Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
File:                     ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json)
Hash identifier:          6TIA5oKP+c1HC2G1yDtnjjm4HZ1DdExilAxwR9SrduU=
Subject key identifier:   EE:F7:6C:2C:DC:11:03:31:93:88:26:EC:BA:48:28:62:E6:E0:AA:88
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Certificate issuer:       /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
Manifest number:          6E
Signing time:             Sun 01 Jun 2025 06:37:44 +0000
Manifest this update:     Sun 01 Jun 2025 06:37:44 +0000
Manifest next update:     Sun 08 Jun 2025 06:37:44 +0000
Files and hashes:         1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: 0oZNWqNRG1/TOmZGHAaIrVh4TLjWv03WAshzUv26ANw=)
                          2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 06:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
        Validity
            Not Before: Jun  1 06:37:44 2025 GMT
            Not After : Jun  8 06:37:44 2025 GMT
        Subject: CN=683bf538-9811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:27:18:8f:f6:48:a2:ef:03:0e:6c:ea:26:
                    6e:30:8f:df:42:14:55:3c:98:6c:cb:d0:8e:ae:43:
                    0f:50:a8:44:12:99:7e:83:26:70:4d:d6:76:96:f9:
                    99:fa:4f:58:9a:e6:08:e0:16:d5:7f:a2:5e:9d:4a:
                    a7:b9:b8:82:fd:03:86:67:09:e6:be:47:2e:0e:99:
                    a8:28:22:f4:78:8e:44:75:97:a3:83:41:94:a6:67:
                    e9:9d:22:20:78:55:ec:ed:7f:b1:ee:b8:4a:fc:01:
                    31:95:2c:b4:c8:3a:82:11:23:3a:79:8a:3e:1a:06:
                    51:d4:17:f4:98:27:98:be:a6:eb:97:80:56:9e:e2:
                    d4:10:69:a3:e1:57:f3:3d:be:a5:df:42:ff:81:c8:
                    ee:43:5e:3a:40:af:29:0d:75:f0:1a:ef:d2:e0:88:
                    19:a9:50:15:f1:79:d2:44:70:8e:bb:a8:2c:6b:c2:
                    18:0b:5b:95:84:38:38:f1:a0:82:9c:56:7e:23:fb:
                    6b:ff:ae:de:49:7a:3a:24:7b:79:5c:c2:52:65:e4:
                    3a:db:0c:1a:2c:44:86:fa:0a:47:9f:28:88:2e:c5:
                    56:66:4c:60:69:68:fd:3a:bc:6f:99:64:ab:cd:d0:
                    d0:86:01:d2:e6:26:01:62:83:24:a6:82:68:df:22:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:6C:2C:DC:11:03:31:93:88:26:EC:BA:48:28:62:E6:E0:AA:88
            X509v3 Authority Key Identifier:
                keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7b:82:b7:a4:a5:9f:d3:26:3e:38:e3:2b:24:b1:0b:53:6e:
         75:1e:66:72:2a:07:b7:40:56:a3:8b:61:7e:26:ac:6e:c4:b8:
         37:e5:a9:4c:ee:64:15:57:75:87:3b:07:a1:d9:0f:4f:93:57:
         39:02:50:b8:76:83:88:47:eb:9b:90:ee:72:51:f8:22:7a:9d:
         24:62:bf:a5:b2:44:bf:bb:c2:cb:48:a5:7d:a7:a9:60:6a:da:
         32:d8:0b:66:aa:8d:2b:85:86:3d:f3:d8:6c:61:0b:e6:3b:df:
         2b:aa:5a:ac:13:8a:e3:ed:32:2d:51:e8:30:8c:5d:4b:24:06:
         f1:5b:79:75:2e:db:36:02:19:8d:c1:8a:54:f2:9b:46:31:5b:
         98:41:77:35:02:48:48:82:fb:b3:9e:1b:bf:ec:d1:31:9e:8d:
         b1:4b:ee:e8:6a:da:ba:9b:e9:b2:14:32:fa:ac:88:5d:94:17:
         aa:ec:0a:6c:01:57:2f:ff:51:bd:dd:18:e9:20:5c:36:a6:91:
         89:b8:8d:a3:7e:dc:a1:d7:da:21:f1:e2:5f:5d:e7:22:d2:16:
         fe:b6:28:38:e5:09:d3:98:8a:07:63:34:6e:1e:b8:40:98:dd:
         91:08:5d:56:f9:2a:44:57:4b:a3:f1:31:b4:28:0a:f1:8f:53:
         ae:1d:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 21:46:09 2025 by rpki-client