Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          dbN7qC1Pf811cbxU3Q3Lywb527wy8FVRAe80fM6YGcE=
Subject key identifier:   9E:CF:40:5C:6C:B1:08:96:5A:08:18:7C:D1:70:F6:4E:F1:9B:E0:41
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          039B
Signing time:             Fri 25 Apr 2025 00:34:22 +0000
Manifest this update:     Fri 25 Apr 2025 00:34:22 +0000
Manifest next update:     Fri 02 May 2025 00:34:22 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: LFwetMiewj2fWbelJ0S8fNZAoiXIJoQ1/YQ0J7B0FtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Apr 25 00:34:22 2025 GMT
            Not After : May  2 00:34:22 2025 GMT
        Subject: CN=680ad88e-0522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:49:10:45:27:d2:fd:ca:1d:8a:76:7c:1d:
                    ca:8b:e6:3b:e0:2e:c8:9c:8e:67:b4:89:d2:b0:56:
                    15:ba:d7:63:da:db:c9:71:cb:94:6f:13:ec:77:e0:
                    d1:9f:e4:73:6e:02:ec:49:61:b8:31:ae:7d:43:64:
                    0b:2f:26:94:e0:88:55:f8:00:26:c8:dd:30:e0:d5:
                    d3:10:da:94:08:81:62:e7:3a:7e:b7:ef:d3:56:92:
                    50:03:c5:0c:a8:8d:7d:8e:06:00:f4:37:c9:db:71:
                    56:0c:fe:b3:6d:2c:c5:89:fb:04:69:e1:0c:97:c7:
                    b5:2e:76:79:35:a4:42:0b:03:64:f8:ef:87:de:fa:
                    7b:8c:5d:79:31:82:3f:83:a4:5a:fc:57:5b:43:a6:
                    f9:a7:46:a5:a1:b3:34:bd:22:e7:c0:ab:89:d1:21:
                    99:3b:d4:60:4f:7f:0f:63:7e:0e:70:d0:6e:08:0f:
                    3c:f9:8c:60:2d:99:78:44:05:74:f4:3a:bd:6d:e7:
                    8a:36:de:b6:50:32:b1:1f:f7:38:63:57:b4:3e:d2:
                    87:46:34:8d:6c:8b:2d:15:75:1b:e5:68:99:cd:76:
                    33:26:e4:cb:41:b4:b0:10:a0:bd:00:1b:99:b3:b8:
                    d4:9a:6e:3f:08:3d:ca:19:78:b1:38:64:f8:c3:45:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:40:5C:6C:B1:08:96:5A:08:18:7C:D1:70:F6:4E:F1:9B:E0:41
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:06:e0:88:ff:18:11:38:57:0a:85:f0:e8:3d:65:ff:f0:
         5c:74:45:41:e7:b5:bd:90:f5:c9:c1:99:49:2b:6d:48:30:33:
         ae:d7:67:03:87:89:3b:57:08:34:ed:ae:93:5a:c5:21:f0:7a:
         12:a1:2e:61:33:87:c2:0b:20:6a:b5:65:28:d4:c8:93:cc:7b:
         d6:ed:e6:6a:c9:56:7b:66:2b:3d:53:9e:73:a1:31:93:81:50:
         42:cd:87:1a:15:b4:c9:5b:2b:57:0d:b4:7d:fd:93:16:fd:4f:
         fb:34:39:e8:19:a7:8a:ed:e0:2b:b9:3d:b0:c4:c0:c8:14:32:
         d0:82:2f:42:78:36:df:9f:98:31:4a:27:b0:18:e6:e0:e8:3c:
         e0:c9:27:a6:19:27:cc:62:09:df:ee:29:ce:9a:a8:20:5f:16:
         c1:36:fa:15:f5:58:dc:61:2e:96:45:8a:63:97:10:6d:a3:6d:
         e4:8b:9a:40:b6:fb:c1:96:3b:04:06:1c:3b:4d:1f:4e:e7:fb:
         b5:bd:db:ef:58:6b:b2:28:db:e2:53:90:ee:36:b7:74:d0:23:
         f0:f7:a0:2f:05:29:f7:5d:51:46:0c:b4:80:f9:ee:7d:0c:eb:
         a2:7f:cc:37:e5:ea:86:7b:3e:ae:87:41:67:49:a7:0f:5b:76:
         31:ed:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:48 2025 by rpki-client