Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          I4korZ5+oNGq47Mli0vy8BS6rv5vY/LoduP0fiWMQwo=
Subject key identifier:   B6:42:A4:85:02:80:4F:FA:BF:01:A0:37:DC:CC:1D:AA:21:E4:0F:41
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          8B
Signing time:             Tue 13 May 2025 05:42:01 +0000
Manifest this update:     Tue 13 May 2025 05:42:01 +0000
Manifest next update:     Tue 20 May 2025 05:42:01 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: 2+UOOC+A1Yf9mB+lLFJHvpLSSDG8FvEqbHaLSWpVfhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: May 13 05:42:01 2025 GMT
            Not After : May 20 05:42:01 2025 GMT
        Subject: CN=6822dba9-58f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:f4:63:1f:11:30:31:e7:2e:8f:30:e9:b5:
                    33:b8:a5:4d:2c:4c:b4:92:7d:a3:c3:3f:92:8a:74:
                    e5:df:e1:86:ea:af:45:90:a0:54:fe:7a:a6:76:81:
                    92:12:49:0d:cf:c0:56:3c:b8:2c:a2:4f:0d:85:92:
                    60:32:26:b2:fb:c3:ee:0c:76:57:cb:20:aa:34:42:
                    d3:67:bd:a7:6f:0e:53:63:36:40:d8:2f:b7:e5:fd:
                    67:37:c9:64:bf:00:c2:b9:d4:59:07:80:bd:47:3a:
                    c9:95:83:28:04:ff:eb:5e:57:0c:5d:73:03:d5:6c:
                    e0:b7:b2:2e:9a:d6:ee:73:73:14:ac:a2:03:d1:d3:
                    aa:d0:1f:c8:20:b4:80:9b:67:95:4b:63:27:f1:7d:
                    d4:ff:69:6a:f2:66:83:78:a0:8f:65:ff:88:62:a9:
                    de:aa:fd:05:cb:31:50:27:1d:ed:2c:26:cf:df:9d:
                    0d:6d:d7:9d:2e:78:d0:71:0c:21:6d:a6:c2:9b:de:
                    50:8c:e5:91:74:72:87:d1:e6:ad:7b:de:3e:91:67:
                    93:44:df:ec:4c:49:dd:69:e5:ae:1c:07:11:5a:ab:
                    25:19:ae:43:68:43:0b:f7:5d:00:1c:22:7f:99:a6:
                    32:96:20:8b:bc:1c:6e:d4:d5:82:1d:92:c3:f2:ca:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:42:A4:85:02:80:4F:FA:BF:01:A0:37:DC:CC:1D:AA:21:E4:0F:41
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:92:9f:b4:a8:91:96:ca:c3:cb:6d:6c:3b:59:2e:35:2d:77:
         dd:05:da:b0:8b:13:7f:d8:57:96:f6:a1:eb:50:e6:09:61:81:
         be:e5:e7:0b:24:a3:b4:4b:24:5a:37:ce:62:64:b3:c2:89:07:
         a2:af:c5:d6:0e:fc:44:7f:95:ed:8d:7a:8b:9d:31:1b:38:83:
         e4:de:f4:29:d6:82:14:84:08:a1:15:6e:e7:bc:0c:cc:b4:df:
         dd:b6:36:98:de:77:a6:ef:fb:d0:9e:9c:ab:b9:d5:25:6d:49:
         04:71:27:66:ad:f1:68:f3:3c:2a:c5:13:5c:fb:47:03:ce:06:
         72:81:41:9d:c5:9c:52:50:62:f1:68:a0:dc:f1:e5:03:bd:50:
         08:f2:9e:d7:5c:c5:29:47:bc:cb:09:e6:d8:48:d3:80:3c:92:
         8c:b3:33:d3:59:c0:a9:79:7d:56:be:9b:8b:aa:64:04:a7:ae:
         ef:ed:5c:63:f2:be:cf:99:8f:2a:ce:77:53:51:83:78:93:96:
         60:53:79:3a:ae:44:5d:45:a1:dd:1e:59:b4:82:8c:f3:07:b8:
         06:52:cd:66:c0:5d:0b:95:1e:bc:fa:c0:f2:8c:d6:e2:6f:b3:
         ee:4e:9c:26:76:fc:1f:d5:3b:99:fb:72:fb:31:c6:d8:5d:f0:
         76:f2:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:18:44 2025 by rpki-client