Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
File:                     ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json)
Hash identifier:          O6fk26iw0f5AArXf/4AyQ0X0ogoGGY2WNDuqZTqprDs=
Subject key identifier:   8B:88:36:30:54:C3:9F:DE:7D:4C:28:5D:AC:9C:7D:20:33:4E:4A:22
Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
Certificate issuer:       /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
Manifest number:          0266
Signing time:             Sat 31 May 2025 01:57:24 +0000
Manifest this update:     Sat 31 May 2025 01:57:24 +0000
Manifest next update:     Sat 07 Jun 2025 01:57:24 +0000
Files and hashes:         1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: 1GMf2h+zGRMqftL4iSe+8aXWJ4oM+rRimBNJTLnZ1gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
                          rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
        Validity
            Not Before: May 31 01:57:24 2025 GMT
            Not After : Jun  7 01:57:24 2025 GMT
        Subject: CN=683a6204-bf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:f2:5a:2f:2b:4a:dd:ad:49:e4:6c:90:02:
                    b2:2a:05:9c:db:2b:87:da:1d:99:15:ec:71:99:fa:
                    1e:b8:a9:ec:3a:a1:83:37:69:9c:fb:1e:78:25:7b:
                    01:1b:b6:d0:47:dd:2a:87:e4:8d:43:0e:ca:40:a5:
                    b1:8b:8f:e0:73:d8:3f:ed:48:f3:79:89:32:d0:1e:
                    d0:9b:a2:7c:de:86:8a:9f:a1:c1:24:d3:b2:df:ba:
                    ff:62:dd:8b:47:0e:8b:0f:05:6e:b4:40:b8:6a:67:
                    46:11:04:9f:97:68:f9:a8:49:af:c6:17:f6:39:0f:
                    9f:fa:30:9a:d5:30:5e:93:bf:05:fc:60:05:61:cb:
                    95:e9:13:e7:e0:21:ef:b5:79:ec:ac:d6:3d:c5:09:
                    29:58:a9:c3:d4:dc:f5:de:8a:ab:ef:89:c4:e9:d1:
                    12:89:48:68:e5:fa:94:7f:c3:03:0b:7d:c3:28:c8:
                    01:df:ef:21:df:7c:09:a1:02:33:c9:e7:d9:f3:12:
                    85:c1:f1:42:ed:91:e0:9a:42:7f:40:35:79:1d:6e:
                    07:79:1f:81:b5:e8:69:ca:c3:62:b5:5f:4a:db:9d:
                    1d:3a:9c:70:2a:f1:4a:6c:5d:f9:2a:24:38:4a:d3:
                    5e:e7:a9:4d:15:27:91:41:03:92:a5:fd:91:1c:54:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:36:30:54:C3:9F:DE:7D:4C:28:5D:AC:9C:7D:20:33:4E:4A:22
            X509v3 Authority Key Identifier:
                keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:2f:29:a1:bd:cb:06:9a:20:f0:c5:ad:fd:48:f6:b0:47:
         a7:8e:9c:dc:4f:a7:eb:cb:4c:f9:db:4d:4f:da:3d:7b:a7:59:
         f1:f7:ab:b2:4a:95:ea:53:3e:0a:1f:c9:a7:b1:aa:ee:96:3b:
         0b:53:fe:c3:7d:82:d1:b8:cb:be:48:e3:b3:87:9f:3f:84:7e:
         cc:3c:5a:95:9e:2c:3a:71:c5:21:fd:12:20:ee:0c:5b:cb:66:
         21:73:77:16:5c:c5:d4:89:3c:e8:cf:73:e0:03:59:df:b1:87:
         cf:2d:bd:09:51:52:b8:33:62:58:c9:01:05:c9:22:99:79:fd:
         f3:3d:7a:22:67:37:b5:30:6e:47:d9:41:53:44:09:e3:d1:e3:
         68:a7:37:51:e1:e1:38:4b:1d:57:5a:c1:be:27:ef:aa:eb:7c:
         3b:42:c9:61:96:79:5d:c3:fe:76:6a:35:74:12:b1:a5:7b:53:
         28:23:38:a3:90:e2:49:81:7f:47:16:6c:f4:dc:e5:be:77:fd:
         aa:3d:e1:ab:a0:50:31:f4:36:cc:5c:63:59:b9:62:33:33:df:
         4d:48:6e:b9:8f:4e:0c:b1:33:7b:e0:e9:12:51:09:cf:b7:a9:
         5c:ec:3f:49:4a:b8:46:2a:1b:33:36:b4:de:27:f1:b8:4b:3b:
         c7:68:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:52:16 2025 by rpki-client