Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
File:                     Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json)
Hash identifier:          shqtKRB4tv31NEATN+6+4iv78Lxj61ErW0B0lp1lc/Y=
Subject key identifier:   06:97:0F:77:F4:29:3C:2B:2E:37:87:F9:CE:87:7E:B0:D4:B0:19:21
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
Manifest number:          1B
Signing time:             Fri 13 Jun 2025 06:48:44 +0000
Manifest this update:     Fri 13 Jun 2025 06:48:43 +0000
Manifest next update:     Fri 20 Jun 2025 06:48:43 +0000
Files and hashes:         1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: II1kNm93WyQxVQeojnNDpQYUQQW0410eAlilD3p2/oE=)
                          2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Jun 13 06:48:43 2025 GMT
            Not After : Jun 20 06:48:43 2025 GMT
        Subject: CN=684bc9cc-4940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:cd:9b:48:ad:6f:1e:62:9c:a5:d3:dc:ec:
                    0f:f0:c2:ce:9c:e6:00:84:41:af:87:8c:4b:87:08:
                    e0:c6:f3:ee:b4:cd:83:ae:1c:3d:69:0c:08:05:2f:
                    3c:27:d9:a6:13:04:2d:47:19:3b:d4:59:fb:02:ee:
                    11:75:38:ff:d1:4a:9e:ff:45:6f:fa:4a:33:1a:53:
                    f5:0b:24:fd:f4:8d:ae:a6:88:8c:0c:89:55:c6:f7:
                    bf:94:76:b6:38:87:da:c2:91:b4:e2:2e:be:d0:33:
                    27:f7:c5:5f:c0:a9:c3:a4:ba:eb:ad:1f:de:0d:96:
                    6c:fb:30:74:7e:4f:0b:5e:60:90:66:e6:21:88:8e:
                    84:38:c4:50:cb:41:33:88:8c:94:fa:23:b0:bd:a2:
                    6f:09:be:33:4a:df:9d:7d:82:e2:87:5e:33:7c:c8:
                    a2:55:45:a3:e6:da:0b:f4:42:b3:63:28:fe:dc:e7:
                    77:d6:b2:22:14:a6:b0:ea:73:3c:76:1c:28:52:cc:
                    7f:ce:8a:48:fe:ad:e5:1f:0d:17:4b:dd:fd:eb:48:
                    35:8c:d2:68:79:45:98:16:d9:b1:fd:fb:7d:61:5d:
                    72:9e:90:9a:a1:ee:44:d6:84:c5:fe:8c:dc:5d:13:
                    93:37:d5:01:99:39:bc:e4:ae:c8:b7:e4:c5:21:e0:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:0F:77:F4:29:3C:2B:2E:37:87:F9:CE:87:7E:B0:D4:B0:19:21
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:6f:6c:79:88:0c:60:8f:fa:6d:65:32:d8:25:35:19:6d:
         30:fb:26:f7:a2:1a:83:d7:5a:eb:28:c0:de:75:7e:2f:f1:0b:
         ec:54:c0:e5:b3:46:79:9a:95:ed:20:49:d7:84:a1:cd:f3:e0:
         ad:d3:ee:d1:a9:a3:7f:7a:ea:31:32:13:48:20:8e:ba:52:2c:
         e3:f4:e5:27:80:84:6b:26:33:5c:c2:9c:0b:3f:fa:05:b1:6b:
         55:e4:d4:49:d6:0d:b0:b9:16:87:07:ec:c4:da:c3:84:8f:26:
         b3:c5:11:ce:04:a5:70:43:e8:b0:9b:97:dc:1e:b8:1d:76:fa:
         93:82:3a:37:b2:12:9e:cd:ce:d1:6d:ce:84:14:a8:b8:13:cf:
         ea:c1:19:e7:5c:ea:eb:a3:ab:25:86:11:b0:2d:9b:b5:d3:3e:
         41:81:b5:5d:f6:a8:09:59:a0:bb:4f:92:d0:b8:db:27:d8:9b:
         b5:cb:5e:d9:ef:b3:d0:72:a9:fb:00:ce:89:6b:63:01:d2:2b:
         dd:c2:ba:88:47:65:d8:34:9f:cd:fb:4c:c9:aa:38:a7:70:11:
         43:85:fb:b6:7d:59:b8:d9:04:e2:67:6f:52:a2:b4:b2:07:3b:
         44:5f:14:59:39:16:b3:df:fc:7c:8d:e7:45:f5:c8:df:99:97:
         6e:48:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:41 2025 by rpki-client