Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
File:                     ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json)
Hash identifier:          VieC6shrvdYUCUS7YZ/OXuutaB9YOsElk5HBlbGQfQg=
Subject key identifier:   03:B5:0F:C8:54:93:42:BA:82:3A:DF:82:3E:58:0A:C8:BE:5C:29:C6
Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
Certificate issuer:       /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
Manifest number:          0280
Signing time:             Mon 21 Jul 2025 01:59:30 +0000
Manifest this update:     Mon 21 Jul 2025 01:59:29 +0000
Manifest next update:     Mon 28 Jul 2025 01:59:29 +0000
Files and hashes:         1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: uKyfU8VEWL0zxlyWmC5tLLl4REGwxRs1Bjq3hdQqfuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
                          rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
        Validity
            Not Before: Jul 21 01:59:29 2025 GMT
            Not After : Jul 28 01:59:29 2025 GMT
        Subject: CN=687d9f02-dfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:25:cb:d4:44:f0:7a:f6:bf:8b:3b:a2:2b:
                    ff:be:1d:14:d9:5c:5b:24:c7:71:2f:50:20:eb:c1:
                    5d:d7:6a:0f:27:d7:04:21:51:b9:a1:eb:1d:0c:4f:
                    24:1d:ff:d1:c6:cc:b6:ad:11:0b:ac:c4:0d:c6:00:
                    e4:d6:b4:c7:a9:40:00:e8:86:38:ee:25:dc:61:8c:
                    66:ea:8e:db:fa:09:4e:c7:8f:b9:36:59:ac:49:96:
                    df:91:34:52:a6:83:9b:5e:69:08:ed:41:c5:42:52:
                    95:45:fe:3d:31:bd:ae:ca:a4:92:fe:eb:c7:22:b0:
                    91:ad:19:f3:e2:d4:86:b9:25:14:ce:ac:98:6b:90:
                    4f:ca:0b:5a:95:38:9d:af:41:b2:74:76:da:5f:59:
                    80:c5:ff:6e:1d:a0:7c:09:3a:09:79:4a:cd:ed:15:
                    41:d3:db:af:e9:79:6a:ec:60:87:1a:3b:7c:b6:77:
                    af:ab:0d:8b:0b:23:e3:a5:25:b8:a1:61:a4:53:74:
                    e1:fb:1e:fc:f9:c0:1c:f3:8e:76:7d:81:08:55:33:
                    96:b0:dc:48:ee:43:34:0a:70:8e:fc:a1:dd:a0:7d:
                    9f:7c:be:1d:a7:ef:f1:46:af:f3:7d:1b:f6:9c:52:
                    af:ab:f3:85:cd:b0:18:79:4c:c5:a9:85:ea:e9:0f:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:0F:C8:54:93:42:BA:82:3A:DF:82:3E:58:0A:C8:BE:5C:29:C6
            X509v3 Authority Key Identifier:
                keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:3f:54:f8:04:7c:06:22:13:31:e6:32:50:88:67:3b:1d:
         cb:18:cd:6b:49:ad:be:1c:19:cf:79:f6:22:f3:d7:4e:af:01:
         83:e7:f7:de:6f:71:b1:ca:9a:ed:25:2c:04:3f:fa:74:d1:5d:
         b1:63:1a:51:aa:b9:fc:aa:9b:9f:fe:ef:32:41:da:e4:dc:78:
         85:c4:b6:9b:bb:ae:f9:68:b8:c4:61:17:d5:95:52:d4:ab:23:
         1b:46:18:e8:9f:94:8b:cb:46:f3:d4:73:ed:5b:67:a2:6a:09:
         8e:98:bf:fb:27:ea:48:1e:84:58:10:a6:ab:94:04:3c:16:e5:
         08:c8:b9:57:3f:c3:5b:68:9a:eb:d2:54:4a:4a:29:e9:c3:b7:
         da:30:d4:58:1d:d7:42:b2:e6:37:d1:16:ff:47:74:c4:e7:3c:
         6d:52:36:92:da:3b:22:17:c9:da:fb:e1:aa:9c:b7:3c:e4:d0:
         a1:fb:ab:a1:1a:8c:f4:51:de:88:56:86:56:38:32:66:9a:dd:
         59:4a:3b:75:52:97:59:d4:c4:a4:0e:b2:fc:b4:99:c0:b8:4e:
         db:3b:c9:b5:fd:be:eb:b4:b0:fe:6e:0a:f3:6f:8d:5b:6a:a6:
         66:e7:70:bd:54:ea:e9:3d:43:df:f4:b0:8c:89:bb:29:95:48:
         7a:a4:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:56:11 2025 by rpki-client