Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File:                     72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier:          fl4gNzHFlmBjJq42iG9Ujw5rWn777fHupKZXhwSv+Cs=
Subject key identifier:   E9:73:12:B4:40:CC:4F:0F:78:63:58:FD:F8:D8:E9:73:D5:C2:B7:39
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer:       /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number:          019C
Signing time:             Sat 23 Aug 2025 03:29:30 +0000
Manifest this update:     Sat 23 Aug 2025 03:29:30 +0000
Manifest next update:     Sat 30 Aug 2025 03:29:30 +0000
Files and hashes:         1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: RhFiVrsmmtU+HI0SDXCDj0B12TTs4jvvRm/1Oggwxa8=)
                          2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=)
                          3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
        Validity
            Not Before: Aug 23 03:29:30 2025 GMT
            Not After : Aug 30 03:29:30 2025 GMT
        Subject: CN=68a9359a-0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:bb:b3:a8:24:23:4a:85:85:d0:a3:e6:23:
                    9c:28:cc:61:14:ea:36:ce:f9:59:60:be:f0:4d:af:
                    3e:c7:b3:be:43:d4:a4:54:88:e4:9a:1f:dd:0c:30:
                    b1:eb:0d:65:da:bd:ee:48:27:41:d5:be:48:a9:d1:
                    db:68:57:5c:30:77:04:5b:b4:5c:84:b7:e7:89:12:
                    5e:54:59:25:4f:a8:3e:f2:ad:cb:98:66:22:25:b5:
                    ba:37:5d:83:e1:39:a0:8a:58:fd:52:6b:07:77:f4:
                    47:4d:6c:65:97:67:35:cd:24:d9:d4:07:d3:61:47:
                    bb:8d:e5:c5:ab:f1:d6:6e:8e:8b:6d:d6:78:73:a8:
                    b0:29:c7:fa:52:c4:3e:79:23:47:e4:17:99:3a:2c:
                    4f:ee:2a:18:f0:79:de:f3:d5:5d:8a:81:aa:5d:09:
                    1d:70:d3:95:8c:bb:e3:86:0e:3d:16:57:64:a0:6c:
                    52:e6:a9:87:6c:2e:b7:ec:de:e6:fc:7b:fb:09:07:
                    d2:fe:c1:42:d4:96:2f:fa:1f:85:d5:0e:6a:16:2c:
                    74:47:19:7b:3a:ff:ba:5a:9d:7f:e3:1c:e9:55:29:
                    d5:18:81:71:98:e1:16:31:f9:53:9d:69:02:4e:ba:
                    13:42:c1:d5:70:09:cf:75:e8:09:59:62:6d:09:05:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:73:12:B4:40:CC:4F:0F:78:63:58:FD:F8:D8:E9:73:D5:C2:B7:39
            X509v3 Authority Key Identifier:
                keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:cd:89:1d:99:fa:62:da:97:a8:cb:2c:43:06:90:1e:15:
         53:10:a7:43:55:90:3a:78:46:1e:28:4e:49:ea:2e:13:4a:56:
         04:36:68:6a:16:ca:6f:2a:5e:a8:aa:dc:ed:47:4e:20:17:05:
         49:ad:44:17:b3:0d:03:f4:f6:84:71:cb:c4:f8:65:9d:1a:7c:
         05:6e:cd:b7:d7:58:ea:95:8a:eb:44:98:da:54:d2:9e:f5:bd:
         3b:ba:f9:c9:9d:9c:ef:96:85:05:fc:53:41:0c:5d:3c:13:20:
         83:7b:3b:5a:da:81:73:5c:34:67:e3:a1:0e:9f:1e:9f:90:c8:
         79:69:4b:b4:e7:04:c0:cc:d0:22:66:23:9b:c6:82:46:66:4f:
         8f:27:b2:21:96:fb:ec:4c:b8:19:20:dc:4e:cb:e6:35:e4:ee:
         68:bb:fe:db:90:34:0c:8d:03:95:b8:58:9d:a7:5c:41:91:4f:
         d1:2d:8f:47:ae:02:22:55:ef:ae:25:40:8f:36:6f:d7:09:cd:
         73:5d:9a:0a:57:4e:11:c3:61:ba:ee:0f:09:5e:ed:45:83:55:
         a7:a3:5c:df:aa:b8:2b:4c:a4:69:6b:be:e3:d9:92:f9:07:f3:
         57:33:fb:78:9a:e4:14:d4:1d:17:49:41:f1:b2:b2:75:55:42:
         96:59:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:35 2025 by rpki-client