Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
File:                     IhKO6LQdoZG8pEiIxhUzENZmp78.mft (raw, json)
Hash identifier:          Jp9abnuYL5j0H1GTjR9SBnOqnK8j6kqmQ3Lp3CrpK7M=
Subject key identifier:   CD:F6:C0:EA:D9:CD:BA:7A:E0:53:DD:28:84:4B:68:41:55:61:E9:86
Authority key identifier: 22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF
Certificate issuer:       /CN=A9135F03/serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
Certificate serial:       0715
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
Manifest number:          0715
Signing time:             Wed 02 Jul 2025 22:08:07 +0000
Manifest this update:     Wed 02 Jul 2025 22:08:07 +0000
Manifest next update:     Wed 09 Jul 2025 22:08:07 +0000
Files and hashes:         1: IhKO6LQdoZG8pEiIxhUzENZmp78.crl (hash: NfSZV2K+qol/Ghl9mzoSl0304MmK79GjEwn10Eg+vtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl
                          rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F03, serialNumber=22128EE8B41DA191BCA44888C6153310D666A7BF
        Validity
            Not Before: Jul  2 22:08:07 2025 GMT
            Not After : Jul  9 22:08:07 2025 GMT
        Subject: CN=6865adc7-7ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:a7:07:09:55:36:6f:ee:35:d6:74:20:e3:
                    29:c1:91:f2:49:f2:ba:93:93:a8:80:53:ae:a2:06:
                    4e:ed:7c:86:c2:4a:b4:32:c8:bf:97:2f:3f:f5:1b:
                    15:8b:19:ee:38:38:a6:bb:31:f0:01:b9:42:bd:e2:
                    ae:04:c0:93:3b:51:c4:66:21:4b:b7:cd:62:bb:90:
                    27:01:46:05:a4:81:7a:26:f0:5c:a5:57:8b:a0:ad:
                    58:e6:ae:b0:33:0f:aa:4d:cf:d5:0b:ba:a4:0c:8e:
                    76:e7:cb:05:e9:a0:d7:99:56:31:8f:7b:0e:17:8c:
                    e9:1a:7b:f6:8e:dc:11:7f:be:07:97:d3:bc:3b:51:
                    5b:85:cd:c1:cf:16:de:ba:83:44:41:4c:fc:36:97:
                    e5:b3:65:70:d6:80:34:91:ed:d8:8e:35:dc:34:cc:
                    b0:c5:66:21:62:2c:a7:a7:8b:2a:29:1f:68:5b:bc:
                    7b:21:27:27:aa:d7:51:09:7f:f6:81:d7:cd:87:d1:
                    de:fc:3e:a9:da:f8:e1:7d:1c:05:95:01:81:e2:f4:
                    54:63:c8:46:06:81:b2:e4:89:4b:fd:22:b2:1e:51:
                    83:3b:b3:0f:82:fa:80:e9:7e:bb:84:41:81:ce:96:
                    cc:c5:f0:1e:ce:e9:59:b3:95:45:61:5d:2a:92:69:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:C0:EA:D9:CD:BA:7A:E0:53:DD:28:84:4B:68:41:55:61:E9:86
            X509v3 Authority Key Identifier:
                keyid:22:12:8E:E8:B4:1D:A1:91:BC:A4:48:88:C6:15:33:10:D6:66:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IhKO6LQdoZG8pEiIxhUzENZmp78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F03/1BFC00EE3FE011EB8743180DC4F9AE02/IhKO6LQdoZG8pEiIxhUzENZmp78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:f0:df:05:1f:d3:25:b5:33:d7:cb:34:a5:b0:55:ee:8a:
         f3:ae:28:4f:9a:55:95:e5:62:b0:10:a8:04:82:0e:29:3a:be:
         85:db:fd:bb:d8:22:d5:61:ee:a3:65:aa:59:76:52:eb:1c:3f:
         79:c5:73:9f:f3:75:64:d1:2a:08:2e:b3:a5:24:bf:c4:21:58:
         0b:8c:b2:3d:42:9a:92:2c:bb:c1:69:c1:92:6f:7e:98:cf:88:
         2f:33:53:a1:55:ff:d0:a0:23:d5:49:25:52:42:32:66:c2:04:
         ef:7e:6b:66:51:b0:a5:d4:2e:94:70:f1:7d:88:aa:b7:63:c2:
         0b:f6:7e:95:07:f6:e9:9d:e6:03:7a:d2:46:71:a7:3b:c6:97:
         ea:41:84:ff:b8:14:8f:ab:78:26:ee:55:bc:76:9c:20:eb:17:
         b6:f3:25:43:1f:46:53:73:00:38:fd:cd:db:19:7e:53:a3:a9:
         52:91:93:2d:6d:1a:e3:84:f0:cd:77:54:b7:fd:1b:9a:43:46:
         9a:db:04:76:c0:6e:eb:fa:81:3f:f2:bf:c7:dd:24:2d:9b:f6:
         1a:50:94:76:ce:f8:06:86:62:92:bf:24:17:49:60:86:cc:65:
         22:92:0d:6a:77:f4:aa:40:86:9c:e0:c0:c5:ad:91:23:a9:19:
         a7:d5:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:22:22 2025 by rpki-client