Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          MVj+ihMRuohcHvUAeQpKtncdWDTd5s7FiKsgUkFTiF0=
Subject key identifier:   54:AD:05:83:24:34:CB:8A:9D:37:F7:7E:C3:34:66:9F:F0:D8:A7:04
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0C35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          14E0
Signing time:             Sun 10 Aug 2025 18:37:08 +0000
Manifest this update:     Sun 10 Aug 2025 18:37:08 +0000
Manifest next update:     Sun 17 Aug 2025 18:37:08 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: k8usXyzTm7I7AgNODxfIQvSxtXEZs1hbtDce4/v0n+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Aug 10 18:37:08 2025 GMT
            Not After : Aug 17 18:37:08 2025 GMT
        Subject: CN=6898e6d4-a79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:02:38:35:6f:bc:ec:f1:bf:f0:5f:3b:30:
                    75:ba:3d:91:1b:f8:79:7a:d3:06:fb:77:cb:f6:70:
                    e9:05:09:ac:bb:e4:96:0b:3a:5e:e9:52:e4:6d:3b:
                    bb:33:9a:f8:dd:2d:41:95:fa:32:7d:50:c6:17:d5:
                    36:91:27:c3:03:28:e8:94:0b:8b:c7:b5:21:f1:9f:
                    11:61:72:4c:d4:ef:19:a5:2e:70:96:37:98:e9:57:
                    80:8c:ec:03:50:f2:75:25:59:28:d7:7c:76:14:e3:
                    7a:c9:e5:46:9a:f1:50:4c:82:66:60:37:6c:30:af:
                    fe:f3:ba:1e:5d:c5:73:d1:ac:0c:00:1f:03:e2:54:
                    c8:84:c8:2d:fd:ea:bd:85:0e:4a:bb:12:da:a2:bf:
                    1f:49:eb:42:6d:d6:59:f4:24:c1:dc:d6:88:70:42:
                    51:02:c9:f5:de:2b:35:e3:6c:02:49:6f:da:95:ed:
                    7a:ee:10:c9:38:44:03:c2:17:bc:c9:6b:5e:f7:09:
                    26:bd:5a:8c:4a:41:63:dd:ff:83:36:e3:a4:91:28:
                    ff:2f:30:d9:fb:62:25:aa:26:d4:65:60:6a:1d:7f:
                    b7:0d:bb:55:1c:ef:4a:48:90:02:33:b2:fe:35:52:
                    01:91:ce:20:b6:b8:c3:31:74:e8:ad:5a:23:20:b5:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:05:83:24:34:CB:8A:9D:37:F7:7E:C3:34:66:9F:F0:D8:A7:04
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:81:53:f3:68:2a:9a:ba:06:fd:b7:20:39:0f:f6:fc:f5:7b:
         d5:59:cb:ff:7b:cf:a5:07:55:78:84:a1:16:2a:a2:49:8a:41:
         46:e3:4e:b6:10:14:50:d8:20:ce:55:74:fd:4b:30:18:60:e3:
         5a:02:d9:b5:bc:ae:90:f2:e2:b1:4a:61:23:40:26:57:2b:08:
         de:04:24:c9:7a:97:bc:89:bf:ce:f7:58:e9:3a:2e:89:7f:a2:
         b8:37:78:79:76:6b:1d:fa:f7:da:ec:a9:3b:5e:18:4b:d2:32:
         78:78:fa:6d:84:8d:9e:fc:22:43:f5:3c:e8:1f:ee:f7:39:36:
         79:74:4d:6b:a2:ba:a4:cb:ce:08:54:ab:07:c8:ad:7d:d0:87:
         8b:4a:59:01:12:78:f5:88:c9:d8:d8:26:56:a0:a7:57:ab:95:
         1d:74:0c:4b:80:7b:3a:c7:09:cc:1e:1a:fc:f2:b6:a5:a5:a6:
         f8:8a:1a:af:59:77:81:da:88:0f:f6:29:92:ad:12:1e:7d:fc:
         2b:16:f3:4e:c1:1f:90:17:a4:9d:e3:16:6d:d5:3d:c5:33:62:
         e4:d4:b9:41:88:3e:82:c8:8c:3c:4e:50:82:d3:00:6c:90:98:
         2c:4a:46:e5:50:89:9a:4a:b0:94:56:1b:8a:92:09:2d:2d:f7:
         38:c5:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:18:33 2025 by rpki-client