Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File:                     aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier:          5q7whIUJtQ08nOzr6X0y4PFWvW1M0mvi9qM4wC9ia9Q=
Subject key identifier:   E7:DE:D3:76:6E:2E:51:99:E0:F0:80:6C:67:E2:75:4C:A7:FB:4A:48
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer:       /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number:          98
Signing time:             Thu 03 Jul 2025 06:38:56 +0000
Manifest this update:     Thu 03 Jul 2025 06:38:56 +0000
Manifest next update:     Thu 10 Jul 2025 06:38:56 +0000
Files and hashes:         1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: MbTzoZJNWmErz4jKM9oB0ChDzz5tBIpmUhA5njR9cgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
                          rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
        Validity
            Not Before: Jul  3 06:38:56 2025 GMT
            Not After : Jul 10 06:38:56 2025 GMT
        Subject: CN=68662580-aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:0e:0f:77:ab:f9:59:b1:fc:b7:8d:9e:ca:
                    90:54:52:8d:b6:fb:86:be:9e:d6:bb:c6:47:1f:1a:
                    e8:b6:8c:67:09:cf:36:61:89:28:ab:c7:a0:cf:41:
                    f7:b5:1e:18:6d:49:81:7a:0c:ba:c1:c2:51:2d:56:
                    9c:6b:94:f1:98:72:df:98:4d:4e:15:60:9a:b5:40:
                    5d:ac:2a:2c:6e:e8:47:8f:c8:f5:73:49:90:d7:84:
                    76:da:f7:31:a6:eb:f3:59:01:d9:13:11:6e:2d:80:
                    25:08:aa:cc:66:d7:cd:64:6b:0c:e5:b6:df:15:79:
                    43:67:0e:0c:ca:85:1b:07:5e:a6:a1:38:1f:ea:0f:
                    b7:91:5f:2c:99:dc:d7:10:c5:3e:f0:1f:6b:91:ed:
                    59:51:09:24:a0:a6:fa:e5:0c:53:c2:3a:40:94:6a:
                    c9:e3:fc:ea:31:a1:40:74:ff:53:84:65:7a:dc:2a:
                    2e:19:6d:72:fd:50:df:35:e2:ba:3e:db:42:53:7f:
                    53:3e:2e:29:2a:59:dc:07:c3:97:3b:35:f4:75:cf:
                    df:29:05:72:0c:51:e1:64:af:f5:6e:02:27:56:1a:
                    c2:6f:07:46:7a:5e:f9:a4:48:19:76:a9:d5:c0:c7:
                    54:8b:64:f0:10:ed:f6:bd:78:88:dd:ee:3d:9d:e4:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:D3:76:6E:2E:51:99:E0:F0:80:6C:67:E2:75:4C:A7:FB:4A:48
            X509v3 Authority Key Identifier:
                keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:2c:56:b9:9b:f8:6f:b1:7e:bd:0b:3c:c8:b1:f2:97:74:
         f5:71:51:06:0c:33:47:d3:82:80:fe:aa:87:ff:ac:c3:3e:b0:
         98:70:40:12:02:f0:d4:58:1e:61:c7:84:7e:35:86:ab:d5:88:
         55:d3:12:fe:52:de:87:78:09:65:ad:dd:37:49:15:ca:79:3d:
         6a:45:ee:d5:ff:26:8d:e4:06:26:14:c0:35:97:80:14:a8:30:
         80:eb:5d:12:a8:36:96:23:0f:6a:ad:4e:1e:c5:cf:60:68:d1:
         0d:8e:66:47:84:a8:ca:f6:4c:c7:ac:97:4f:5a:36:ed:a7:97:
         47:6e:c1:00:e6:29:d6:a4:8a:c5:ab:7a:d0:11:1c:b3:ab:a4:
         02:ba:48:37:e7:62:f0:ee:00:ad:30:b5:97:3e:e8:7c:db:97:
         97:ba:2d:11:e8:8b:da:87:3f:03:25:d5:ef:d7:a4:70:78:4d:
         0f:ac:9f:b5:96:97:19:cb:0c:07:6a:bc:dc:e2:aa:8a:13:e3:
         2f:83:70:9f:bc:0d:3b:93:61:03:c2:95:6c:ee:05:f1:a0:30:
         ab:24:f4:22:fb:fd:01:0d:a4:d3:ff:da:3e:8a:25:65:d5:29:
         04:b2:28:3c:0b:da:23:65:6f:6e:c3:46:cd:23:16:a7:3c:7a:
         e7:cb:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:50:02 2025 by rpki-client