Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          HWiwykZMJt5kXc49sMnrbzlKtmrvu3QmPP+rPMwlu9U=
Subject key identifier:   36:7E:33:00:0C:4E:D3:F1:26:12:D4:26:07:45:DD:0D:DB:95:5A:95
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          010B
Signing time:             Sat 21 Jun 2025 04:05:31 +0000
Manifest this update:     Sat 21 Jun 2025 04:05:30 +0000
Manifest next update:     Sat 28 Jun 2025 04:05:30 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: 1sW+1s6Z+UYVVJSmPTgaddIwRT2Ab5nbylhCwxKbygM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 04:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
        Validity
            Not Before: Jun 21 04:05:30 2025 GMT
            Not After : Jun 28 04:05:30 2025 GMT
        Subject: CN=68562f8b-ccd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:ae:5f:47:3d:9b:80:49:93:41:8d:99:d9:
                    f1:03:9b:ec:1b:17:53:2a:ec:25:e1:68:00:da:49:
                    aa:ef:ab:a3:de:bd:17:53:e7:f2:72:73:0b:3f:ab:
                    0d:72:e8:a2:8e:8c:5b:80:27:79:c8:70:e0:1b:f4:
                    ee:52:3c:87:7c:3e:1d:70:9d:83:08:4d:3e:37:99:
                    46:ff:7e:35:c1:77:e9:1a:b8:8f:89:a0:60:48:f8:
                    de:90:af:91:67:53:62:9a:bb:bb:46:14:b8:3e:93:
                    6a:21:26:98:21:b5:91:e8:3c:7e:72:f9:b3:75:ad:
                    69:fd:59:31:80:16:cf:f4:af:f3:ba:e1:71:58:9c:
                    e2:61:4c:f3:91:4a:67:66:80:07:23:b5:d2:55:57:
                    22:3d:6d:5f:78:33:82:11:02:54:5d:18:86:3b:c3:
                    d4:4f:30:e1:31:52:15:d1:5b:fa:4b:a7:62:e8:68:
                    f1:01:ec:4e:be:e2:51:42:b7:03:3f:93:44:2f:72:
                    5d:8d:54:44:ef:4a:8c:8f:ef:b0:07:94:ce:71:e9:
                    6e:23:2f:a8:3f:f1:8d:22:c3:dd:28:e0:26:2e:5f:
                    31:5b:5a:06:a5:cd:d5:38:96:d6:64:87:ef:38:fe:
                    e6:90:97:58:3a:0a:6a:e6:0a:82:23:18:05:01:c7:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:33:00:0C:4E:D3:F1:26:12:D4:26:07:45:DD:0D:DB:95:5A:95
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:e6:a3:6f:11:d3:df:f8:c7:ca:99:f4:2e:e7:c0:63:2f:
         13:03:1a:c9:da:ec:41:92:d2:45:c6:cc:fb:e5:10:d1:6b:1c:
         3a:c0:71:f2:eb:6f:dc:d8:4a:81:61:89:4c:a3:e1:ce:8c:f4:
         50:83:71:3c:52:82:2d:e7:51:7b:8a:b1:bc:72:1f:5b:f8:01:
         78:97:23:b6:97:70:23:a0:f4:77:ed:df:28:75:1c:05:c3:18:
         6b:42:b8:2a:62:43:ad:a2:aa:1f:6c:a4:c1:f8:0f:90:49:e0:
         dc:17:47:52:34:41:87:f7:d1:c4:4a:e4:76:9f:eb:c5:08:61:
         ab:13:a6:45:a1:e6:53:b8:ef:ad:ad:6a:ce:2b:f5:38:d8:cb:
         10:9a:9f:79:b7:01:3c:85:d0:08:16:21:95:7a:36:a1:4e:22:
         73:9c:96:26:6b:b6:77:49:56:38:bd:48:d1:0e:65:5d:0e:a8:
         6b:bc:88:9b:4f:ac:47:66:87:c1:3c:48:4d:99:e0:b6:b0:d9:
         0a:50:8d:32:19:92:b0:46:f0:8e:76:f3:06:17:ad:42:d5:d6:
         4d:62:b6:e5:e7:f2:0d:53:74:d6:86:b3:86:dc:52:5e:fb:2e:
         36:08:0f:9c:f6:4a:e5:eb:0f:e9:4f:f3:49:fb:fc:4f:7b:28:
         93:df:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:52:58 2025 by rpki-client