Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
File:                     Lvixd2KxkBov3d7v9lAe45ar24w.mft (raw, json)
Hash identifier:          dUqhLWvrocVdLDCspI75DIOyZKtv8OIgts6nypnqPKI=
Subject key identifier:   8C:2E:7C:13:41:82:A1:B7:7F:A6:DF:84:AE:FE:AB:FA:9D:19:01:BA
Authority key identifier: 2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C
Certificate issuer:       /CN=A912E92E/serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
Certificate serial:       2021
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
Manifest number:          3635
Signing time:             Wed 18 Jun 2025 15:59:09 +0000
Manifest this update:     Wed 18 Jun 2025 15:59:09 +0000
Manifest next update:     Wed 25 Jun 2025 15:59:09 +0000
Files and hashes:         1: Lvixd2KxkBov3d7v9lAe45ar24w.crl (hash: pnQqiaxp1TXERTmPXQC/PKePsjXhxC5Y8kGwpZInq9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl
                          rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 15:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8225 (0x2021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E92E, serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
        Validity
            Not Before: Jun 18 15:59:09 2025 GMT
            Not After : Jun 25 15:59:09 2025 GMT
        Subject: CN=6852e24d-48c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:cb:a1:ed:0e:12:bf:83:3c:b6:0e:d6:f0:
                    05:c0:c0:16:ce:51:9b:26:1c:3e:72:16:c0:12:04:
                    eb:ba:57:11:e9:33:e1:9e:de:c7:17:88:4d:75:cf:
                    17:ad:08:61:1c:2b:ba:eb:02:4c:a6:62:1d:14:ac:
                    aa:6a:61:7b:73:d9:24:fe:ac:74:ac:e3:0a:d4:f6:
                    f7:27:1f:2f:ba:4f:34:e4:db:73:72:41:9d:6b:78:
                    c3:de:32:94:9f:90:2a:1b:40:02:41:ec:a5:04:76:
                    43:13:45:19:83:31:6b:56:b5:a4:44:70:c6:f6:c3:
                    2d:4e:00:79:4c:e0:f5:bc:bc:c2:30:84:cb:df:86:
                    e8:9b:73:8c:e9:2e:cf:ab:fd:6f:dc:05:70:e0:fe:
                    ca:18:d1:00:47:91:79:0a:bd:9e:38:b5:20:d8:66:
                    8d:c3:24:02:ca:cb:a9:05:e9:d9:fe:c3:4c:6a:37:
                    8d:17:c2:61:31:15:07:05:5a:fa:30:96:33:91:b7:
                    85:1d:96:67:74:27:6e:6f:ad:82:84:11:3e:dc:77:
                    a6:db:35:12:eb:3c:d2:97:1f:ef:15:f0:f1:44:5b:
                    d7:3e:16:b2:0b:bb:96:fa:ec:5a:4c:70:a0:f0:eb:
                    c2:21:05:4d:24:e1:3a:a7:0b:2d:9f:fc:62:6a:75:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:7C:13:41:82:A1:B7:7F:A6:DF:84:AE:FE:AB:FA:9D:19:01:BA
            X509v3 Authority Key Identifier:
                keyid:2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:0f:76:28:0d:f4:4a:eb:a6:26:25:87:7c:77:a8:21:74:c4:
         bf:b1:ab:1c:41:69:d8:e4:08:bb:66:8d:69:a3:28:7a:c7:82:
         4c:d3:1e:16:cd:eb:3b:b2:8b:57:0c:e9:09:16:26:65:bc:19:
         a5:e3:3f:ce:9a:fc:1c:b7:bd:e5:b0:92:04:72:a8:a7:42:fb:
         b5:b4:23:db:c1:13:69:4f:a7:ce:36:89:1c:07:19:c2:62:5b:
         aa:9a:4d:9e:8d:5d:e5:48:69:bb:a3:36:d5:e9:48:64:a0:1a:
         62:01:63:29:c8:db:1f:ea:38:8c:33:1a:4e:27:1a:29:d1:0b:
         64:04:34:b5:53:a2:5f:38:c0:47:d9:33:52:77:d0:18:2a:51:
         b0:65:8a:02:82:5a:e7:a0:3e:ad:3d:ad:af:f5:65:36:3e:9a:
         de:d8:87:64:4a:6b:6f:80:8c:ed:e0:2e:9c:83:a5:e9:91:29:
         44:b6:52:14:7e:39:8d:40:fe:7f:9e:bf:d3:ad:cf:c7:f2:1a:
         aa:51:bd:17:c3:87:77:b3:c4:db:4a:da:96:f5:56:bb:ac:bb:
         ab:a7:0d:5c:1e:47:5c:e2:e8:83:f1:73:34:b9:96:64:3f:52:
         09:70:cd:ec:62:10:ec:83:0c:53:16:d4:16:51:07:b5:c8:86:
         79:30:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:30:52 2025 by rpki-client