Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
File:                     mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json)
Hash identifier:          LI+B+R7AP89OHRd/HrGJjJpkxOHu9jWiIJj95zJwAdU=
Subject key identifier:   D3:71:C3:C1:6A:91:E3:91:D4:C8:C0:4B:5C:D9:EB:8A:E6:BA:61:2D
Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D
Certificate issuer:       /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
Certificate serial:       0FBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
Manifest number:          0FBD
Signing time:             Fri 22 Aug 2025 17:38:02 +0000
Manifest this update:     Fri 22 Aug 2025 17:38:01 +0000
Manifest next update:     Fri 29 Aug 2025 17:38:01 +0000
Files and hashes:         1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: /04EjDMVhe8IszOc6eB7g2F2K7CqdsEDl0/7i3sh2Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl
                          rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4029 (0xfbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
        Validity
            Not Before: Aug 22 17:38:01 2025 GMT
            Not After : Aug 29 17:38:01 2025 GMT
        Subject: CN=68a8aaf9-a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:f4:54:a5:14:a6:c0:60:f7:c0:a9:08:76:
                    af:e4:49:ef:f5:8b:2c:12:e5:45:13:23:a6:84:9a:
                    a1:ff:b6:03:bf:e9:b8:4a:15:55:57:19:5f:62:7e:
                    c1:8f:95:5c:3e:e7:09:af:f4:30:52:16:1c:93:bb:
                    7c:b5:ca:e9:d2:ea:f6:76:2e:67:d7:36:17:9d:9b:
                    28:a0:af:70:d1:85:21:fc:0a:17:7f:6a:b2:a7:d2:
                    2e:d1:26:0a:69:14:fb:60:6f:15:8a:e3:ff:14:b7:
                    f8:0e:42:9c:5f:03:4d:98:67:b8:1e:9a:6b:28:ea:
                    74:1e:bc:0e:42:99:23:d3:60:8e:a5:b3:65:c8:c2:
                    b4:7b:0b:24:35:64:95:6f:7c:95:32:8c:7f:ea:c5:
                    97:ad:e0:8a:9c:94:06:04:27:d5:6d:cd:d6:50:fa:
                    5c:3d:94:09:96:b0:75:88:d3:50:15:29:e1:8e:b7:
                    31:16:80:18:26:51:7c:83:af:8d:4e:54:fe:5f:bb:
                    76:86:59:81:c5:7b:67:3d:2f:07:c0:98:9d:1b:ce:
                    10:79:75:d8:13:5b:37:8d:ce:14:37:75:73:0a:32:
                    e8:1d:39:bd:96:6c:0a:66:c7:41:d9:ca:33:2b:8f:
                    2b:d0:a5:f0:e8:ce:13:da:ac:93:23:21:76:e9:fb:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:C3:C1:6A:91:E3:91:D4:C8:C0:4B:5C:D9:EB:8A:E6:BA:61:2D
            X509v3 Authority Key Identifier:
                keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:61:45:57:d3:26:95:71:8b:b4:dd:11:8a:f1:23:57:43:
         9b:98:0f:15:2c:6d:12:54:95:3b:b3:26:7e:13:e2:6b:ce:9a:
         8b:42:06:a8:64:97:9b:be:20:e6:e7:55:03:4d:bf:e2:4a:79:
         72:e7:49:aa:62:7b:f6:ce:1f:f6:ff:9f:74:3b:6a:4c:1f:64:
         2d:bb:6a:6b:6f:2d:8b:a5:a0:eb:76:3a:ac:43:bf:0d:2c:dd:
         fd:ae:67:64:e3:16:ee:02:a1:bf:22:05:82:dc:5d:9d:80:d0:
         49:7f:c7:63:82:a6:d1:d6:5e:dc:9d:5b:e7:d9:42:37:a9:43:
         b7:4b:62:7a:92:da:d6:cd:40:5a:6c:03:97:f5:85:ae:73:d2:
         f6:51:b8:f2:ef:ba:69:50:3e:54:44:3d:4d:cf:e2:5e:7f:8a:
         3b:12:d9:ca:d5:47:d5:78:06:d6:e1:bf:92:fd:f9:78:1e:ca:
         3a:88:8a:0d:bd:1d:23:ff:9d:74:65:e5:12:f3:9a:bc:57:d0:
         0e:43:ba:b5:b9:b1:65:34:3b:7c:e2:e9:fa:41:c6:ab:97:19:
         2e:88:8c:71:0e:88:ac:c4:21:2a:21:50:9e:0c:98:10:6b:eb:
         87:de:43:a2:eb:56:33:36:8e:fb:2c:ab:bb:72:85:40:94:e2:
         07:8c:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:51 2025 by rpki-client