Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File:                     h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier:          YE3BICg71KWV5TcCuTXlF1lHdDAYdG6R3jPy4E5S0RM=
Subject key identifier:   21:EF:58:68:78:59:71:32:92:AA:31:24:EF:C4:C6:02:57:76:F6:70
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer:       /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial:       3493
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number:          3493
Signing time:             Sun 08 Jun 2025 14:16:42 +0000
Manifest this update:     Sun 08 Jun 2025 14:16:42 +0000
Manifest next update:     Sun 15 Jun 2025 14:16:42 +0000
Files and hashes:         1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: ZuzrcufX2op4mSm9yad7jDK2t5BzddEbd0+F+BxO/p0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 14:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13459 (0x3493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
        Validity
            Not Before: Jun  8 14:16:42 2025 GMT
            Not After : Jun 15 14:16:42 2025 GMT
        Subject: CN=68459b4a-11ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:c5:87:f1:06:dc:19:35:dc:9f:da:b1:3b:
                    c8:3d:84:8d:a1:b4:d7:43:c9:d0:51:36:e3:74:53:
                    b9:8f:ed:dd:78:b3:c4:ec:58:2b:95:22:94:55:d0:
                    1c:db:c5:7f:4b:d3:2e:54:3e:53:4e:c0:4a:29:b7:
                    64:62:c4:25:9a:53:5a:53:b9:64:64:b4:c9:05:f8:
                    97:3d:af:9f:f8:71:e1:5e:29:b3:a1:bd:d2:8d:57:
                    95:5d:2e:39:97:32:66:6a:46:f1:83:df:f3:55:e0:
                    19:a2:37:02:54:bf:e3:c8:59:96:b3:16:77:a7:11:
                    76:3d:da:19:07:30:c9:07:b4:61:16:07:4b:20:f7:
                    4b:0b:50:84:4e:49:97:2d:2c:18:5c:29:05:e5:22:
                    ec:24:69:c6:34:15:45:04:35:f9:b9:f8:61:5e:9a:
                    6d:c4:bf:22:09:bd:3c:99:ac:13:de:18:54:5f:e8:
                    2f:7a:dd:39:8b:a1:7d:67:e1:fb:22:fd:ce:6b:d9:
                    3b:75:0f:ef:7f:4c:a1:36:aa:e4:51:6f:06:1e:b1:
                    52:51:a8:58:8c:89:9a:53:9c:c3:4c:87:be:e9:8b:
                    62:5e:96:bd:ef:e2:9b:df:17:64:fb:75:e8:fe:e4:
                    cc:f9:54:f2:01:f1:fd:60:d5:ff:34:0d:e8:58:5d:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:58:68:78:59:71:32:92:AA:31:24:EF:C4:C6:02:57:76:F6:70
            X509v3 Authority Key Identifier:
                keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1e:67:9c:9c:9f:ca:a9:f9:7e:a6:0c:f5:a7:29:92:4f:39:
         01:c9:d6:6c:80:87:68:e1:b7:b0:ae:07:ad:f9:30:7d:63:de:
         e2:76:08:47:f3:73:c6:12:c5:81:ed:1f:1f:9a:0f:7b:ef:30:
         70:92:5f:5f:99:d8:e4:d2:15:a3:57:0f:f4:9b:c8:0b:6b:56:
         bd:5a:63:0e:89:97:93:4c:97:62:11:23:79:c8:fc:2b:be:df:
         d4:59:ae:3f:d5:9d:79:68:c1:c9:f2:b0:77:62:71:4d:2c:00:
         63:1e:3d:c1:52:5f:be:b4:4f:97:67:71:4c:06:37:33:85:5e:
         6c:56:b9:f5:94:ee:33:9b:da:24:99:92:f5:4d:e4:3e:97:38:
         9a:1d:69:5c:60:e8:18:1d:a0:8e:86:55:9b:a7:9b:d6:5f:f0:
         9f:20:cc:60:5c:d4:36:6e:78:aa:30:62:dd:7a:3d:30:a0:98:
         98:d0:e7:8a:db:6a:f4:58:05:78:49:96:eb:1b:88:5d:5e:94:
         22:6f:3e:f6:a0:62:0f:a1:52:de:a6:b8:99:4f:34:ba:8d:0e:
         67:d6:e6:96:eb:cd:58:09:07:2e:40:bb:74:64:a1:5b:6a:84:
         b2:13:de:b6:92:cb:fa:33:74:f7:8d:06:85:65:b2:e0:4c:bc:
         7d:d9:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:03 2025 by rpki-client