Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          hMmWZ4gIdGJGyJp8EyoJkdFeXQ0xk2lLTBy2DvF8O/U=
Subject key identifier:   E0:72:61:4F:2D:8B:EC:F8:26:C1:A8:26:B9:80:EB:33:B9:C9:A8:23
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          B2
Signing time:             Sun 15 Jun 2025 05:06:00 +0000
Manifest this update:     Sun 15 Jun 2025 05:05:59 +0000
Manifest next update:     Sun 22 Jun 2025 05:05:59 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: /Eh1qDILCYJ7/g55ADdf/qABx778p68gN/Vwrc7FhFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: Jun 15 05:05:59 2025 GMT
            Not After : Jun 22 05:05:59 2025 GMT
        Subject: CN=684e54b7-5e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:26:9e:b4:c0:a6:9a:18:b2:0e:c0:e9:48:
                    63:72:cc:2b:e7:9a:20:06:b1:ac:e9:29:87:de:f3:
                    3d:7b:75:50:48:2d:3a:b0:8b:58:85:ea:41:2d:79:
                    5d:01:25:0a:4b:5c:35:e6:8d:bf:66:50:17:2a:7d:
                    2d:6d:58:e9:83:ab:53:a2:cc:5c:b4:97:97:83:f6:
                    21:fc:f0:f2:f4:4d:93:45:5e:75:8c:e2:70:a0:af:
                    4c:92:5c:91:a9:b4:6d:ad:0f:ab:26:70:28:cb:31:
                    82:fd:9b:ca:20:9e:19:88:7f:a3:cd:a1:ac:b3:67:
                    e4:49:1e:16:cc:de:c1:3c:e2:f2:35:80:35:6d:00:
                    9f:ee:c0:37:41:44:7d:14:aa:eb:40:37:98:8c:e3:
                    d7:fb:27:f1:9f:3a:b5:d2:a2:14:15:f3:11:29:3c:
                    ae:68:fe:a5:b2:f5:fc:ce:b3:ae:a9:d7:0a:49:ee:
                    ea:78:20:67:3f:da:5f:d5:e9:c7:4e:20:26:e1:2d:
                    cc:0d:64:9c:df:68:2c:95:82:67:6d:83:31:a8:56:
                    54:69:80:3e:8b:20:a2:01:d1:e1:5c:ac:b6:d8:49:
                    be:43:da:dd:3c:bc:a2:6e:2c:9b:f8:53:76:79:ae:
                    b6:54:c3:13:78:cb:3a:64:e0:db:d5:ba:e8:3d:34:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:61:4F:2D:8B:EC:F8:26:C1:A8:26:B9:80:EB:33:B9:C9:A8:23
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:10:11:c2:d0:22:f2:58:aa:c1:47:2d:fa:f6:30:43:86:
         7e:94:eb:aa:c6:c0:a8:82:bd:9f:e2:ee:28:3d:87:85:30:9b:
         0e:4f:6d:a9:65:8a:47:1b:8a:92:36:a1:c8:19:1c:d4:70:f2:
         9a:d1:ca:ba:25:7d:87:db:a7:72:12:55:80:1c:ed:e6:e6:bc:
         d9:ac:65:27:05:bf:1f:a3:b7:36:a2:1c:23:fa:b2:c2:27:9c:
         54:98:2d:1a:06:2e:1c:25:3c:42:ed:f9:85:20:2d:d3:1b:7d:
         d7:99:6c:ec:6c:16:6c:81:14:e3:19:59:cb:c0:78:1a:e5:62:
         e6:15:53:95:8d:1d:e7:0b:21:eb:7b:86:fc:9a:93:9f:1c:a2:
         d7:14:8c:ed:19:e9:0d:8e:de:c7:19:b4:a7:e1:87:01:84:6a:
         06:5e:56:1e:8a:fb:4a:6b:5a:ab:62:4d:11:f2:70:11:c3:7d:
         93:75:78:92:56:8a:98:27:39:88:46:1a:36:35:ba:a7:bc:15:
         b5:2a:11:5f:38:c0:2d:01:ef:81:8e:9c:6a:11:8c:13:b2:0e:
         60:96:1b:90:5b:71:76:21:b5:c0:e4:5c:ef:c8:75:64:24:2d:
         51:ee:16:a2:40:96:b2:7d:a2:11:e3:6f:8f:0f:04:df:73:82:
         f6:72:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:16:16 2025 by rpki-client