Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          XkAMu6YqyXjIc62QQYRVdlrDspxjd9NZuqw3opK2efo=
Subject key identifier:   24:EA:9B:E3:62:62:4D:94:14:DE:91:00:17:16:24:BB:18:AC:83:E9
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          015D
Signing time:             Wed 12 Mar 2025 18:49:07 +0000
Manifest this update:     Wed 12 Mar 2025 18:49:06 +0000
Manifest next update:     Wed 19 Mar 2025 18:49:06 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: BEt4KIhySKQmuV1fIkP1CGkiv0wJ29iDDUAyXON5hKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 18:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4
        Validity
            Not Before: Mar 12 18:49:06 2025 GMT
            Not After : Mar 19 18:49:06 2025 GMT
        Subject: CN=67d1d723-f610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:0e:8a:af:38:8e:d9:5c:5c:9b:2e:77:a5:
                    8a:a7:a2:2c:02:13:6e:45:d8:2b:6e:61:34:ce:c4:
                    d6:cb:2b:ec:25:63:f4:cb:2c:22:2b:e7:22:17:06:
                    f6:f0:5b:8c:80:ab:87:15:0a:da:d2:88:d1:54:b1:
                    5a:6c:20:d5:72:5d:c7:ec:03:ab:c2:a8:8f:6a:c0:
                    db:d6:24:17:73:f1:9e:13:94:18:52:0d:dc:a0:10:
                    81:84:36:ce:9a:f3:76:0f:77:ec:78:7f:4c:28:58:
                    69:23:2b:e5:f8:24:20:89:c1:0f:ea:70:8f:a7:47:
                    e3:bb:c5:45:3f:d9:23:ee:11:51:a1:25:2f:6b:e2:
                    de:c7:20:9f:b8:34:26:01:d7:e1:ac:38:b8:58:f5:
                    c0:9a:51:80:f9:10:70:25:46:98:3e:ff:7d:01:85:
                    d6:dc:8c:75:df:ec:40:d0:12:b9:05:c0:42:c4:19:
                    e5:38:61:03:c7:3f:df:75:f9:8f:42:c1:7e:79:e3:
                    a2:3f:01:45:6d:0b:07:c4:38:ba:50:27:fc:08:ba:
                    81:1b:ce:63:cb:64:05:ba:dc:fa:af:de:f4:cd:46:
                    8a:4c:9c:d7:1a:31:8f:a5:79:28:07:51:23:2e:c2:
                    b9:6f:4f:d0:9f:c2:3f:12:e9:11:85:a6:5b:f1:e1:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EA:9B:E3:62:62:4D:94:14:DE:91:00:17:16:24:BB:18:AC:83:E9
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:b2:e7:e7:2a:87:87:5d:d4:09:52:9c:92:08:b8:94:95:
         65:29:6e:ed:3e:6a:99:b4:82:62:03:92:1e:0c:00:a2:24:c4:
         56:b1:b7:44:6c:c3:83:f0:fd:6d:26:ba:9c:37:b5:32:22:e6:
         58:9d:74:fb:26:71:76:c2:a0:74:41:6b:dd:4f:3e:da:5b:aa:
         72:a3:6f:68:c0:32:21:d2:3b:1c:07:1e:03:7e:1e:0a:9c:0d:
         32:bb:96:e7:df:29:5a:ff:ab:f9:f3:b0:78:61:5b:db:86:f8:
         29:58:f2:87:09:06:5f:12:7d:f4:29:4e:a8:4f:24:84:45:c8:
         b4:60:5e:1b:5b:18:60:dc:4e:2c:61:16:5b:5b:a2:ca:a2:30:
         97:ba:c7:f7:ce:8b:0f:da:2c:27:ea:5a:21:d5:9d:42:e7:9d:
         7a:6b:93:b2:da:00:f3:25:ab:30:a9:62:1f:17:cb:53:02:08:
         b9:e2:e0:96:9c:64:b2:b0:4c:d7:b3:6a:84:95:29:c4:4f:b5:
         41:70:2d:4b:d3:4e:78:e0:42:59:47:32:e1:33:14:fc:dc:16:
         0c:6f:12:13:ca:e0:71:89:a2:db:ea:b9:82:18:e3:d6:3d:c8:
         4e:09:12:d6:ea:bd:b5:17:9d:17:5c:4c:e8:db:1c:2c:92:6f:
         b8:6e:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:04 2025 by rpki-client