Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          evmSJruhhnyrQE3vpadBpuRkDg4rAKS7aF8IIYlQ8X0=
Subject key identifier:   FA:55:E7:15:C9:47:7E:A1:B9:BC:A4:21:7B:02:25:B4:4C:47:DD:6E
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       03DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          03D7
Signing time:             Sat 23 Aug 2025 00:51:37 +0000
Manifest this update:     Sat 23 Aug 2025 00:51:36 +0000
Manifest next update:     Sat 30 Aug 2025 00:51:36 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: vJtqPUBXPBYthJsI3xFoHGwFLEC6kLr2Gi8lS+dYo+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Aug 23 00:51:36 2025 GMT
            Not After : Aug 30 00:51:36 2025 GMT
        Subject: CN=68a91098-aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:7c:7d:0c:41:f3:ca:41:ce:bf:02:7b:5c:
                    4f:86:d4:d7:78:84:e1:79:3e:68:e4:52:36:1c:13:
                    a0:45:40:81:bc:4f:2b:e7:b7:f2:b5:e6:2c:25:2c:
                    c3:6b:21:7c:c7:88:a3:32:c3:66:2b:16:29:ef:f7:
                    19:ac:a5:ee:31:b2:75:8b:f8:49:cb:9f:af:f8:0f:
                    a7:e4:c3:b7:90:31:34:df:0a:3c:6f:04:0c:79:2e:
                    cd:19:2a:5a:3a:2c:5e:bc:72:35:a4:1a:e8:93:2a:
                    ae:09:c5:89:2d:bb:07:2e:b2:4c:e5:15:b5:27:01:
                    36:6e:ff:0d:36:c0:30:40:4a:d1:b0:47:99:5d:a6:
                    0d:24:d5:24:a7:60:88:1c:d2:94:36:08:21:91:ff:
                    68:4c:72:58:30:b6:fb:15:79:af:99:49:d3:b8:fc:
                    d9:ce:7a:6c:d9:6c:eb:08:78:e8:30:10:65:25:72:
                    72:7c:67:cc:77:f8:82:5f:4d:e1:37:51:be:5d:3b:
                    a7:d5:47:63:a0:16:b5:aa:e5:9b:2c:26:fa:4c:2a:
                    d4:28:40:14:2c:ce:a6:a6:ab:e3:84:d2:eb:dd:fe:
                    ec:73:9e:61:ca:e5:e5:ee:d1:28:14:8d:0c:f8:63:
                    25:e3:0e:b7:5c:d6:12:e8:f0:ba:82:ed:e9:47:56:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:55:E7:15:C9:47:7E:A1:B9:BC:A4:21:7B:02:25:B4:4C:47:DD:6E
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6c:d8:49:80:a6:68:b3:33:57:16:f2:fc:d7:f9:71:fe:d5:
         2c:80:a9:52:57:c5:a6:6d:af:1c:34:a0:ac:70:d9:0d:d6:74:
         03:00:6f:48:09:7c:a1:bc:58:59:07:b2:f6:07:ff:e1:99:d6:
         7d:b7:89:82:44:cc:70:b0:a9:22:d2:2c:f1:3b:9a:9d:7a:79:
         bb:67:82:1a:34:3c:be:82:a8:4b:35:47:ed:05:6a:27:70:c5:
         24:9f:58:ce:5e:d2:17:17:1c:d2:69:10:3d:4e:48:23:30:af:
         d9:3e:70:75:18:5c:ec:8f:9a:69:39:e9:d0:b0:26:f7:2b:5b:
         45:14:27:a9:95:21:db:c6:40:51:b8:4d:ec:38:5d:9e:55:0e:
         13:9a:0b:78:1f:4f:f2:22:e2:6f:7f:f8:ad:72:7b:27:79:91:
         4a:2a:15:36:37:c8:9c:7a:11:44:88:96:21:75:af:7a:af:66:
         61:3b:3b:a3:0d:73:62:f3:53:d7:ef:29:67:1b:5a:29:27:4c:
         dc:46:a9:31:51:db:3e:5e:7d:23:44:ab:9c:be:3e:e0:d4:cb:
         2c:b4:59:d4:f6:ef:fc:e7:84:60:9a:2d:66:0f:f5:1b:19:f0:
         69:b6:39:80:9e:cc:f9:f8:19:5a:9a:10:cf:39:8e:08:35:fd:
         d3:78:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:28:40 2025 by rpki-client