Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
File:                     5xDyX0M7YmytODrCnzbCYXy-8Ak.mft (raw, json)
Hash identifier:          2bUfaB03srsd2V/EH24Y5huotOBsHQvYeo3jH1iXvAc=
Subject key identifier:   FB:AF:84:A3:2A:59:59:59:D9:75:DD:8B:92:2A:BF:3F:58:E5:F7:ED
Authority key identifier: E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09
Certificate issuer:       /CN=A9184324/serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
Manifest number:          6C
Signing time:             Mon 21 Apr 2025 05:42:13 +0000
Manifest this update:     Mon 21 Apr 2025 05:42:12 +0000
Manifest next update:     Mon 28 Apr 2025 05:42:12 +0000
Files and hashes:         1: 5xDyX0M7YmytODrCnzbCYXy-8Ak.crl (hash: M0UjPsfxVONO0RaQGBcJ07TEAKUEYJ6yhc48WdjXc4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 05:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184324, serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009
        Validity
            Not Before: Apr 21 05:42:12 2025 GMT
            Not After : Apr 28 05:42:12 2025 GMT
        Subject: CN=6805dab4-c78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:e1:15:f8:34:a2:41:88:74:9c:f0:93:b0:
                    4b:a0:0f:c5:38:25:3a:35:bd:e5:27:d0:1d:33:fb:
                    42:e7:43:42:5d:c5:e7:28:08:5c:a3:cb:90:a6:75:
                    13:30:26:f5:96:0c:00:55:90:08:12:50:e7:80:4a:
                    84:af:e1:5f:f3:bf:4b:d5:7e:c0:39:4e:bf:2d:87:
                    7f:20:9d:39:1d:2d:0e:11:66:60:c5:d8:5f:f4:df:
                    a7:49:a0:fb:1c:54:c6:de:9b:d0:2b:4d:3a:41:f3:
                    48:3c:90:da:ac:ea:81:12:9a:af:89:c1:95:60:94:
                    58:8b:f6:78:61:c4:6a:ef:b3:d0:d5:3b:61:48:3d:
                    97:92:ec:69:4a:1e:56:2f:37:45:40:e5:ab:90:9a:
                    f0:35:d8:cc:6c:00:83:db:a1:ea:ad:d6:73:b0:ac:
                    14:e8:aa:f7:d6:80:db:7c:d0:e7:48:1e:64:94:a4:
                    70:91:d0:d4:c1:94:94:0f:87:0c:63:92:63:a6:bf:
                    79:fc:3c:bb:e4:d5:94:14:8e:33:7b:d2:8c:d3:9e:
                    06:e1:e8:1c:42:e2:da:41:c0:e1:86:df:bd:72:49:
                    23:45:5a:38:50:31:1f:16:8b:73:f5:2a:77:27:f3:
                    ab:0c:e0:86:1d:59:89:b5:00:0b:33:b7:99:c1:c8:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:84:A3:2A:59:59:59:D9:75:DD:8B:92:2A:BF:3F:58:E5:F7:ED
            X509v3 Authority Key Identifier:
                keyid:E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:49:1f:e5:90:96:f1:97:53:8c:cd:7d:19:15:27:6a:98:e7:
         db:31:81:c0:50:f2:6e:b4:1c:d0:ab:2e:f0:68:ce:42:bc:24:
         5c:5a:20:b5:7d:fc:53:f2:da:b3:86:b1:de:64:f7:5c:a3:f6:
         69:66:a6:61:27:b5:9e:fa:ef:76:9e:bc:aa:c7:ab:d0:32:2e:
         1f:ce:60:6a:73:96:be:39:09:cc:77:d2:e9:98:7b:07:d4:44:
         ef:4c:5d:37:50:87:56:25:7c:c2:e0:5a:d3:51:81:eb:d5:8c:
         fb:6c:1c:1e:ff:37:b6:75:fc:e9:c0:9c:80:7a:36:5c:dc:e1:
         f6:45:10:9d:af:fe:2f:44:bf:45:f0:57:29:88:83:3a:b1:48:
         95:7f:28:4f:9d:93:c4:bd:00:b9:54:69:dc:16:da:ce:45:f2:
         b8:37:7d:94:f3:d4:2e:01:cd:ca:16:31:b1:b8:ea:85:28:62:
         ae:05:40:f8:d7:6d:f0:6f:d3:e6:0a:68:02:e4:bf:6e:5b:75:
         d4:98:98:37:cb:c0:67:0c:c7:58:9c:31:08:1b:27:b4:17:f7:
         58:db:3c:aa:13:44:f4:0d:ee:ad:93:16:b1:ee:08:55:b2:8f:
         34:4e:d8:f4:97:95:5a:87:a4:d2:b3:6e:ff:d1:1e:03:a1:e2:
         bb:91:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:19:42 2025 by rpki-client