Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
File:                     Lvixd2KxkBov3d7v9lAe45ar24w.mft (raw, json)
Hash identifier:          wu6H52BCvtU7ZysSfcc9zRn1rKwg7CVxNeZqapD2Rz0=
Subject key identifier:   B7:25:67:C5:63:D6:BE:56:C0:CB:F9:4B:F1:22:3C:E4:FD:D2:7A:5B
Authority key identifier: 2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C
Certificate issuer:       /CN=A912E92E/serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
Certificate serial:       2017
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
Manifest number:          3616
Signing time:             Mon 02 Jun 2025 16:09:45 +0000
Manifest this update:     Mon 02 Jun 2025 16:09:45 +0000
Manifest next update:     Mon 09 Jun 2025 16:09:45 +0000
Files and hashes:         1: Lvixd2KxkBov3d7v9lAe45ar24w.crl (hash: IVapgRX3R4keuG87AFc4qCYop5nHlL8ipGxudqdbS5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl
                          rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8215 (0x2017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E92E, serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
        Validity
            Not Before: Jun  2 16:09:45 2025 GMT
            Not After : Jun  9 16:09:45 2025 GMT
        Subject: CN=683dccc9-1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:d7:df:f8:3e:dc:0b:16:ea:31:9c:f1:57:
                    0d:b0:26:71:3b:ae:a3:c5:e2:53:6c:17:c6:d9:c7:
                    98:0d:a5:16:8d:8e:4b:e2:b2:c8:37:80:b7:92:22:
                    d7:36:92:55:35:8f:06:30:dc:e9:67:e0:d6:77:1b:
                    34:ab:b0:b7:4e:92:7f:66:f2:e6:7a:ff:d5:db:69:
                    7b:33:d3:f7:df:53:62:93:42:ce:1b:1d:8a:83:fb:
                    06:c5:f6:61:37:be:0d:11:c9:fa:68:ec:75:69:f0:
                    8b:19:02:84:5f:f8:62:7f:6c:4c:02:72:8e:59:a4:
                    77:7e:8c:2b:da:3b:94:5d:cb:46:d0:51:4a:d3:71:
                    55:07:3b:3b:c0:9d:c3:45:2e:f0:e6:92:2f:7f:46:
                    6b:d8:59:a8:90:02:4f:6f:13:1f:65:0b:fe:09:c9:
                    63:c5:ae:c4:2f:f5:fa:be:bd:5b:27:ad:65:60:6d:
                    92:49:b2:35:68:c4:d8:33:c0:35:d4:8c:4d:16:f2:
                    79:2f:74:8e:67:cc:7a:27:a7:2f:22:b9:9d:b4:aa:
                    d2:a5:b1:de:ae:56:0d:48:10:c9:3b:da:57:9a:50:
                    73:15:1e:e1:c4:32:3e:84:d0:dd:97:59:d8:14:33:
                    cf:f4:f9:c0:71:b2:ed:56:0d:16:63:7e:3f:f8:38:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:67:C5:63:D6:BE:56:C0:CB:F9:4B:F1:22:3C:E4:FD:D2:7A:5B
            X509v3 Authority Key Identifier:
                keyid:2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:a5:ae:cb:51:49:69:4e:e0:e4:d7:0f:16:3e:52:70:51:
         e9:90:ab:76:91:12:da:6c:ee:cb:4a:ac:87:8c:a7:48:c0:db:
         c7:58:f5:10:de:11:e9:72:c8:cd:27:74:3f:58:6b:ff:34:82:
         a1:eb:f7:47:cd:c1:64:bc:64:87:b8:a1:34:e2:6c:9f:37:ea:
         3b:94:a2:f6:16:5a:9c:34:d7:2c:19:88:56:70:02:76:d0:11:
         78:7c:9f:15:82:7c:7b:13:0e:2b:dd:e7:cd:66:4a:e7:0b:c8:
         0d:f2:ec:41:ca:fe:a7:7a:93:4a:62:b1:26:16:21:87:85:e5:
         5f:fa:1f:10:7a:13:0a:13:21:cf:38:09:9e:37:89:8c:be:4d:
         a3:0b:f4:a2:c7:f3:35:04:2a:ee:ad:96:9d:33:e6:24:b8:a6:
         8b:32:9f:5a:bb:7e:c5:95:64:30:ba:54:18:43:e1:8f:ec:f5:
         b9:f6:d4:f5:14:99:ee:a3:36:03:65:bb:7f:06:63:5c:d3:01:
         4c:63:4f:1f:8a:d3:a0:be:96:0f:8f:29:8a:bf:87:41:22:42:
         3d:a6:d8:a4:33:15:25:60:75:25:5c:05:28:52:ad:ad:de:1e:
         eb:e9:26:ba:c0:39:8c:28:ee:60:84:bc:7c:38:25:f8:96:81:
         34:8a:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:15:11 2025 by rpki-client