Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File:                     6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier:          E6yOYHrmMzazdYaMhn8iduqVkpOSBZGRJGLrbujEhKA=
Subject key identifier:   B6:2E:6E:BE:FF:8D:E9:54:52:76:CA:0A:FB:7F:A0:34:DE:E8:F5:B3
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number:          0272
Signing time:             Sun 11 May 2025 01:14:07 +0000
Manifest this update:     Sun 11 May 2025 01:14:06 +0000
Manifest next update:     Sun 18 May 2025 01:14:06 +0000
Files and hashes:         1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: Jt17kcm6Ifd6D9w5yxzp0y7h3RR5SwL2betAtzi1C/A=)
                          2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
                          rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
        Validity
            Not Before: May 11 01:14:06 2025 GMT
            Not After : May 18 01:14:06 2025 GMT
        Subject: CN=681ff9df-a478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:52:8e:2b:cb:d9:a2:33:4d:8b:cb:e5:a0:
                    1a:5d:23:22:e1:54:5b:08:c6:f8:d1:0c:53:47:79:
                    0c:93:da:c0:af:8e:e0:ed:1f:f9:94:1a:3d:06:93:
                    e8:05:ee:17:2a:8a:66:a6:22:7b:dc:80:94:6a:63:
                    44:79:97:d8:7f:77:ba:27:f2:ad:f3:cb:82:82:39:
                    83:29:78:24:86:3c:8b:3f:26:6b:83:36:cf:c9:cf:
                    44:cd:e0:ca:db:5a:d2:79:d2:4d:ce:8e:02:e0:0b:
                    a6:23:ba:48:92:74:23:2b:e8:96:c7:22:0d:f6:a1:
                    42:44:c1:11:92:77:e1:93:62:fb:01:8c:5c:bf:cf:
                    4d:b9:94:a1:51:78:a7:a4:33:96:be:2a:f4:b5:b9:
                    27:b6:58:9c:25:64:93:9d:6d:96:c2:93:12:6b:ef:
                    5e:84:bb:9d:1b:0c:99:8d:cb:73:b1:60:cb:1d:a9:
                    95:dd:bd:bd:26:73:58:86:d2:51:f1:a3:bd:38:82:
                    a6:02:5a:e4:6f:ef:5d:f3:8f:4c:9b:5e:11:b5:4c:
                    16:56:64:ef:b9:9a:62:ac:08:31:be:36:53:e3:d8:
                    c7:3c:0c:49:24:0e:8d:21:f9:94:81:ec:91:42:bc:
                    7e:7c:70:ff:0a:e2:71:2e:b4:7a:b7:39:28:21:f0:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:6E:BE:FF:8D:E9:54:52:76:CA:0A:FB:7F:A0:34:DE:E8:F5:B3
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:30:75:c6:0d:75:9f:c9:b7:60:05:56:24:ad:1c:6b:5d:
         1c:52:a2:9b:ae:c0:b5:40:af:4d:f9:83:f1:10:8a:95:b1:f4:
         f1:7f:b4:b5:8a:f9:4d:a5:e7:fc:46:75:7a:06:7c:b0:82:3f:
         9c:98:b5:5e:46:f0:80:96:6e:ac:a2:57:6c:28:1b:f9:40:46:
         e8:0d:f1:54:4e:77:d0:88:c1:7a:81:16:02:3c:34:ce:02:47:
         91:76:d4:89:00:aa:fe:5c:91:28:2c:84:97:d5:78:58:7f:18:
         2f:a2:51:13:7f:e7:46:44:c6:d9:6c:1c:15:b0:50:c7:16:db:
         eb:d7:f8:9d:30:19:15:43:2b:1e:c2:a3:29:d9:34:e0:5a:05:
         51:d0:65:5c:d5:b2:b4:ed:da:b1:65:07:99:1f:25:10:cb:44:
         48:43:14:1a:4a:96:4d:b8:f1:3e:62:44:ef:63:e3:40:54:26:
         f1:6f:86:f9:ae:0c:ea:30:66:04:0b:c6:41:63:1d:77:15:be:
         6c:95:05:23:ee:a3:2d:b8:17:41:df:bf:31:dc:26:66:74:57:
         13:64:4a:de:b4:27:50:a6:79:e7:9a:61:93:32:ab:c5:74:a6:
         f5:07:7c:3b:c6:81:cf:2a:0f:39:fe:ea:f3:b2:f6:41:75:b3:
         54:75:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:27:48 2025 by rpki-client