Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          aYhLgGdDpzt1LNme4KNzhciL4OYey29Uv5yXStBfkDU=
Subject key identifier:   54:71:81:DA:88:0F:68:3A:07:62:FA:46:1D:55:1E:73:94:02:E0:68
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          E7
Signing time:             Sat 23 Aug 2025 05:30:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:30:45 +0000
Manifest next update:     Sat 30 Aug 2025 05:30:45 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: JOsuSfsZUtqmrVhLc3iiGf4kZgUK2y83UngCQsoBp58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Aug 23 05:30:45 2025 GMT
            Not After : Aug 30 05:30:45 2025 GMT
        Subject: CN=68a95205-4deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:db:7e:c2:45:bb:a0:f5:54:fc:25:16:73:
                    4c:4d:e4:16:54:3c:78:98:4c:f3:cb:d4:21:cb:99:
                    6b:84:d1:64:6b:34:7e:4f:c4:0b:aa:3c:1a:1b:e0:
                    04:9d:79:0d:e6:2a:97:f4:c2:53:ca:63:5b:15:9c:
                    58:01:d3:3f:8e:47:3d:be:2b:e2:9a:fa:4e:d3:cb:
                    b6:c8:84:1b:55:f4:97:9d:56:17:74:1c:df:e2:4a:
                    e8:24:55:12:8a:48:34:1d:82:92:d1:b4:d2:a4:f8:
                    ad:6a:88:d6:bd:26:0d:f2:fe:bd:0e:04:22:ae:97:
                    7b:bf:a6:27:6a:ec:12:ed:83:78:9f:cb:c1:3c:9c:
                    b6:62:35:bc:38:15:78:2f:d0:01:1d:f0:3d:1c:d2:
                    c7:f1:8f:3e:98:9a:88:8a:50:b3:90:23:5b:f6:73:
                    5b:2f:cf:35:8a:86:fa:fc:0f:d7:9e:0e:c3:fb:72:
                    be:5d:ec:1e:f8:90:ea:af:0b:b4:8c:0a:a5:31:b5:
                    ae:b1:e0:4b:65:56:91:bc:77:80:3c:a4:93:60:64:
                    7c:b5:de:1b:d6:d0:a0:82:db:98:8d:3d:fa:89:76:
                    a3:4e:e6:93:85:1e:f3:8b:cf:90:84:e7:2b:d5:2d:
                    15:d6:d4:61:bb:88:17:ce:46:dc:c8:64:b9:ca:dd:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:81:DA:88:0F:68:3A:07:62:FA:46:1D:55:1E:73:94:02:E0:68
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:a6:2a:dd:1c:43:bf:16:3c:92:39:a7:f3:5a:d5:25:af:
         a9:71:d8:15:4f:7b:e6:19:11:d5:d4:e0:29:79:f8:81:f3:59:
         83:02:19:7f:9f:21:89:3c:16:15:97:f8:ec:f0:0b:79:ba:c2:
         1a:b7:df:f9:8e:21:da:71:36:9e:6b:87:c3:ef:08:fd:5d:fb:
         8d:a2:b7:b8:dd:75:81:e5:1b:dc:06:40:6f:f5:c8:3a:e7:cc:
         b8:08:91:87:23:f8:72:f5:18:dc:b9:a4:21:36:83:32:04:80:
         7f:f6:81:8f:f4:d3:4e:36:97:09:98:54:94:bc:3b:53:2d:ae:
         c8:e6:87:29:70:ad:31:11:96:78:0c:ed:49:6a:9b:68:0c:8a:
         60:f3:13:ea:1e:2a:2d:56:3a:fc:92:3c:25:1a:fa:89:39:d7:
         40:45:30:58:65:8f:e7:bc:8e:65:e1:f1:8d:1b:5c:ee:9d:da:
         db:5b:95:03:eb:67:26:39:14:70:41:86:4f:61:bf:08:ad:dc:
         12:c3:30:c7:56:c9:b0:28:a5:75:0e:b8:d3:6b:cc:51:e4:84:
         ce:80:48:38:e0:69:52:22:c2:08:08:00:61:9c:10:76:f9:61:
         72:82:70:82:f1:ba:0d:d0:3a:1c:99:9b:0c:72:69:96:ff:65:
         30:f7:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:00:53 2025 by rpki-client