Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
File:                     Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json)
Hash identifier:          sUJVmLZRRzx/4e/rk0srpoQeWbCG4PcXLIRGeSPV1qk=
Subject key identifier:   8E:A9:68:D6:1C:00:B7:B6:B2:62:AA:9F:93:0D:6D:A0:D2:BF:FC:A4
Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25
Certificate issuer:       /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
Manifest number:          0173
Signing time:             Fri 22 Aug 2025 21:41:31 +0000
Manifest this update:     Fri 22 Aug 2025 21:41:30 +0000
Manifest next update:     Fri 29 Aug 2025 21:41:30 +0000
Files and hashes:         1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: hW7YdvoLThysRIoibeQfggzgskfFV4KnAzdSUv0+OUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325
        Validity
            Not Before: Aug 22 21:41:30 2025 GMT
            Not After : Aug 29 21:41:30 2025 GMT
        Subject: CN=68a8e40a-75e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:96:f6:f0:6f:80:cb:e5:0c:01:8b:2b:04:
                    c7:09:f9:a3:bf:a0:22:98:95:03:d4:3b:bf:1b:df:
                    0f:88:60:50:9f:eb:de:5f:4c:e4:bb:5b:f8:a1:2f:
                    df:ee:68:41:b9:a0:b4:ff:91:1d:20:09:dd:15:de:
                    a7:96:46:bc:16:03:c6:6a:2d:ee:8b:64:d1:5e:66:
                    2d:39:14:e2:9b:f4:3c:e9:70:4c:62:69:07:0f:3f:
                    2e:73:99:c0:8f:a6:18:2b:6d:f9:82:e6:97:85:c6:
                    55:56:5a:29:2d:fa:8c:ea:59:e5:5f:d7:c7:50:1d:
                    5f:c6:ff:e4:97:be:75:20:23:a9:3c:8b:04:66:84:
                    39:ae:dd:41:26:b0:4e:47:4f:19:a4:c0:41:a0:a4:
                    06:3e:10:b2:ee:a7:e1:4e:63:20:46:f6:ac:5b:64:
                    03:9c:29:65:e8:d4:fd:34:92:05:5e:4c:13:17:fc:
                    b5:09:82:01:7f:ab:23:09:34:15:9c:f0:4d:23:7e:
                    88:18:34:97:77:2c:6e:a1:ca:2a:64:9b:52:21:90:
                    8f:91:a5:cb:44:f7:54:14:26:25:36:1b:8f:dd:0d:
                    2c:4b:05:e4:6f:3b:d0:36:c1:4f:52:21:22:01:bf:
                    5e:63:f5:a6:f0:a3:ef:5f:22:f7:1a:46:28:5c:f7:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:68:D6:1C:00:B7:B6:B2:62:AA:9F:93:0D:6D:A0:D2:BF:FC:A4
            X509v3 Authority Key Identifier:
                keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:46:06:b0:3c:40:f4:76:31:8d:bc:e0:9a:79:32:6d:c5:3c:
         79:9f:6c:44:5c:21:6f:eb:24:d1:df:e0:79:f5:fd:bd:9f:58:
         50:77:bf:75:48:de:a3:e9:60:c1:68:a8:6f:96:78:dd:74:bf:
         5a:69:92:56:e6:84:ba:88:c5:e1:53:fa:f9:34:6c:d9:5b:9a:
         8f:7c:7a:4e:7a:56:06:df:45:27:3a:65:00:bd:62:14:77:68:
         74:79:8b:c2:39:c5:6b:4d:79:e6:4f:25:e8:ef:31:3d:69:14:
         39:49:68:48:18:37:6d:cb:88:bc:49:a4:50:31:41:01:5e:1d:
         01:b9:d9:f8:b5:b6:91:6d:20:e6:8b:d3:49:cb:a3:ef:ee:6a:
         f7:5d:07:4a:5d:aa:9d:ef:9f:18:ef:b6:f4:2b:02:3b:ed:a8:
         23:3c:ac:da:63:9c:81:e0:07:22:0d:6f:78:16:af:95:0c:a3:
         74:21:92:01:db:0d:12:33:19:8b:23:f8:6e:7e:8e:9c:91:ec:
         07:f8:ac:75:44:af:d2:af:ba:b8:30:f2:0f:eb:be:f7:93:0d:
         18:b9:ea:b4:c6:d0:1f:81:60:15:7d:00:e0:89:22:fe:1a:b1:
         2b:e2:87:ae:ea:bf:ad:f0:bb:a8:40:ac:ef:f6:72:a1:92:b6:
         3d:6b:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:29 2025 by rpki-client