Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
File:                     ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json)
Hash identifier:          9RfTT0Vv/B5VIrtWvAZsggJB8bBskNk+7TG1e6B1Cco=
Subject key identifier:   9E:BF:72:DA:F1:7A:03:8A:77:C8:DA:C1:E4:EA:AE:50:C2:D8:13:FA
Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90
Certificate issuer:       /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
Certificate serial:       0A14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
Manifest number:          114C
Signing time:             Sat 28 Jun 2025 19:29:48 +0000
Manifest this update:     Sat 28 Jun 2025 19:29:47 +0000
Manifest next update:     Sat 05 Jul 2025 19:29:47 +0000
Files and hashes:         1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: JYaP8h2Y4NiEAyxja7GHL8degQZKe/zHw3/r9uzg6L4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
        Validity
            Not Before: Jun 28 19:29:47 2025 GMT
            Not After : Jul  5 19:29:47 2025 GMT
        Subject: CN=686042ac-165a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:c1:d5:a3:b9:a8:1e:60:df:2f:23:34:1b:
                    56:b2:95:76:16:87:f7:e1:f1:5d:a2:ed:b7:00:9f:
                    a4:e0:b6:03:7e:df:8d:aa:99:93:36:1c:86:46:2e:
                    bd:a2:17:c9:9d:2f:85:3c:40:b4:7f:21:d0:7b:cb:
                    06:38:da:e1:35:6c:67:9f:14:5c:cd:e6:72:2e:65:
                    5c:40:41:47:f8:eb:24:dc:d3:bd:8c:2c:b7:bf:a5:
                    dd:63:fe:f0:e4:14:7e:ba:c7:07:66:e9:f5:2d:26:
                    13:0e:a2:27:d6:d1:da:3c:a8:b1:6a:14:8c:a8:fc:
                    69:20:c3:da:2c:6b:3c:da:1d:44:ec:1c:9c:d2:f3:
                    d5:63:03:61:8c:36:ce:62:e1:3c:1d:66:6b:b0:be:
                    27:02:b3:1d:66:79:6d:61:1c:f7:04:7b:ca:3c:5a:
                    1f:74:05:90:ec:40:5a:f2:26:8b:42:12:a8:f9:ec:
                    82:56:ff:50:f0:44:76:2a:d7:c4:08:19:8d:36:56:
                    f0:bb:c6:50:e9:40:ee:62:9f:fd:c0:45:5e:7d:af:
                    9a:81:8a:cd:5f:62:b0:f2:3d:42:e7:87:7c:08:bf:
                    de:30:5f:c4:78:7c:47:ed:2b:c4:8e:5f:b4:d5:8e:
                    00:5e:b5:cf:a8:07:f0:46:c0:e1:80:3a:31:48:8c:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:72:DA:F1:7A:03:8A:77:C8:DA:C1:E4:EA:AE:50:C2:D8:13:FA
            X509v3 Authority Key Identifier:
                keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:35:71:07:92:28:45:98:87:6c:3a:42:d9:36:ab:5c:35:
         d3:d4:c2:db:85:65:28:77:cd:01:64:5b:c5:3e:7e:96:da:2c:
         d0:55:36:6d:9d:b6:0c:95:7f:18:9c:b3:96:ff:02:b4:d6:30:
         60:d4:a1:03:6b:2a:02:51:06:cf:ce:59:2f:6c:4f:ba:43:88:
         f8:4a:df:69:71:04:b0:02:95:33:42:ad:ba:2f:d7:77:ba:99:
         5c:a2:a1:d2:65:ac:9f:84:1b:61:b1:66:47:41:59:92:b9:a8:
         27:49:0c:73:96:4c:38:c8:b2:83:a9:e1:98:bd:5e:23:92:6a:
         12:e8:b2:4b:0f:37:3c:9b:c1:91:da:8d:84:ee:f4:c0:42:2e:
         df:51:da:62:2f:2c:15:5f:75:5c:6c:2a:1b:94:5e:90:ed:44:
         16:cc:83:c6:6a:d5:ae:54:09:ce:8b:46:19:b4:98:9f:d9:e2:
         a1:bf:86:ac:cd:4b:51:1d:0c:2a:80:03:5d:90:4d:4c:48:12:
         79:a2:46:e0:17:05:7e:3e:58:87:90:f6:e2:78:c5:49:62:17:
         51:3f:d2:3b:16:df:98:f4:17:a7:dc:19:68:d5:2c:30:ae:38:
         91:96:a9:94:d5:2f:66:5c:45:62:b8:c1:da:3f:1f:ec:54:1d:
         6f:73:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:11:10 2025 by rpki-client