Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
File:                     sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json)
Hash identifier:          VjuWaprTOlxApME+9SV7eGvBc5hQzgjBEza9C9sVSfc=
Subject key identifier:   64:CC:CE:8B:31:AE:A6:2D:03:0D:33:B1:41:B1:9C:3C:5A:00:6F:40
Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD
Certificate issuer:       /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
Manifest number:          0106
Signing time:             Sat 17 May 2025 04:37:18 +0000
Manifest this update:     Sat 17 May 2025 04:37:18 +0000
Manifest next update:     Sat 24 May 2025 04:37:18 +0000
Files and hashes:         1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: sPLUMVfsgrEJiCnayjOZ6cKWL1P+mDq6Iu4ZD1QR/Ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl
                          rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 04:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
        Validity
            Not Before: May 17 04:37:18 2025 GMT
            Not After : May 24 04:37:18 2025 GMT
        Subject: CN=6828127e-0720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:d5:3e:15:c7:91:9f:fa:2a:a6:31:eb:b0:
                    a5:dc:6c:00:a1:7b:c4:ed:37:07:f3:f9:d7:4c:e0:
                    5b:2c:84:75:df:0a:fe:9a:8d:b9:dc:01:5b:6f:fa:
                    f9:15:95:7d:a0:22:c6:2a:d9:65:a3:a4:ff:2d:1d:
                    66:bc:1b:c5:36:e3:44:02:9b:59:59:15:59:27:ba:
                    af:73:3f:66:c4:42:38:e4:0d:4c:c3:5c:93:ae:64:
                    b5:97:87:dd:cb:b4:58:f1:ed:e6:d8:a6:61:1c:68:
                    2e:84:84:8b:5c:40:77:59:a1:0c:fb:be:3f:cf:df:
                    82:fc:64:31:82:ea:af:19:66:66:13:c4:60:a9:53:
                    e0:8b:f3:17:eb:1d:b5:5d:34:24:4a:bb:2c:27:1b:
                    e3:67:68:2b:3a:7b:08:5f:31:88:da:43:10:17:68:
                    f0:6f:b6:60:00:6f:ce:4b:4b:f5:7b:4f:e5:e9:f9:
                    12:32:fd:90:fd:48:8a:42:76:20:51:2c:ae:aa:92:
                    06:38:70:e5:b7:ba:50:dd:4f:fe:e3:22:a3:5f:a5:
                    cd:b7:21:2b:08:6e:4e:58:59:fe:ad:9b:8f:7b:52:
                    92:9e:78:fe:93:b7:31:ec:f1:a0:09:ae:79:44:45:
                    ea:00:95:46:04:28:d8:85:ff:a3:f7:ba:d0:98:51:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:CE:8B:31:AE:A6:2D:03:0D:33:B1:41:B1:9C:3C:5A:00:6F:40
            X509v3 Authority Key Identifier:
                keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:09:96:09:1c:fc:6c:ef:3b:0a:cc:f0:45:f1:df:3c:ad:58:
         2f:70:b9:db:c3:a0:6c:ed:c7:42:05:c5:92:e1:a0:b2:f0:ab:
         60:7a:4e:73:71:a4:77:14:ed:f3:0c:71:10:59:d4:75:f6:95:
         a8:03:5b:ee:d7:63:9c:61:eb:3e:5b:7e:47:57:29:30:f2:aa:
         18:e0:d8:ff:91:6f:8f:4d:72:73:a1:92:22:93:7d:e3:c4:84:
         ba:9f:52:6e:36:b8:2b:b9:d2:21:aa:2a:0e:69:3e:d0:6b:39:
         79:86:49:b8:c2:84:ac:d5:57:da:8e:a8:d3:f3:9e:92:1b:88:
         73:04:b7:13:90:f6:60:ef:cd:bf:a7:2a:c8:c4:b6:b2:8b:28:
         f4:11:38:c5:46:97:11:a6:3c:31:03:db:6f:89:ba:e3:26:1d:
         d2:24:de:0e:95:d5:70:0c:f1:d9:16:c3:c0:ba:f5:86:2e:dc:
         44:44:8e:8d:ab:52:90:07:01:a1:22:4c:c7:df:73:ff:c8:9e:
         9d:c0:34:4b:d8:5b:73:36:c6:85:11:42:0b:0b:85:26:d4:14:
         60:0c:56:f9:e3:a8:f5:09:79:d9:81:52:98:da:eb:7d:a7:7c:
         68:83:8a:8b:7c:4c:17:54:3b:17:f3:c5:44:f3:41:aa:bf:af:
         3d:14:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:11:37 2025 by rpki-client