Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
File:                     h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json)
Hash identifier:          Z8qmjXRQ5PZKaNjg1OoaRd9ANJ+TX/lXKqP/0Oe7NjI=
Subject key identifier:   AF:E2:8B:C0:0D:28:89:63:C9:1C:3B:01:10:5C:09:D5:5E:73:96:69
Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36
Certificate issuer:       /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736
Certificate serial:       3495
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
Manifest number:          3495
Signing time:             Thu 12 Jun 2025 14:16:41 +0000
Manifest this update:     Thu 12 Jun 2025 14:16:41 +0000
Manifest next update:     Thu 19 Jun 2025 14:16:41 +0000
Files and hashes:         1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: FuZA7EbcKDOWzFaopSNRihZbTzUIljD8Zv6l5XXmbJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 14:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13461 (0x3495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736
        Validity
            Not Before: Jun 12 14:16:41 2025 GMT
            Not After : Jun 19 14:16:41 2025 GMT
        Subject: CN=684ae149-cb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:c5:32:88:d1:cd:42:00:90:49:2a:72:fc:
                    74:e4:c7:0d:d2:57:10:03:fc:c5:05:a8:8c:10:d5:
                    4a:16:71:7d:13:1d:bb:10:51:45:71:ff:6d:d0:0b:
                    a6:2f:69:84:9e:c7:bb:64:73:99:db:b2:74:bf:4b:
                    4d:b3:4c:0b:90:da:fc:15:fe:87:13:da:12:e0:84:
                    a2:ed:97:f6:e1:87:f3:ff:d6:3a:8a:17:18:d9:29:
                    26:ef:25:47:aa:da:d5:7a:66:a5:a7:05:c2:88:47:
                    cf:e0:53:3e:a7:37:21:a7:55:23:ba:35:f7:19:2c:
                    34:e3:e0:66:0e:14:b1:72:72:df:1e:db:3c:ea:fe:
                    c3:82:27:de:6a:06:28:74:c0:d5:2f:56:c8:6d:cb:
                    53:6a:2e:db:7e:31:b4:85:94:af:53:70:f2:17:32:
                    f5:0f:76:24:15:49:ad:89:41:94:30:64:a4:9c:88:
                    42:42:be:6a:5a:32:8f:ef:9d:ba:84:9f:43:07:ef:
                    db:fa:84:5c:20:76:bd:ae:dd:81:07:63:d0:4b:a7:
                    33:14:6d:65:59:0b:6f:01:ae:74:20:43:72:c0:43:
                    a3:9f:c0:aa:aa:60:17:ed:97:5a:ae:93:5d:25:32:
                    36:0d:7f:a1:f4:95:50:4c:b3:18:a6:e7:ce:2c:52:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:8B:C0:0D:28:89:63:C9:1C:3B:01:10:5C:09:D5:5E:73:96:69
            X509v3 Authority Key Identifier:
                keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:19:c5:6a:cd:79:ff:2b:89:d2:eb:78:25:dc:1e:c2:fe:
         51:ff:66:54:07:88:88:9e:db:ef:d4:c5:a4:f2:70:91:90:9d:
         49:56:a8:90:8d:e1:90:61:cf:fd:6d:8d:17:6a:b8:fa:25:fc:
         48:3a:db:1d:7c:ca:2a:c6:53:b8:22:6a:f4:18:b0:b3:1b:f2:
         3a:0e:d0:de:a1:e9:21:25:40:06:91:ee:fd:4c:45:8d:cb:e1:
         fd:22:65:0d:22:8b:f8:31:60:1d:92:b7:3d:c8:c4:2d:f3:e3:
         6e:9a:5d:10:c6:86:1c:cd:d9:c7:93:67:a9:76:08:be:20:4c:
         98:ee:15:3c:ec:70:f9:77:88:b7:f3:72:9a:53:cb:30:68:5d:
         22:fe:b4:dc:84:b9:b7:75:e8:87:87:9e:da:83:c5:4b:6d:c4:
         29:ec:08:f4:44:23:a4:75:13:c5:2e:96:89:6d:92:c9:78:4c:
         45:72:92:f0:f9:41:86:4f:76:bc:3f:82:1c:7a:a5:0d:79:3f:
         04:ed:ea:13:29:68:93:e0:00:76:b8:37:c0:f7:2b:17:f0:04:
         78:59:51:29:dd:a2:9a:e9:b2:8b:fe:6d:ea:12:84:44:e0:99:
         08:12:04:8c:13:09:cf:80:65:9e:ca:3d:9f:26:d8:60:98:1a:
         84:5c:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:28 2025 by rpki-client