Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          sXNKCWHfGrf8VdMZiqdpOl8JREJo6pclSfjjv4uSoxU=
Subject key identifier:   27:27:DE:E2:87:88:BD:E3:B7:DB:90:00:7B:16:E2:13:F1:B1:C0:96
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          05C6
Signing time:             Tue 13 May 2025 00:06:57 +0000
Manifest this update:     Tue 13 May 2025 00:06:57 +0000
Manifest next update:     Tue 20 May 2025 00:06:57 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: QP1q2+/8J710wH8/fkX4MVON+6cMuVE9DQSTnpkkhVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: May 13 00:06:57 2025 GMT
            Not After : May 20 00:06:57 2025 GMT
        Subject: CN=68228d21-a404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:be:87:53:a2:c6:73:c9:1c:e4:b8:3b:5e:
                    24:3a:46:5e:81:3f:1e:2a:37:e8:1c:7b:b8:e8:fb:
                    85:1a:cc:53:8c:80:4e:66:7c:77:3e:cd:f2:34:99:
                    d2:0c:3a:f8:39:d6:d6:8d:47:f1:f5:b1:d0:41:ac:
                    e4:87:8b:d4:17:d5:88:72:6e:58:33:4b:68:4d:f2:
                    e3:70:22:6e:26:6e:18:ca:34:d7:1b:ee:67:84:f8:
                    d6:9e:a6:de:17:24:40:c5:8d:1d:f5:7c:e3:ee:51:
                    6e:a6:49:33:79:77:c3:36:33:ea:23:f4:06:98:61:
                    d0:a3:a6:b8:7a:26:98:d7:da:22:d0:af:38:01:3e:
                    ea:19:95:17:30:36:b6:c5:55:f9:88:ce:ea:0a:f5:
                    53:91:57:63:c2:7c:dd:33:bd:21:27:9c:f2:8d:61:
                    43:ef:88:51:cb:86:ee:f6:e6:c7:f5:a2:7b:24:aa:
                    75:38:ca:6d:86:f1:d2:16:1e:51:cd:d5:a5:f1:1d:
                    6f:9b:04:38:0d:a3:3b:6b:17:a2:7b:13:33:91:7c:
                    e4:be:af:39:6c:93:49:51:34:1a:5c:ee:90:40:3d:
                    5f:5a:d1:2a:61:ba:ac:36:32:c5:6a:9e:ad:63:eb:
                    ba:ee:3c:1a:4d:4b:b1:81:e6:19:16:a2:7d:02:46:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:27:DE:E2:87:88:BD:E3:B7:DB:90:00:7B:16:E2:13:F1:B1:C0:96
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:26:0c:3f:af:70:07:ca:71:d8:64:e5:a2:e3:5a:0e:1a:90:
         da:cb:30:94:d3:1c:96:78:b1:72:e5:82:cd:fc:76:e6:36:8f:
         3f:70:2b:36:e4:e6:b5:05:5e:cf:7a:85:64:e1:3f:21:92:f1:
         b3:d9:be:70:48:ef:96:bd:e2:23:f8:f6:30:da:79:56:87:8c:
         f1:5b:e0:28:05:90:98:30:02:ff:f7:05:00:61:e8:df:e7:94:
         9b:49:ff:53:8c:e1:eb:bb:00:9b:81:93:16:94:a2:e9:8f:3d:
         d5:8b:8d:c8:fc:f7:e8:8d:2d:6f:d1:9b:a0:af:d1:f0:a8:82:
         4a:4d:15:b0:df:5f:c2:a5:4d:aa:9d:1b:2b:0e:bd:ce:b1:54:
         5d:4b:71:25:7d:85:56:84:8c:fe:36:b8:bd:cd:7c:ad:60:8a:
         0f:dd:a2:7b:e6:26:29:a2:fa:60:20:87:38:c9:89:eb:00:cd:
         ca:a3:d2:21:ed:95:30:4f:eb:07:65:c0:50:84:4b:75:5a:df:
         2d:25:9a:84:74:80:3f:05:18:23:22:2d:8d:75:bb:af:c2:b4:
         e5:fa:75:ca:06:38:43:86:28:c7:9c:c2:d4:d9:95:12:42:cd:
         aa:d2:3a:e3:71:e4:09:8f:49:6d:6d:8a:76:2e:db:f3:72:f8:
         bf:63:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:17:14 2025 by rpki-client