Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
File:                     6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json)
Hash identifier:          91jiTQ+WEPgYXlIU760uRnQOXRKf8N2bIOpif3ZJJgs=
Subject key identifier:   E7:74:20:EF:37:B0:1E:03:EB:23:E6:25:8E:18:92:4D:36:01:5C:52
Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59
Certificate issuer:       /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059
Certificate serial:       34AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
Manifest number:          34AA
Signing time:             Tue 12 Aug 2025 14:51:22 +0000
Manifest this update:     Tue 12 Aug 2025 14:51:21 +0000
Manifest next update:     Tue 19 Aug 2025 14:51:21 +0000
Files and hashes:         1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: Uy+/PATGgm+m4yOqNAukhyICOdW7mNf5m+1WN3qJOcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl
                          rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13482 (0x34aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059
        Validity
            Not Before: Aug 12 14:51:21 2025 GMT
            Not After : Aug 19 14:51:21 2025 GMT
        Subject: CN=689b54e9-5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:d2:91:ee:e4:61:a0:24:e2:72:d6:16:73:
                    8d:a9:99:68:c8:0d:48:e2:35:8b:2a:cc:8a:e1:50:
                    2b:d3:a1:af:45:c0:8e:e2:0f:b2:ca:f5:54:01:6a:
                    d8:0b:d3:9c:e0:41:95:b8:10:f7:a1:38:0b:0d:d7:
                    3b:60:bf:02:8a:bb:64:9a:2d:78:cc:e4:48:c7:d9:
                    f8:3c:2f:49:b6:77:91:fa:ec:74:e8:20:04:49:5b:
                    c1:1c:a2:63:ba:3f:4f:52:51:78:92:95:a3:b1:0d:
                    4c:af:ea:3f:74:9e:05:d4:9f:fa:3e:43:7d:02:53:
                    cf:87:84:0f:85:5c:f2:92:81:59:10:e1:9d:fc:e0:
                    bf:ad:3b:3d:9f:c8:8b:91:97:24:43:b4:51:13:71:
                    4b:99:fe:0d:e5:51:39:e0:30:c9:b9:4b:81:22:e5:
                    8e:73:cb:27:31:48:7a:65:f4:b0:35:61:68:e4:9c:
                    79:c4:c3:8a:cb:83:88:5e:38:c4:43:63:87:fc:89:
                    ee:33:e1:c6:32:aa:1d:75:ef:da:fa:cb:97:e2:e9:
                    f6:0d:a4:2b:e6:cc:99:02:45:47:51:ff:ce:c2:58:
                    9f:72:0d:57:ea:91:f1:4a:4a:f1:27:c5:3b:46:91:
                    4f:e4:42:63:82:bd:ec:e3:7f:03:a4:17:c4:9c:e4:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:20:EF:37:B0:1E:03:EB:23:E6:25:8E:18:92:4D:36:01:5C:52
            X509v3 Authority Key Identifier:
                keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:eb:76:4d:6d:2c:9f:b7:29:ba:24:91:aa:f1:70:c5:6f:
         61:8a:4f:65:39:bd:24:ce:8f:4e:1f:cd:82:ce:99:ee:cf:dc:
         53:b3:95:33:be:27:97:8b:2b:9e:f0:c7:5d:cb:4b:da:d0:49:
         32:c9:09:70:1d:81:54:43:f9:a3:bf:32:52:0f:c8:b9:5e:dd:
         41:4e:63:9c:de:e6:aa:63:c9:93:52:0f:e8:52:dc:c8:e8:70:
         de:c0:f8:a2:7e:0e:3c:d0:ff:8f:a0:fd:78:17:cf:59:00:dc:
         2e:a8:69:a4:74:b7:da:5f:28:fc:dc:f3:e1:e7:8d:be:6a:3e:
         43:ac:22:1d:56:7f:a2:a5:0e:ed:0f:b1:31:7e:2d:66:03:dd:
         91:a4:e2:a5:a4:f2:f5:93:a4:49:f0:45:a2:bb:0c:2b:43:d1:
         7f:1e:97:af:ff:ed:89:d0:af:0d:e4:ac:e5:98:ba:f9:3b:8b:
         14:d3:30:44:d4:c1:12:64:4b:8b:76:9b:47:af:8c:73:54:1e:
         6f:75:38:ed:6d:ab:03:09:2e:ec:a8:82:9f:29:be:a2:e0:32:
         8d:49:78:33:5e:77:f2:43:44:f1:3d:28:84:b6:d6:d3:f1:55:
         52:5b:c4:52:12:26:4b:30:1c:54:da:27:2f:66:d0:0e:c9:1f:
         08:d8:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:28:02 2025 by rpki-client