Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          aeqDADLDn7KqHro1InN9LBJAk1DcFDeTzxRad4XXrtY=
Subject key identifier:   F2:06:6D:B0:C0:F5:4C:0E:AC:86:6C:AC:F1:14:6A:F6:71:DE:59:D9
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          03E6
Signing time:             Thu 05 Jun 2025 00:24:43 +0000
Manifest this update:     Thu 05 Jun 2025 00:24:43 +0000
Manifest next update:     Thu 12 Jun 2025 00:24:43 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: EOKHMm5G0xxm+0m3XTSl3uQ6h1h4xsxEFrm07LlqxVk=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 00:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Jun  5 00:24:43 2025 GMT
            Not After : Jun 12 00:24:43 2025 GMT
        Subject: CN=6840e3cb-dab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:ad:cc:c5:06:58:53:ce:e0:87:90:27:38:
                    14:ee:e1:35:f2:79:ea:36:2f:dd:8b:eb:e8:a4:3f:
                    08:4a:a6:01:0c:45:67:77:79:7b:d2:17:b3:17:e5:
                    83:ef:e9:b3:13:88:59:0f:c3:bd:8b:12:85:97:ee:
                    73:69:ec:cf:58:ee:93:ce:56:01:28:26:2c:fc:90:
                    1a:56:e8:e0:d0:de:9f:11:0e:de:9e:b5:50:b5:16:
                    9f:00:6b:ef:b7:fb:48:4e:5f:12:79:12:c6:13:71:
                    25:fd:62:08:47:52:bb:88:2c:07:e2:56:78:72:0e:
                    38:72:52:1f:bd:3d:d7:80:76:73:a5:7c:d1:95:02:
                    3c:34:f8:e3:2c:73:94:b4:2e:1e:48:3a:e6:38:98:
                    76:f1:56:ae:d0:76:7e:3f:d6:62:e2:36:cf:99:ba:
                    98:1b:49:b0:7f:b8:1d:81:3c:13:07:b0:96:6b:5e:
                    54:a4:33:f0:0b:16:e0:12:1a:01:fb:c4:f0:3d:fc:
                    61:93:10:7a:8f:21:6e:8a:81:31:bd:8a:ca:a1:c8:
                    76:cf:6d:93:e2:1e:94:03:01:d4:2d:20:af:43:57:
                    eb:b0:ce:5f:9a:61:a3:98:18:3b:6c:5f:c8:8d:92:
                    96:48:9a:0d:bd:e0:95:30:1f:f8:b7:f8:40:23:c6:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:6D:B0:C0:F5:4C:0E:AC:86:6C:AC:F1:14:6A:F6:71:DE:59:D9
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:6a:c8:03:ba:da:b1:a3:b9:4e:98:c1:a7:91:92:0d:30:
         40:1b:eb:03:15:ce:5e:e6:57:ef:1a:d3:b3:63:cf:ae:fc:87:
         92:92:9a:2a:e6:b7:31:be:56:37:41:fa:ac:bd:ad:43:c1:e5:
         2a:db:eb:38:e9:e9:1e:00:c3:36:bd:dc:57:71:78:05:13:ff:
         e2:28:bc:2c:64:ba:96:b2:c6:25:37:df:ee:5f:9e:61:f2:28:
         4c:4d:d8:d5:41:02:48:ca:1f:ec:71:27:28:99:84:4f:31:3d:
         41:1d:29:9c:f2:25:16:2e:34:93:04:5e:27:89:92:9b:ba:97:
         45:cc:90:24:32:c8:a0:47:f7:b3:ea:be:a3:43:6b:77:15:5e:
         2c:4a:02:a2:9c:5a:11:7b:ce:3f:5a:5f:ea:fd:39:8c:6f:21:
         2b:c6:f5:9c:a7:0f:aa:e9:00:63:00:f6:27:b9:42:20:1e:e5:
         68:64:c5:d8:26:a1:71:d1:fb:c7:84:36:ee:0b:f5:1c:e0:ff:
         ce:4b:4f:26:d9:c4:5d:36:a0:ba:6f:15:1c:1d:fa:1e:c6:e7:
         fa:83:5f:bf:23:ea:40:c6:85:8a:38:45:88:f6:19:6f:0d:63:
         b5:8b:d1:85:6d:6a:e3:5d:87:7e:f3:c3:72:45:47:29:ec:cf:
         98:59:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:03:53 2025 by rpki-client