Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File:                     4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier:          xvdZWkPNiZa5zGGMBmpYv8ZLZ09YgrRtCyVVjzkAzYg=
Subject key identifier:   6F:70:69:A3:1C:D7:74:8A:66:D8:FB:EE:EE:3A:1F:E0:06:C0:31:B4
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer:       /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number:          011D
Signing time:             Sat 09 Aug 2025 05:10:24 +0000
Manifest this update:     Sat 09 Aug 2025 05:10:24 +0000
Manifest next update:     Sat 16 Aug 2025 05:10:24 +0000
Files and hashes:         1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: jZUaQO8r6u7J0ZBy0eDWujHyv2lX5eEGcxZqRHsJNpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
        Validity
            Not Before: Aug  9 05:10:24 2025 GMT
            Not After : Aug 16 05:10:24 2025 GMT
        Subject: CN=6896d840-f095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:22:8b:fc:8b:30:da:d3:4c:d5:9d:9f:aa:
                    16:08:8f:be:e1:86:5b:ec:15:fb:6e:e6:d9:58:c3:
                    78:77:0a:07:bd:d3:58:fa:13:86:3d:ac:9a:ea:d7:
                    11:83:74:02:96:07:0a:51:f3:2d:34:b8:54:c3:d9:
                    3c:9b:54:6c:9d:5e:d5:29:9b:f2:9d:01:94:7f:49:
                    4d:25:22:90:27:1f:66:b3:a0:25:84:55:38:e7:74:
                    17:e6:b3:80:c9:6e:14:fb:a5:42:b2:e9:15:3e:39:
                    df:db:fc:e1:59:0b:46:67:59:c4:7e:98:be:13:3a:
                    88:c7:c2:82:b2:1f:0b:40:f1:33:0d:30:db:6d:8f:
                    39:df:2b:68:59:6e:bc:9d:45:c3:0f:89:08:b9:32:
                    a9:52:ab:21:89:1f:c7:32:0a:78:03:30:a4:d7:44:
                    eb:b1:fa:c4:ee:1b:9c:70:20:0e:fc:4a:c7:c1:d0:
                    47:35:6a:3a:ea:fe:f2:69:9f:97:3a:61:61:e7:84:
                    15:48:f1:ed:85:d6:15:ac:4e:be:23:81:3c:ff:0b:
                    18:14:cf:cd:0d:77:97:be:17:10:4a:25:d1:ff:15:
                    f0:90:92:87:5a:7f:1f:9b:73:99:c6:c7:0b:c7:4c:
                    5b:f2:99:d9:a1:19:d9:a3:37:25:eb:57:ca:55:8a:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:69:A3:1C:D7:74:8A:66:D8:FB:EE:EE:3A:1F:E0:06:C0:31:B4
            X509v3 Authority Key Identifier:
                keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:e9:a1:77:39:83:3c:5b:4e:d1:8a:d1:0d:d7:85:90:4b:
         35:a1:66:0a:92:5f:8e:b1:41:03:b3:66:22:cc:b6:8f:9d:ae:
         3f:80:0d:61:91:56:d0:d3:a4:cb:c2:0a:65:b1:45:8b:d2:3c:
         b0:23:68:96:0b:f6:df:4f:21:85:7c:0e:cd:40:78:d6:7e:9b:
         70:83:a7:db:fb:e3:7f:f0:4c:6c:2a:80:62:3b:a1:fd:1c:93:
         d0:e0:9d:85:8c:e9:32:74:0f:44:e8:76:f1:3b:f9:37:26:34:
         88:91:ad:69:ee:77:c4:41:bb:30:31:b6:a5:17:65:f6:c4:cb:
         f9:9a:04:ce:c7:85:63:a0:b7:4d:b8:ce:2c:1e:cb:b0:8f:77:
         87:88:2e:34:e4:f2:cb:a0:d6:bb:05:90:5f:dc:e1:2c:7a:d6:
         25:51:9f:97:14:f3:3a:07:b9:30:00:28:60:fb:0f:d6:c9:fa:
         96:de:21:f4:2a:c4:03:89:ab:f9:b8:72:2d:61:d5:c5:ee:f5:
         bb:66:9b:57:e6:69:37:bd:1b:af:64:b4:12:b6:e0:05:86:24:
         cb:55:53:f6:95:35:2d:4f:22:ce:d1:8e:ec:d6:73:e9:0d:17:
         ad:be:0e:e6:38:ab:68:f2:ef:19:41:53:a4:31:ec:51:74:47:
         85:4c:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:52:53 2025 by rpki-client