Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          Epj/ImrfdxQCBFjQpnxqcV0S386DszL3Bfj6ohuOXPc=
Subject key identifier:   DC:2D:B0:E1:23:E0:8E:AD:9A:CA:48:F0:3A:27:A8:33:23:AC:D7:71
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          69
Signing time:             Sat 23 Aug 2025 07:12:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:12:08 +0000
Manifest next update:     Sat 30 Aug 2025 07:12:08 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: FXCBolsYi/z0dLoLqyxPGRni3lxmIwI/V+rG2C9wMbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Aug 23 07:12:08 2025 GMT
            Not After : Aug 30 07:12:08 2025 GMT
        Subject: CN=68a969c8-e6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:fe:65:61:b4:9c:c0:5e:f9:3a:14:12:92:
                    31:1a:9e:bb:6b:f7:e6:a3:e1:43:f2:bd:f0:23:d7:
                    ea:24:11:65:93:9b:33:38:be:be:04:9d:7b:41:bb:
                    03:f3:0d:1c:24:be:6b:56:95:d0:9c:2b:7f:35:fb:
                    a1:30:9c:8d:ad:2d:0c:cf:36:98:c0:3d:c4:d8:0c:
                    15:e5:05:17:74:5a:d8:a9:2b:2b:2c:39:e3:63:99:
                    b2:86:1c:ca:45:f8:46:85:43:2f:b9:57:e8:fa:ad:
                    d2:8a:fe:75:d4:3b:4e:f0:0b:25:45:85:19:1b:b5:
                    89:46:60:60:0b:3c:08:b5:4b:89:c3:3f:ed:95:a4:
                    fb:87:2d:3e:c9:ea:4f:93:f9:07:c9:ff:df:2d:39:
                    8e:c2:2b:51:bc:d3:b9:dd:37:76:ef:cb:82:ba:de:
                    4a:36:08:85:5c:a9:b4:3c:57:a5:2d:71:db:ad:e9:
                    bf:da:a6:6d:35:9b:91:d9:a1:d9:4e:a6:52:5a:94:
                    d2:ae:69:ba:7e:fb:e7:54:f0:4e:6b:98:bc:57:7e:
                    48:4a:f8:a1:72:0e:45:30:99:92:b3:69:61:e7:ae:
                    1b:98:64:b5:96:45:e7:73:5b:ed:94:2a:77:a9:5a:
                    d2:a4:39:cd:bf:a4:ee:85:fa:2b:68:06:28:33:a9:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:B0:E1:23:E0:8E:AD:9A:CA:48:F0:3A:27:A8:33:23:AC:D7:71
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ad:84:24:6d:55:c7:87:6e:03:87:ae:a6:57:32:24:83:db:
         26:0c:10:c8:7b:86:dd:b2:cc:ff:4e:aa:7c:ee:70:fb:16:e3:
         01:49:78:34:30:c1:65:a1:de:25:3a:07:af:4e:97:bb:d2:ee:
         93:3c:f1:b1:8b:a7:d6:a4:f2:9b:33:66:c7:c7:f2:1e:3a:bd:
         53:23:a3:66:66:84:e2:4d:3b:e8:8f:76:70:33:56:d2:51:99:
         36:b3:7e:38:c9:02:13:a7:86:59:9a:f9:eb:1b:cf:df:57:51:
         80:6f:f3:a1:f7:f3:13:87:2c:d2:86:41:98:eb:4e:33:dc:68:
         6f:e9:47:93:5e:66:6a:37:a8:e2:f8:94:24:68:b2:af:8b:cb:
         b5:16:f2:92:b5:cd:38:cb:2c:d2:37:b4:9a:66:4b:81:f4:f7:
         3e:d0:b2:83:5b:e2:0a:39:28:ff:c6:32:f5:86:b5:ce:22:a4:
         cf:d8:7e:7f:83:63:e0:47:4a:de:e1:f5:42:fc:cd:bf:85:10:
         4b:57:35:b5:64:5f:c8:ef:20:f3:61:72:fe:85:b9:eb:9f:76:
         51:57:cb:03:98:61:c4:e5:f4:35:a5:91:c4:94:63:7d:1c:f8:
         c7:bb:ed:8d:46:08:ec:11:19:e9:0b:0e:6b:65:65:39:b7:98:
         0c:56:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:14 2025 by rpki-client