:11:74:1c:a3:76:
         a9:c3:4c:6d:6a:4a:32:32:d6:68:37:0f:03:49:53:a7:7d:bd:
         d4:3a:3f:83:9f:30:f9:5f:dc:d1:1b:27:b4:9d:02:ba:d2:91:
         92:ce:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:58:43 2025 by rpki-client