Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
File:                     h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json)
Hash identifier:          C6l94jV0rr4KqZ40QfIpQR1hYuRqCF+PKeLupEQxIAs=
Subject key identifier:   3F:58:ED:70:18:56:14:2A:81:CB:A4:99:DB:6B:AC:6A:CA:BA:71:E8
Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
Certificate issuer:       /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
Manifest number:          01CE
Signing time:             Sat 07 Jun 2025 02:35:22 +0000
Manifest this update:     Sat 07 Jun 2025 02:35:21 +0000
Manifest next update:     Sat 14 Jun 2025 02:35:21 +0000
Files and hashes:         1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: qFsDUhcytE9UzjkK2JCOCsjs4bkSMZhJtkigX+1U6EE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 02:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
        Validity
            Not Before: Jun  7 02:35:21 2025 GMT
            Not After : Jun 14 02:35:21 2025 GMT
        Subject: CN=6843a56a-0668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:7e:79:9c:f2:4e:d8:c4:33:c3:53:0b:a4:
                    54:12:61:07:50:cf:30:f2:bf:c4:78:b1:1b:47:b9:
                    91:66:c3:a9:1d:8b:8d:0f:19:0f:b5:b8:47:b4:1a:
                    5d:44:3d:b8:8d:a5:87:4c:2a:46:8b:51:3b:0f:d7:
                    32:c9:aa:fa:2b:bc:20:7d:77:bd:65:d5:20:52:4c:
                    6b:23:62:38:33:f8:96:25:e2:05:ae:ff:a2:7e:5b:
                    3a:83:6d:38:95:f1:e4:8c:40:0e:6c:a0:29:a6:21:
                    cb:15:e2:5a:a1:1b:97:eb:82:73:68:74:6c:17:2b:
                    5e:e2:07:cc:70:45:45:42:e2:68:a1:f8:0a:82:c9:
                    85:df:da:4a:33:bd:0e:85:60:d0:03:28:f6:f3:d8:
                    95:e1:4e:cd:62:06:74:b9:12:f2:b9:4b:2c:d1:8c:
                    3c:53:eb:a7:b1:54:51:50:48:f6:5b:96:08:4c:62:
                    4c:5e:85:c3:a3:6c:44:db:8f:9a:50:0b:5f:69:64:
                    c6:ae:2f:91:54:0d:b8:18:55:92:c6:6e:de:f7:e4:
                    65:0b:09:2e:5e:3e:22:25:b5:8f:89:63:d7:d5:91:
                    01:59:6c:72:a9:8e:b2:86:50:1f:a0:c6:14:14:07:
                    21:62:c8:2b:52:2e:b5:47:3a:e4:d4:62:95:59:19:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:58:ED:70:18:56:14:2A:81:CB:A4:99:DB:6B:AC:6A:CA:BA:71:E8
            X509v3 Authority Key Identifier:
                keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:3c:36:a2:87:12:be:4b:e3:16:de:fa:2e:0e:42:3a:aa:
         f4:30:3c:ab:ca:f7:9c:17:d5:d1:f7:38:17:4f:4b:ff:18:44:
         0b:e8:53:c6:a8:48:95:c1:dc:92:d4:b3:4a:3b:9f:67:96:6f:
         a6:68:b9:28:cc:34:3b:ea:06:e6:54:4b:ef:be:0f:2c:29:a3:
         f5:d2:ae:08:37:16:cc:5f:e0:17:fd:56:c3:10:fc:d6:fe:e2:
         8d:bf:d5:c3:d1:54:1d:76:ec:c4:15:d8:2f:83:9a:49:30:5a:
         f6:04:17:0e:60:ce:6f:2f:a1:13:cf:d2:27:d7:33:c6:f2:31:
         2d:93:5a:31:d3:e5:7c:34:74:c6:73:f6:25:fb:a2:84:8c:16:
         05:54:81:b0:b5:fd:8b:27:87:c8:f4:0c:7b:db:15:58:22:72:
         83:e7:00:69:58:1e:f7:b2:72:60:8a:a2:bd:10:dd:5e:c3:fb:
         11:5a:48:34:e2:25:1d:2a:96:04:cc:b4:2c:4c:a4:49:41:47:
         93:8d:dd:a0:1a:c3:60:cf:23:c5:53:be:40:33:fd:94:a7:57:
         d8:ff:a5:58:bc:7e:23:0d:53:4e:bb:0e:a7:d3:46:c6:b3:3e:
         6d:88:67:61:91:02:90:3c:8d:0c:ad:15:1e:77:dd:22:c2:ef:
         4e:de:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:10 2025 by rpki-client