Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          IsZe0Za5WFmMIhqBTMjQ6Uvw5OgqE4WFm/ghTAZpMZs=
Subject key identifier:   7E:E1:6C:E1:7F:70:02:FD:E0:83:F0:75:D3:90:3B:BE:29:90:3C:F0
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       240A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          60B5
Signing time:             Fri 22 Aug 2025 14:15:27 +0000
Manifest this update:     Fri 22 Aug 2025 14:15:27 +0000
Manifest next update:     Fri 29 Aug 2025 14:15:27 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: YMUApx7PFzE6AzXL7y9LG6EW9x3z9+73F1FfLlq+xec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9226 (0x240a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: Aug 22 14:15:27 2025 GMT
            Not After : Aug 29 14:15:27 2025 GMT
        Subject: CN=68a87b7f-fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:87:d9:a2:3a:ee:0b:9f:ab:fe:3e:20:bc:
                    cb:66:a7:98:5d:63:6b:49:8e:66:3d:b2:e1:5c:21:
                    1a:a1:5d:28:d5:24:1a:b8:43:74:f1:c3:1c:34:14:
                    bd:68:5a:78:1a:19:15:73:ae:ea:85:38:13:f0:d9:
                    13:d3:df:d2:1b:8f:44:a7:a2:7e:48:40:fb:aa:3d:
                    45:c2:af:3c:2a:59:de:e5:2d:19:8f:04:e4:2d:4a:
                    f1:c5:aa:67:c6:65:2f:82:e8:a1:34:a2:d7:49:16:
                    72:6b:45:5a:dd:31:9f:fb:58:b8:f6:f1:16:a5:42:
                    db:95:6b:7b:e0:16:f9:c7:4f:f4:63:93:32:e9:2e:
                    cc:58:6e:50:a6:54:83:67:75:c9:f4:ad:fb:b6:50:
                    09:ff:dd:da:91:9c:6f:1b:91:cd:88:e5:a0:91:d9:
                    31:39:9c:c9:9f:76:84:53:79:27:19:c9:93:d4:4d:
                    63:48:0c:54:2a:a1:ba:2e:f0:60:22:fe:aa:4e:f5:
                    48:1a:43:39:e1:20:71:63:71:fb:ca:5e:14:4d:a1:
                    aa:c9:a1:5b:15:ac:d8:58:94:12:14:76:df:39:63:
                    10:31:35:88:b2:66:b5:db:0c:a7:01:b6:91:03:1a:
                    31:ad:52:b1:72:54:a2:fb:c0:07:a4:18:24:30:ec:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E1:6C:E1:7F:70:02:FD:E0:83:F0:75:D3:90:3B:BE:29:90:3C:F0
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:eb:d0:ff:09:f2:00:83:b1:3f:a1:26:18:5f:b4:f9:a4:
         67:53:f4:df:c0:e5:92:14:97:e3:e9:b8:3d:85:5b:d4:63:7e:
         07:07:dc:a5:ee:75:d1:ad:e4:e7:ff:8d:ef:d4:f9:77:c2:c5:
         24:e9:04:11:1b:5c:8f:c6:65:ba:10:c8:69:62:19:ee:01:7b:
         69:a9:92:b0:c3:a6:bc:7e:1e:dd:36:da:51:f0:ea:f0:98:82:
         54:c3:89:4e:4e:ba:f7:4c:c4:ff:f2:e3:92:97:ab:13:ed:21:
         94:85:ab:fb:14:1a:91:70:74:9c:7c:48:0a:1f:63:20:67:9f:
         c6:02:12:2d:85:65:1d:b7:6c:9f:c1:4e:cd:b6:ef:2d:71:bd:
         8f:6b:d9:9f:72:7f:e7:67:ae:a2:3f:d3:93:2d:21:95:fb:25:
         02:5c:0a:9f:d4:98:e4:29:de:0c:7d:18:98:8a:dc:54:07:e7:
         ec:c6:c2:99:08:c9:6c:b1:73:dd:6d:8c:c0:ee:e2:fe:78:bf:
         fc:b2:7e:8d:69:1c:5e:09:b7:f4:3b:e1:7b:bb:c8:7b:2d:2a:
         81:ed:a5:28:78:65:11:dc:97:d7:d8:21:74:7b:ae:88:ce:e8:
         a7:9c:1c:a2:0c:7a:dc:ba:32:de:6f:0e:b7:db:90:6c:04:ea:
         ed:04:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:18 2025 by rpki-client