Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
File:                     v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json)
Hash identifier:          QhXOw9BKnVxmHLr5f8MEsQ74V196gzD3lt8GmYeyor4=
Subject key identifier:   E4:A1:6D:BE:82:BE:F7:4D:07:58:5E:A9:93:12:45:45:EE:4F:FA:CB
Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E
Certificate issuer:       /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
Manifest number:          6E
Signing time:             Fri 13 Jun 2025 05:49:10 +0000
Manifest this update:     Fri 13 Jun 2025 05:49:10 +0000
Manifest next update:     Fri 20 Jun 2025 05:49:10 +0000
Files and hashes:         1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: 8kRwUlZFTRHKZnCplvBeIDcMsrFsPDRNsEuAqPmyi3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
        Validity
            Not Before: Jun 13 05:49:10 2025 GMT
            Not After : Jun 20 05:49:10 2025 GMT
        Subject: CN=684bbbd6-99e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:f5:29:3b:d1:f5:6b:95:2e:91:29:ba:09:
                    f1:c7:e6:ae:75:a3:f2:00:9b:b7:41:4b:3c:94:a7:
                    b6:b4:1e:1f:f7:ee:11:52:80:ab:2a:17:6a:7f:bd:
                    66:98:c4:d6:eb:55:07:86:6c:57:ca:fe:f1:9c:63:
                    af:7f:af:dc:23:43:c4:ea:a9:9d:97:8b:56:c8:2f:
                    f8:20:57:af:77:05:0a:b3:cc:6b:0f:e6:33:ad:18:
                    51:15:f4:c8:77:35:2e:7a:f7:36:e3:bf:37:ad:4a:
                    ae:b7:4e:8a:6e:d1:e5:d3:5a:ed:da:4c:e4:e0:25:
                    92:7c:c7:5b:dc:c1:63:4c:c2:2e:51:13:9d:0e:66:
                    96:0c:0c:4e:54:85:d3:90:80:4b:95:36:09:67:bc:
                    42:09:2f:ab:a7:12:06:e4:90:b8:e1:f4:5b:49:cf:
                    8d:54:cc:b5:c3:9f:a9:b0:84:e1:f3:54:27:25:f6:
                    09:ad:42:45:ea:7c:ff:c0:c4:aa:f7:10:9a:70:c6:
                    31:52:9e:35:7f:5f:33:d1:8f:93:55:19:e8:29:e6:
                    e2:2f:6c:36:78:84:55:2a:9a:1f:f0:fa:20:b9:c9:
                    b9:87:ec:04:84:1c:af:3d:54:ef:63:c1:81:00:e9:
                    9d:7c:9a:fd:b7:ca:09:56:3b:37:44:3d:85:a6:f5:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A1:6D:BE:82:BE:F7:4D:07:58:5E:A9:93:12:45:45:EE:4F:FA:CB
            X509v3 Authority Key Identifier:
                keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:53:a2:e9:98:41:f3:a2:85:6c:2b:30:3a:ba:36:01:5e:
         31:40:2b:26:b3:77:53:fa:cb:92:db:db:15:3a:2f:ad:4f:16:
         05:d8:f9:75:a2:21:b2:5a:43:05:5f:08:86:a6:6e:ad:29:a3:
         f1:81:05:36:63:a3:89:18:9d:1c:89:9b:32:ba:3a:c0:a7:5d:
         4f:80:1a:c3:a0:f0:59:59:b9:bc:3d:c1:50:e9:8d:bf:d8:8f:
         52:9c:02:e3:b4:92:84:ee:de:24:4d:cf:a1:52:f8:0e:30:ee:
         28:34:82:94:1a:8f:c6:9a:2d:c9:5e:da:9c:75:e0:b0:a9:eb:
         6b:26:a3:ce:39:81:92:1d:7f:07:ae:c4:7a:5c:12:25:31:3c:
         17:37:42:9e:24:a2:c6:61:00:5b:cc:a0:9e:d4:8d:8c:2a:a5:
         25:78:a2:1c:1e:7e:0a:14:5a:18:bd:75:bd:62:17:18:da:1b:
         f9:1f:5f:8e:f4:25:61:51:58:bc:c7:42:df:2c:5d:3a:b7:4a:
         f4:2c:7a:2f:e5:14:7e:90:77:ed:70:6d:3f:6e:ab:a7:65:6c:
         71:1f:ef:e7:94:3a:68:d7:3c:ab:29:f6:72:e6:22:7f:5d:dd:
         bb:96:b1:bb:57:8a:7a:09:55:4d:70:95:c9:db:d5:77:e7:70:
         4a:d3:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:20:16 2025 by rpki-client