Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          dhK9LeT2LMEhVPLtAzUEBatxREnr0PLS0QOONIR3mgk=
Subject key identifier:   C0:DF:D3:F9:A2:75:15:A2:AD:31:5F:9E:D2:E7:60:C3:66:1C:C9:2C
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0C9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          1425
Signing time:             Fri 20 Jun 2025 18:09:28 +0000
Manifest this update:     Fri 20 Jun 2025 18:09:27 +0000
Manifest next update:     Fri 27 Jun 2025 18:09:27 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: I5aKoDWCqfkk+q3C6T5yd1KNqXGwu/sHlPOefc6eDFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 18:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3227 (0xc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Jun 20 18:09:27 2025 GMT
            Not After : Jun 27 18:09:27 2025 GMT
        Subject: CN=6855a3d7-a63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:8c:5b:e0:ca:6d:13:17:57:42:51:7f:ec:
                    ea:b8:8f:c3:b4:eb:56:27:b7:6e:92:72:91:b9:0e:
                    75:07:2d:a6:c4:1b:46:ba:f8:89:14:a6:64:ca:d0:
                    b5:7e:02:d8:1e:e2:f4:f3:30:f0:be:71:7b:a3:88:
                    65:86:36:25:19:9a:10:a6:96:17:65:a9:18:45:bf:
                    62:17:a8:76:66:24:8e:22:df:21:e1:95:f4:8f:8f:
                    ab:46:c7:cb:ce:92:1f:d3:3e:30:4f:74:2b:5f:e1:
                    79:cf:9e:8e:43:26:62:09:bd:fc:b8:8f:ed:34:30:
                    31:30:92:11:ea:ae:74:a5:9e:c3:d8:76:0f:41:b5:
                    ed:ed:15:83:d9:2e:25:9b:6f:61:48:60:f2:bb:e6:
                    1f:06:71:00:a0:c8:05:48:56:c9:73:cd:09:37:1e:
                    75:e8:d4:3f:b5:e2:06:f9:4e:fd:1f:e2:12:89:83:
                    c9:41:ed:2d:c3:25:0b:24:31:75:1d:c0:32:b6:f9:
                    e3:e6:b0:90:b0:ba:9b:65:de:28:fb:99:44:0e:dc:
                    9e:11:08:b4:1b:3e:b3:20:c6:de:1d:5b:6e:78:e1:
                    d2:4a:d6:28:d0:60:c3:96:f0:27:b5:1d:88:15:5d:
                    63:2f:38:6a:67:f0:3c:3d:9c:3b:25:63:43:31:d7:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:D3:F9:A2:75:15:A2:AD:31:5F:9E:D2:E7:60:C3:66:1C:C9:2C
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:48:15:63:c8:6b:da:76:82:59:f2:8c:7b:53:1d:87:40:89:
         89:3d:2f:bf:18:e3:f7:e9:ee:78:e0:e8:15:96:82:96:b1:8c:
         34:fd:1e:44:67:48:6a:e9:f0:e0:52:ee:d5:bd:85:6b:54:1c:
         74:01:99:bb:06:59:2a:fb:0b:38:66:78:63:8b:b2:37:c9:3a:
         1e:17:23:d9:21:d6:13:c2:da:79:ba:b5:4c:ed:00:93:5a:11:
         6b:82:83:b2:ad:d4:4f:68:23:d6:0e:4e:58:83:70:38:0a:75:
         61:15:2d:70:cb:8c:8d:3d:a7:51:d3:d1:d8:90:1d:81:73:3f:
         15:68:41:5d:6c:51:f5:fe:46:bc:da:68:88:b4:1d:66:2b:c4:
         9a:26:c2:09:de:c1:8a:45:21:10:6f:59:34:ff:54:b7:92:1b:
         03:aa:8e:eb:fe:e6:c6:7c:5e:7b:32:97:5c:f7:c8:8b:a0:c2:
         cf:b9:62:77:a7:d0:8a:71:6b:8c:1f:1f:79:8a:95:3f:b4:93:
         5b:42:d9:fb:a5:73:41:16:be:d8:93:c0:5b:72:34:09:c3:66:
         96:2c:34:72:c8:8f:56:20:27:ab:19:9f:5e:f4:ee:d8:37:4b:
         ec:39:2d:67:1c:da:21:2f:d9:de:42:99:8f:18:9b:9b:58:63:
         0e:38:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:50:18 2025 by rpki-client