Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
File:                     K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json)
Hash identifier:          LlsPXiFY5BQFtGMQHmgALbInHcpEQLh+Zd5crR55XAE=
Subject key identifier:   E3:42:6F:24:9D:09:BB:B0:6E:57:A5:09:B2:CA:22:67:56:DC:6C:AF
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Certificate issuer:       /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
Manifest number:          C8
Signing time:             Thu 15 May 2025 05:07:37 +0000
Manifest this update:     Thu 15 May 2025 05:07:37 +0000
Manifest next update:     Thu 22 May 2025 05:07:37 +0000
Files and hashes:         1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: kVXwaZuCzSy3RwFleM+J4fIlkPVYMa3dTuzmTy/9AZ4=)
                          2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
        Validity
            Not Before: May 15 05:07:37 2025 GMT
            Not After : May 22 05:07:37 2025 GMT
        Subject: CN=68257699-56ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:68:a2:aa:f6:3a:78:ba:5b:8d:03:da:1b:
                    b5:d5:8f:15:9c:fe:71:4d:85:7c:8d:58:81:5e:d0:
                    77:de:e8:f6:1a:67:73:ed:67:97:8b:82:08:d7:c2:
                    4c:fd:37:2b:84:51:8a:55:ef:ae:a8:49:11:9f:f5:
                    26:43:27:85:7d:71:00:af:b7:57:85:86:fc:c3:58:
                    39:e4:08:5a:73:80:bc:e0:59:74:08:34:58:a8:13:
                    b8:61:c4:79:23:64:58:70:bb:9f:e0:31:9d:a8:48:
                    16:1e:d5:71:bb:b7:ef:59:b2:22:2a:0f:a8:3a:be:
                    ba:3b:3f:51:0d:d1:92:8a:91:54:6b:2b:c6:42:cd:
                    c7:35:e6:b1:d7:15:d6:c9:ad:d1:57:a7:fc:ef:a9:
                    c0:85:91:7d:6f:77:aa:41:51:28:76:dd:ad:d2:c3:
                    a2:2d:3a:3d:11:9d:dd:16:9d:7c:21:76:e3:59:ed:
                    2f:ca:8e:c8:3b:33:4d:4c:77:db:0f:a2:eb:4a:64:
                    2d:e8:d3:a8:77:e1:09:07:dd:e2:8c:c8:0c:63:28:
                    eb:f2:39:56:bf:ef:d5:d7:e3:c2:4d:3a:a4:5a:2d:
                    ca:74:00:7f:b9:a9:2e:99:af:c2:79:21:51:d0:c1:
                    36:df:e5:e4:ad:ad:fa:0b:ed:ea:e9:93:54:01:76:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:6F:24:9D:09:BB:B0:6E:57:A5:09:B2:CA:22:67:56:DC:6C:AF
            X509v3 Authority Key Identifier:
                keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:cb:50:15:b1:1e:19:41:45:ae:86:b3:65:37:c1:16:d2:
         38:fa:f3:09:d4:ce:03:84:01:f4:fb:be:59:1d:12:0b:53:a4:
         e6:79:3f:a4:a7:63:61:ab:9d:4b:dc:af:9b:34:17:4d:ba:ad:
         b6:d7:32:ce:4d:7f:7d:b5:ca:62:89:52:52:15:64:6b:d6:1a:
         30:9f:6e:0f:65:77:75:15:0b:85:69:be:90:99:4b:e9:07:3b:
         9c:bb:cf:f1:fb:d7:dc:b4:8b:ce:a0:fa:78:84:9e:38:ef:a1:
         57:81:e4:d8:be:63:a6:2a:72:fb:4c:6c:2e:16:3b:64:e7:c8:
         4d:4e:30:20:99:16:69:f0:02:13:e0:24:ab:d7:12:63:5a:6b:
         3d:3b:5a:c9:5f:2c:41:41:95:b4:1d:c3:c6:ec:f1:2f:03:06:
         78:bb:85:e0:56:4f:a2:be:15:47:57:e8:49:70:68:ef:e7:42:
         31:bb:57:e1:d7:93:aa:4f:e2:be:5a:b7:78:be:ad:59:77:c3:
         29:f4:47:75:fe:a6:df:2e:ec:0a:c7:98:f5:f0:e6:d9:c1:7e:
         03:27:d8:71:ef:b3:5d:0e:e5:15:99:c4:8e:79:06:f6:29:59:
         ad:6e:eb:1d:94:60:2c:73:b9:e5:15:e8:05:ef:a0:b6:82:17:
         5a:9e:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:05:44 2025 by rpki-client