Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File:                     iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier:          kOT1SWj1x6sclY8FPNIlfaDyqDmsDtpgqZ2OYHfYlp4=
Subject key identifier:   D4:84:96:7F:3E:5E:C7:A1:87:47:13:CE:99:65:9A:B9:B2:70:79:80
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number:          013E
Signing time:             Sun 01 Jun 2025 04:06:20 +0000
Manifest this update:     Sun 01 Jun 2025 04:06:19 +0000
Manifest next update:     Sun 08 Jun 2025 04:06:19 +0000
Files and hashes:         1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: 5j3q07yOnF2DsW3BALw6b1fm6PXqe8zU99roJUu1MVM=)
                          2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=)
                          3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 04:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Jun  1 04:06:19 2025 GMT
            Not After : Jun  8 04:06:19 2025 GMT
        Subject: CN=683bd1bb-48be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:4c:32:7b:56:b1:35:57:e2:ce:8a:8c:49:
                    18:c2:cf:d7:48:90:24:14:b7:07:17:8c:f1:0a:9f:
                    fa:79:71:47:36:77:b2:e7:14:2c:6c:38:b8:b0:a7:
                    03:8e:ea:2f:73:e2:9b:11:e7:3a:97:a3:43:70:7d:
                    cc:27:7b:f1:a8:fd:86:88:3b:09:b7:6f:cb:7a:47:
                    c1:0a:e7:e0:9a:83:b7:50:e8:bb:d9:21:99:46:86:
                    9c:44:d3:3f:18:41:a4:e5:c7:c8:72:cc:77:9b:57:
                    88:ad:63:20:70:a7:d0:fa:0b:80:66:1a:ba:f7:15:
                    3e:09:b4:0d:29:62:07:0f:a6:b3:52:31:1d:af:b3:
                    dc:65:97:9c:40:62:f3:b0:c5:80:bf:9e:02:39:be:
                    18:62:64:b7:77:8f:14:ae:12:72:9a:4b:86:2a:46:
                    b4:b4:57:a7:d2:55:36:44:d5:57:af:81:2f:aa:e4:
                    cb:21:74:50:e2:5a:12:34:cf:37:de:85:82:eb:59:
                    d6:f3:f8:09:f3:28:0f:f4:12:b8:d7:d0:87:b7:d6:
                    fa:bb:46:02:7d:2f:12:b8:a0:7f:96:70:e2:1a:8f:
                    3d:3c:fd:e9:a7:69:3e:04:3d:33:59:43:cc:49:92:
                    d7:70:bc:56:0d:0d:22:4f:9d:80:87:7d:0f:97:e0:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:96:7F:3E:5E:C7:A1:87:47:13:CE:99:65:9A:B9:B2:70:79:80
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:e2:ef:9f:6e:cc:2e:17:8f:40:e2:77:5c:15:a3:df:fb:
         6b:4a:35:a2:b8:df:d0:bf:d8:83:7c:c3:85:7e:02:c2:8c:57:
         81:d9:4b:92:c9:9d:7d:2a:f4:ba:5c:38:9f:0e:40:25:7d:71:
         fd:69:30:8a:d7:c9:ac:13:d9:7b:3e:ef:74:4a:7d:25:53:ba:
         a5:58:9c:98:05:74:93:c6:ef:be:3c:eb:89:b0:f9:f8:e7:98:
         b9:cd:d1:c6:1e:cc:f8:f1:58:5e:41:5b:62:a7:f9:85:11:c5:
         d2:f9:6e:7d:c6:4f:3c:8c:2f:5d:a1:e3:7c:40:ff:0c:b4:31:
         eb:4d:97:72:14:66:c1:19:f2:53:d6:4d:5e:7e:9c:6f:03:a6:
         f1:bb:3f:f9:c9:9e:46:3f:cb:33:aa:99:e2:6f:96:83:b4:18:
         21:62:8a:61:74:a2:49:15:7b:d2:8e:c9:7c:8d:52:e8:5b:39:
         cd:14:47:6a:62:2b:02:dd:ef:dd:de:1e:c2:e7:ff:cb:ba:fd:
         c0:f8:47:e5:3b:ef:fb:54:a5:eb:80:9a:3e:82:15:d9:b7:ef:
         dd:b6:7b:5a:44:9a:44:8a:10:44:c7:ad:2f:d2:6d:b2:04:9e:
         34:ee:33:b1:6d:36:19:22:15:0f:3e:3e:c4:c1:4e:9b:41:7f:
         51:21:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 22:20:59 2025 by rpki-client