Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File:                     aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier:          Z/i2zXGzKaSNFJiu5gH8RpoFMu4322HdYRhWUnENOiU=
Subject key identifier:   CB:97:DF:1F:A9:3C:5C:C2:16:08:7C:9F:EA:83:00:0D:83:69:43:E4
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer:       /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number:          073F
Signing time:             Thu 12 Jun 2025 22:37:36 +0000
Manifest this update:     Thu 12 Jun 2025 22:37:36 +0000
Manifest next update:     Thu 19 Jun 2025 22:37:36 +0000
Files and hashes:         1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: XqhxvzAKPetLtclRL8oQStMTHe+aMJpOYz9HX4C+fkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
                          rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Validity
            Not Before: Jun 12 22:37:36 2025 GMT
            Not After : Jun 19 22:37:36 2025 GMT
        Subject: CN=684b56b0-fce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:ca:8a:37:62:34:db:73:82:a4:78:9a:80:
                    c6:bf:29:e4:7e:38:e9:d8:17:52:ff:6e:0b:6a:f3:
                    a3:0c:a2:03:d0:99:d1:50:a4:8d:98:b9:b0:f0:55:
                    10:d0:6a:6c:58:25:8b:f2:e5:82:f3:f1:83:4a:32:
                    db:27:b7:9e:16:8e:2c:5e:e8:d1:47:4b:52:1a:94:
                    00:e8:b8:bc:a6:ed:f4:92:47:5a:f4:e8:03:a9:36:
                    24:73:0a:50:0a:97:cd:b2:b6:f1:a3:85:dc:88:f0:
                    2d:1f:7f:39:61:66:b7:d1:d0:63:f2:d4:08:aa:b7:
                    c5:6a:7e:18:18:02:2e:a8:e6:d5:1b:f1:4b:02:a5:
                    9b:94:38:05:71:af:55:d0:0b:e1:70:bf:9b:f7:98:
                    bb:22:cc:cb:6f:8e:40:2f:69:be:f3:13:7d:7b:c3:
                    86:d8:d7:9b:c4:a8:f1:75:31:7f:2c:00:35:db:91:
                    9f:78:2a:9b:4d:e9:9b:7c:67:20:fb:c4:15:b7:e2:
                    83:3c:3a:07:7f:32:4d:00:2c:44:57:c0:0a:22:ed:
                    ce:f6:13:ff:ef:a6:56:44:5f:bd:dc:52:0b:3a:cc:
                    5a:06:9d:73:34:af:a5:f6:70:df:b7:25:74:2c:94:
                    51:53:35:ad:d3:a7:a9:1b:44:6b:97:b8:fd:bf:dc:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:97:DF:1F:A9:3C:5C:C2:16:08:7C:9F:EA:83:00:0D:83:69:43:E4
            X509v3 Authority Key Identifier:
                keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:3f:ff:4b:77:cc:af:fe:c1:ae:08:f5:7a:d0:95:1f:50:
         9b:41:c7:6e:e2:be:91:88:06:ab:86:df:a6:5c:f7:46:33:3a:
         74:92:6f:d7:6b:a0:ea:14:d0:e4:ac:63:89:c0:fd:db:3d:1c:
         05:29:27:6b:74:64:45:57:c0:42:a5:b4:d2:28:99:a5:40:46:
         45:29:23:8e:39:32:e8:f5:8a:47:d5:a4:29:f7:f6:5d:90:f8:
         5c:4f:53:0b:a9:97:09:0d:8a:c4:cd:f3:55:3d:bc:24:70:55:
         17:93:67:4a:5e:1f:f9:41:1e:b9:b4:15:46:f6:7f:f9:89:b4:
         b6:b5:10:f9:04:78:95:0f:b8:b0:e1:41:1f:1d:1d:b3:a8:20:
         d3:ee:93:ec:0a:79:ed:1a:01:b9:02:69:84:4a:61:9e:9a:3e:
         19:f3:cc:75:39:2d:6a:00:d3:63:3a:62:df:98:c4:32:d2:61:
         43:ac:3f:7c:66:a1:36:ee:2c:e3:b9:ad:50:42:e4:9d:ee:0e:
         63:bd:3f:e1:2e:88:36:7e:0e:55:1d:a0:4f:99:ac:11:f0:a6:
         a7:a7:16:8b:8b:fe:c6:5d:e0:e0:95:08:f3:7f:0a:8c:41:bb:
         5f:2b:2f:6c:59:ac:5c:15:d7:83:9e:7c:7a:8f:8e:25:f0:72:
         e2:bf:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:42 2025 by rpki-client