Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier:          4btKz0jtu+4wGAxyKgJxLHrR8Z1dCkojahWDkVXhNZs=
Subject key identifier:   0A:54:1F:83:1A:6F:A9:7D:14:6F:50:C7:1C:F0:71:E8:CA:3C:FD:41
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number:          5C
Signing time:             Thu 19 Jun 2025 06:36:42 +0000
Manifest this update:     Thu 19 Jun 2025 06:36:42 +0000
Manifest next update:     Thu 26 Jun 2025 06:36:41 +0000
Files and hashes:         1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: 06lZ5WD75RhQPFBcYO2szKVMKAaV5V3Ars21tgcpOsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 06:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: Jun 19 06:36:42 2025 GMT
            Not After : Jun 26 06:36:41 2025 GMT
        Subject: CN=6853affa-6660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:48:dc:fc:6a:ce:48:e9:b3:b0:4a:fc:9d:
                    f2:8a:56:69:8b:d6:b4:3e:48:e6:dd:23:80:0a:02:
                    47:73:8f:97:1e:4b:1d:9c:10:9c:72:b5:3a:f7:47:
                    8d:15:ea:d9:a3:fd:26:a9:d3:18:29:70:bc:c7:a1:
                    e3:67:e4:cc:e4:de:37:84:d8:49:98:83:0a:5d:3d:
                    8a:6e:6c:6f:b4:82:69:da:ef:93:86:06:11:ea:6e:
                    15:df:e0:81:ba:5e:16:52:63:2f:75:fc:e6:6f:be:
                    eb:ea:44:0e:09:5f:33:b8:b8:c1:e2:9d:25:85:85:
                    f8:27:c1:c2:ba:45:2b:f8:01:96:fb:a2:1d:b5:ef:
                    63:e7:26:00:02:44:53:68:28:ee:8a:2a:1e:58:fc:
                    93:93:ac:f2:29:73:c3:c3:9c:6d:f2:59:cf:f1:08:
                    c3:3f:0d:a2:8b:22:71:88:1f:a4:df:9f:58:7a:1e:
                    1c:6b:f8:3b:a8:0f:fc:a8:51:56:68:e9:e6:bf:59:
                    e5:64:5e:c6:6c:ee:57:2f:bd:ca:71:77:90:1c:c8:
                    c6:45:00:eb:be:fb:0b:81:0a:78:c3:b0:dc:a3:88:
                    a6:56:6a:ff:b4:d4:a7:08:20:d5:7a:b8:18:8b:e8:
                    25:ea:06:57:9b:32:1b:c8:bc:d9:c7:4f:41:8a:26:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:54:1F:83:1A:6F:A9:7D:14:6F:50:C7:1C:F0:71:E8:CA:3C:FD:41
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d2:30:4d:17:53:e4:6c:12:2f:b8:24:0e:d6:cd:cb:cd:07:
         09:bb:b3:d9:e7:61:c8:ed:93:6f:95:cb:46:2d:21:d6:e7:00:
         e9:70:52:d1:65:1a:1f:8d:32:00:65:b4:80:b9:e2:d9:4f:7e:
         81:bd:06:8d:ac:02:b2:f5:f8:dc:da:1e:cc:19:4d:78:e5:2e:
         6a:74:90:0a:f9:fa:4a:f0:e6:0f:82:c4:67:e6:f6:81:62:56:
         d6:14:76:78:83:61:13:0a:17:bb:99:09:6f:18:8b:55:78:70:
         a3:30:00:c2:4c:54:cc:92:bb:85:a8:46:d9:26:41:0d:89:4c:
         c0:d3:e5:f6:d2:e5:54:91:f3:fc:f3:ff:34:e1:2a:cc:df:5c:
         87:ac:47:2d:91:5d:ca:56:e8:ef:09:a0:5c:1d:19:3b:bd:e7:
         cd:40:6a:47:29:9c:5b:55:0c:82:a8:9d:57:64:02:18:6b:91:
         54:a9:10:07:b9:25:1f:87:d2:31:81:c4:7e:8e:69:ee:7b:c5:
         4e:f1:1b:db:81:c1:1c:70:f9:48:26:65:49:0e:93:8a:ee:e9:
         d3:f9:fe:e5:77:d4:4f:ae:79:0f:e8:90:ff:29:03:01:29:96:
         4d:56:ba:88:31:df:84:79:75:88:e7:9b:35:07:4e:06:5a:13:
         aa:31:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:22:30 2025 by rpki-client