Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File:                     6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier:          66k933xSkcCCMwBG3MXw/OOIQrNbUYoc3og7+brcRaI=
Subject key identifier:   11:24:41:4E:72:84:D8:F1:F8:62:D7:2C:7B:D6:CB:A1:1A:38:2A:CA
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number:          C0
Signing time:             Fri 11 Apr 2025 05:11:30 +0000
Manifest this update:     Fri 11 Apr 2025 05:11:29 +0000
Manifest next update:     Fri 18 Apr 2025 05:11:29 +0000
Files and hashes:         1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: VFeXDcaVfTx157/R/3PVFA+y4ZhIqa8BHNFC5EKSdhg=)
                          2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
                          rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 05:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Apr 11 05:11:29 2025 GMT
            Not After : Apr 18 05:11:29 2025 GMT
        Subject: CN=67f8a481-e3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:08:36:88:d7:ed:88:fc:82:8a:7f:3a:c9:
                    11:80:6d:4f:c1:dc:47:8a:12:c8:a6:85:78:72:82:
                    25:e7:ff:e2:b6:25:fd:97:f1:73:af:22:eb:f8:84:
                    4c:f6:e8:0a:54:f0:1b:b1:ba:cc:6d:f3:0d:31:b6:
                    a0:3f:87:18:b1:8b:63:87:81:e0:4a:0e:25:e3:82:
                    92:b3:54:f1:a4:f0:a8:1e:b1:9c:2e:bf:06:67:37:
                    05:ac:73:89:9b:89:1a:87:62:42:2f:20:10:76:f7:
                    37:35:4c:69:9a:98:93:75:58:bf:50:11:ff:a3:37:
                    24:62:52:cc:65:b6:ab:af:2d:a6:5c:b3:f1:1e:17:
                    2c:6c:6c:a4:b4:2e:48:50:88:81:50:8e:b2:2b:8d:
                    4a:3c:7f:c2:21:87:3f:c0:b2:ff:d0:87:c3:c9:3b:
                    d2:6f:2d:1f:eb:06:10:f3:68:4f:5e:bc:f5:84:d3:
                    13:56:f0:c6:8f:9d:02:5a:71:65:e0:98:eb:66:05:
                    54:4c:8b:2a:78:55:88:d1:2a:ba:9c:6b:8e:e6:2f:
                    dd:64:c2:d9:5d:c5:00:a8:01:98:f9:29:7c:84:7e:
                    ec:a0:a1:69:59:ec:42:d5:6f:e7:7c:0d:63:e4:8e:
                    7a:aa:95:23:c8:b2:88:6d:bb:b9:80:b4:22:d3:10:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:41:4E:72:84:D8:F1:F8:62:D7:2C:7B:D6:CB:A1:1A:38:2A:CA
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:a9:a8:34:42:3d:61:28:bf:07:79:05:76:fa:43:49:e1:
         8b:a8:dc:3d:38:9c:02:a2:88:3f:c0:55:f5:bc:5b:ab:ab:f8:
         43:02:48:bf:d1:5e:43:31:7d:3e:48:1e:14:da:01:24:6f:a5:
         64:41:31:81:bb:a2:d3:46:ca:94:c2:53:2c:17:a3:d6:78:61:
         7d:a0:c2:2c:0c:d6:69:60:aa:35:30:fa:56:19:3b:cc:b8:2f:
         67:96:b2:ef:14:e7:75:70:de:bb:08:fd:30:60:c5:71:b6:f1:
         eb:19:de:cb:f3:f4:37:1d:cb:d4:cd:dc:db:53:ba:40:14:95:
         e7:36:4c:e0:b2:e9:9b:59:90:4e:61:12:a8:91:9a:d9:7a:b1:
         d3:2c:c3:3f:2a:f8:15:94:21:9f:b7:d2:92:3b:e0:83:43:bd:
         ad:91:6c:eb:03:f3:33:84:93:de:46:60:3f:94:a9:22:dc:97:
         2f:a0:34:42:8b:b3:42:3c:91:3d:1f:36:0b:d0:3a:aa:67:5d:
         29:ba:f1:47:f8:6c:df:77:32:c2:17:68:63:d5:fe:18:a8:89:
         dd:0d:17:f7:cf:9a:c3:6e:87:e7:cf:bf:eb:8c:02:ce:0d:84:
         d9:61:22:0f:af:71:17:63:42:66:37:a0:28:65:35:de:d5:2b:
         b6:fe:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:37:02 2025 by rpki-client