Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          WAuHEwUWPB9SOYww0YqJYuPbB+X+GRq9uKhZIx9LliE=
Subject key identifier:   FC:0A:74:DE:7A:F7:49:85:EE:86:3B:64:D9:46:B4:06:03:B0:4C:81
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0D27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0D1E
Signing time:             Fri 04 Apr 2025 18:09:43 +0000
Manifest this update:     Fri 04 Apr 2025 18:09:43 +0000
Manifest next update:     Fri 11 Apr 2025 18:09:43 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: aF1215xq0DuO2QaZUJqS5lgR9H88amAalOoquNgmhgs=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
                          rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5
        Validity
            Not Before: Apr  4 18:09:43 2025 GMT
            Not After : Apr 11 18:09:43 2025 GMT
        Subject: CN=67f02067-e65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:38:4f:f8:52:88:b5:e1:1a:e8:50:58:54:
                    2d:42:e9:d2:af:cf:a3:2c:c6:7d:f6:f1:47:36:f7:
                    ea:d4:14:be:87:88:40:5a:44:9a:87:76:6d:50:16:
                    a6:64:5b:01:ee:cd:b4:33:c7:aa:1b:c3:f4:9b:56:
                    74:9f:6d:06:a9:77:de:4f:39:27:96:a8:d6:e6:7f:
                    2a:37:20:ed:5c:d3:da:41:8b:58:fb:42:59:56:4b:
                    6c:b3:e9:a3:02:5c:3a:d5:53:56:cc:e4:47:be:a3:
                    06:d5:c1:8d:51:4c:d3:38:29:df:96:52:83:11:43:
                    ca:d5:f2:44:39:2f:57:62:d4:df:c0:1e:7d:4b:c3:
                    5e:d8:7d:13:5d:4d:2f:87:67:42:1b:db:82:7e:ac:
                    12:af:a3:9b:50:98:2e:0b:71:a3:ec:fa:5b:63:ac:
                    4c:c7:16:62:7b:13:aa:61:15:e5:10:06:84:02:aa:
                    32:ed:63:37:3e:69:f9:e4:16:f1:7e:a8:58:4e:df:
                    50:9c:48:82:da:ac:30:f1:bf:fb:04:1e:73:a0:8f:
                    b0:f7:7a:80:6f:38:dc:46:da:6d:34:3b:0a:55:5a:
                    3f:1b:82:eb:25:3d:19:45:ee:be:ac:1c:d6:4e:46:
                    35:97:63:ed:e7:7c:0a:b7:9a:c0:b0:4a:f0:f6:db:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:74:DE:7A:F7:49:85:EE:86:3B:64:D9:46:B4:06:03:B0:4C:81
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:3e:9b:dc:5a:ab:8e:14:a4:95:18:ac:a1:64:26:a6:08:
         96:31:29:17:f6:28:7d:ad:01:c3:98:06:ea:09:db:3b:2b:07:
         de:ed:f1:63:58:85:7a:f7:3f:ea:5c:1d:bc:6b:69:85:b7:91:
         67:37:52:51:ae:9a:83:8c:b3:aa:74:f2:b8:16:3a:8e:42:39:
         17:ca:fd:1a:20:81:69:fa:64:c9:90:4a:a7:b9:e2:bb:33:06:
         a3:37:47:eb:3f:1e:d9:cc:3a:e5:3e:db:80:0f:42:a7:00:2d:
         e2:b6:cf:4e:93:71:b9:8c:00:f2:4d:ba:66:f9:b3:9c:5c:72:
         b6:ba:fe:3a:c9:ef:81:0b:23:c3:85:9d:ba:72:52:df:73:21:
         52:a5:4a:56:a4:d4:f5:31:f0:48:07:78:84:6f:74:5c:7a:c6:
         c2:d3:20:05:00:a7:e8:a9:22:30:33:d1:a0:0f:38:46:7b:75:
         11:4c:cb:0e:bb:e7:22:6e:40:aa:f5:e4:80:58:10:14:7e:cc:
         f0:7a:31:64:60:0f:b5:d4:58:ad:8c:07:65:4c:15:ae:b7:06:
         45:6f:ec:cd:bc:b2:1d:4d:a5:3d:2b:49:43:40:f7:b1:7a:5f:
         43:08:5a:95:ba:88:97:96:b0:19:0f:a1:5f:e6:f9:c6:32:23:
         6f:df:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:30 2025 by rpki-client