Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File:                     ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier:          PVIrOFxqQo1xvc7hVPq91QkB7AGqkb0bTsiP2i+tnk0=
Subject key identifier:   A6:71:9F:4D:83:EA:A1:89:3B:DE:D6:7C:EF:57:DB:13:0E:B1:14:5E
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer:       /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial:       34A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number:          34A6
Signing time:             Wed 06 Aug 2025 14:53:19 +0000
Manifest this update:     Wed 06 Aug 2025 14:53:18 +0000
Manifest next update:     Wed 13 Aug 2025 14:53:18 +0000
Files and hashes:         1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: cJWzlHn0e/+mgDxtx4xzMX9l7S7lMBDm3/WkceeSy2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
                          rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 14:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13478 (0x34a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
        Validity
            Not Before: Aug  6 14:53:18 2025 GMT
            Not After : Aug 13 14:53:18 2025 GMT
        Subject: CN=68936c5e-2254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:c6:35:ec:af:2b:ec:ac:ad:6a:6b:0e:a1:
                    29:33:bd:0c:89:a1:49:39:bb:1f:46:bf:45:9e:4c:
                    91:03:9c:96:44:a2:25:4c:cf:a3:67:f1:68:b0:ff:
                    ce:65:6c:cc:46:00:1c:2b:37:d6:d3:77:ab:0f:ad:
                    a5:c4:e1:d7:6b:a6:42:bb:24:d9:bc:0c:8a:91:f2:
                    01:f0:90:7f:66:12:d5:25:6b:51:0f:fb:37:39:d3:
                    af:64:5f:d6:3c:dc:b3:5b:ce:cf:14:16:97:c6:ae:
                    a6:dd:9e:87:40:b8:ac:c5:e4:db:b7:2c:3f:49:17:
                    4a:0f:e9:c8:9b:19:e2:f2:28:28:77:9f:11:1f:a9:
                    76:e3:d6:1e:99:26:76:2e:e0:4d:bc:34:17:5f:aa:
                    a8:d3:e8:af:b9:57:49:e0:3b:38:c4:ed:64:68:f4:
                    33:1d:0c:ce:2c:35:bc:b4:a1:ce:8a:89:5e:48:a5:
                    5b:ce:23:ed:8b:0a:c5:1b:12:08:b8:96:04:e6:5a:
                    0a:93:6a:4b:de:73:23:9f:d5:37:7d:ae:3b:42:78:
                    d2:6f:4a:04:e0:8b:3e:c4:ee:71:ed:fc:21:d9:ca:
                    3c:08:09:cd:77:73:e0:45:ed:f6:38:74:ff:8e:15:
                    14:9d:57:e4:36:78:cb:88:61:e5:d5:f7:1c:ff:db:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:9F:4D:83:EA:A1:89:3B:DE:D6:7C:EF:57:DB:13:0E:B1:14:5E
            X509v3 Authority Key Identifier:
                keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:1b:16:0c:f3:12:40:f4:1c:42:ec:0a:cb:f3:d8:50:c6:
         1b:0c:88:43:a6:2c:f2:6d:6d:c9:a7:10:5c:e8:ee:bd:52:a5:
         88:51:dd:13:9d:ca:33:3d:08:d2:fc:cb:45:90:05:13:95:d2:
         09:0d:8f:75:8f:2f:14:34:95:8e:e8:6e:7f:5c:2c:88:d9:e4:
         19:4a:9b:dd:63:65:fc:39:97:43:78:ad:f9:fd:63:fb:07:52:
         94:2d:b1:85:f6:19:e2:a6:1a:ce:2e:13:62:23:4f:90:41:85:
         8e:0a:44:f1:df:44:e3:30:15:2f:02:15:09:1c:52:cc:d3:e5:
         2a:37:49:a3:cc:df:d8:45:e6:df:b9:ab:7f:01:4c:29:c8:44:
         f5:8b:92:c7:f7:c5:c7:f1:07:a2:93:f1:da:38:4e:13:58:92:
         f6:35:72:0b:67:a2:36:9a:bc:39:be:92:d8:ad:05:ca:3f:07:
         55:e2:03:37:65:22:43:2f:31:2d:b1:c4:3d:e7:5f:1c:a0:84:
         eb:cb:7b:95:79:47:90:1e:24:fb:1d:48:34:cf:f1:ad:d3:bd:
         f2:8e:4c:b5:d7:02:ac:aa:84:2b:62:9d:25:48:5c:15:d2:c8:
         ba:68:44:5d:47:b2:4e:b9:dd:50:20:c9:ab:1c:ee:4b:17:3c:
         44:c6:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:48 2025 by rpki-client