Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File:                     Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier:          xTH5ADzLyiusfZ6RSY89EKlcB2H/C5rjiWhPW8ommpU=
Subject key identifier:   89:C9:C9:0B:52:01:25:B2:2F:38:FA:A0:61:26:E1:4C:B2:BB:DB:A3
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer:       /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number:          0561
Signing time:             Sat 10 May 2025 22:58:35 +0000
Manifest this update:     Sat 10 May 2025 22:58:34 +0000
Manifest next update:     Sat 17 May 2025 22:58:34 +0000
Files and hashes:         1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: LhAuJBN2UlW28vQ8vznsZ5/febnDXTcjgga7sBq+0/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
                          rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 22:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
        Validity
            Not Before: May 10 22:58:34 2025 GMT
            Not After : May 17 22:58:34 2025 GMT
        Subject: CN=681fda1b-237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:29:00:24:0e:9c:01:90:61:37:1f:55:b1:
                    66:96:24:e9:0d:7a:2e:fa:11:31:cb:60:47:f5:4a:
                    04:3c:78:64:10:26:47:ba:28:8a:9f:b1:13:bc:ce:
                    8d:0b:56:d2:17:38:e8:70:c9:e1:05:89:51:76:8d:
                    e0:82:11:9e:b2:14:d3:7d:6c:93:ef:f4:d1:8b:79:
                    93:6b:78:9e:8e:0d:20:9f:36:d5:62:f9:d9:e5:02:
                    d6:3c:5d:6c:ef:b6:62:1f:19:fe:bc:03:0c:82:d2:
                    a1:fd:bb:94:5d:7f:b3:30:32:9c:4e:6b:3b:7c:ec:
                    e6:74:22:12:b4:48:e6:d2:6a:e4:45:11:a3:8f:4a:
                    95:4f:f9:72:48:d2:c2:c1:4b:dd:54:16:b6:e4:e3:
                    c4:5b:e9:b2:0c:5d:13:d6:93:d9:6b:de:fe:6b:8f:
                    0d:f0:c1:72:78:49:e1:65:04:35:13:84:3c:c6:50:
                    e2:3e:88:13:dc:c3:c9:ae:82:ff:7d:97:fd:52:db:
                    2c:91:9a:7c:32:ac:0d:ce:d8:d1:8a:70:36:8d:83:
                    bf:ff:d5:fd:16:c1:f4:02:a4:54:d9:2f:12:1f:74:
                    d2:6b:d8:f6:dd:2f:24:aa:38:e3:17:74:b5:a8:57:
                    25:2b:2c:cf:6f:72:09:47:5f:38:69:32:dd:58:32:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:C9:0B:52:01:25:B2:2F:38:FA:A0:61:26:E1:4C:B2:BB:DB:A3
            X509v3 Authority Key Identifier:
                keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:19:47:d7:f8:d6:3d:8e:6c:09:9d:b3:93:9c:77:c8:6a:
         d0:00:a2:fa:5c:c8:d4:ab:fb:41:f9:79:fd:1c:85:d6:7d:6f:
         ec:4c:07:64:52:f6:93:54:52:d2:87:a6:6f:15:e2:2d:3b:59:
         13:5d:73:34:92:7a:4d:75:3c:cf:da:ac:84:33:3d:ef:48:8c:
         09:15:9e:61:16:13:9a:7a:4a:de:24:cc:11:0b:3a:d5:4a:a6:
         9b:c2:4c:82:e0:a0:fe:24:5c:6a:46:65:ba:50:7d:5b:aa:a8:
         9b:71:04:24:8b:a1:be:05:8f:59:58:95:52:0e:aa:57:0d:04:
         ac:03:54:42:73:b3:16:a2:50:bf:a2:f8:f6:5b:8c:7a:7b:09:
         23:c3:a8:36:b3:6e:b9:2b:72:2e:4b:58:a2:73:27:9d:91:a4:
         f6:d8:77:86:63:14:16:c7:cb:bf:44:ac:18:f7:9e:8b:b2:a0:
         c7:51:5e:f8:5d:b8:99:ab:f5:3d:fd:40:b2:18:fd:ff:c9:bf:
         8d:08:48:81:bf:0e:ab:42:93:9f:53:df:f1:e3:83:eb:11:ec:
         15:13:e6:31:92:9a:09:19:6e:ec:2c:b0:d3:ff:68:37:f1:89:
         fa:96:0a:5c:75:7f:f7:3b:1c:da:9a:a2:95:77:d8:81:9a:92:
         40:d6:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:19 2025 by rpki-client