Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File:                     nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier:          5ncZOHZm7zF2TQfkyQLnpDWm1HjsA+FLqp2eRjsQEzQ=
Subject key identifier:   C3:61:E2:4C:A6:11:A9:2C:73:05:BB:10:80:AD:B6:DD:F5:30:86:6A
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer:       /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number:          010F
Signing time:             Sat 23 Aug 2025 05:03:23 +0000
Manifest this update:     Sat 23 Aug 2025 05:03:23 +0000
Manifest next update:     Sat 30 Aug 2025 05:03:23 +0000
Files and hashes:         1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: u3GY2cqT3Y4ksUME9B0L1xrHjYlnvNyYw4c/dQ5dh4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
        Validity
            Not Before: Aug 23 05:03:23 2025 GMT
            Not After : Aug 30 05:03:23 2025 GMT
        Subject: CN=68a94b9b-c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:eb:dd:65:82:b1:1e:15:57:b8:c5:38:d3:
                    bb:8e:9b:69:b5:6f:ac:8a:d3:b6:c2:fb:cc:a9:94:
                    4c:2f:21:50:a6:ac:ba:59:de:a9:25:83:bf:cc:76:
                    0d:e5:c5:52:18:9b:1c:06:1b:60:35:17:5b:c1:9f:
                    3e:6b:e4:04:3b:e1:3a:d9:99:a7:b8:f0:92:c5:42:
                    a0:e9:a0:0b:05:d9:6b:c5:c2:6c:44:44:ea:c8:d6:
                    54:41:0f:36:af:86:86:3e:7b:6d:ec:5c:82:79:dd:
                    1d:3f:9b:9b:d9:2b:90:3e:76:26:ed:49:7e:f8:4e:
                    ec:5e:2f:53:39:56:a2:9d:20:79:eb:41:bd:5f:ea:
                    e0:a4:05:f4:be:35:b9:5e:f5:6e:bf:04:8a:96:02:
                    d4:67:13:aa:ef:e1:f5:c5:c8:05:10:8b:fb:e7:e4:
                    09:36:62:63:75:59:1f:85:40:4c:23:84:23:a9:f7:
                    37:c1:8e:46:55:af:ed:e1:69:6e:8a:79:81:b5:ce:
                    6e:91:62:ff:3b:c4:1b:b0:71:d1:23:a6:8e:bf:95:
                    28:92:3e:25:2f:78:86:6f:9d:bb:1b:67:c0:95:23:
                    e9:8e:ec:4a:24:8e:f5:b4:31:54:13:e4:7a:18:3c:
                    45:4d:d2:9f:1a:ed:b8:ca:a8:86:ce:eb:88:1d:f3:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:61:E2:4C:A6:11:A9:2C:73:05:BB:10:80:AD:B6:DD:F5:30:86:6A
            X509v3 Authority Key Identifier:
                keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:f4:45:e0:22:b8:2e:3a:d5:28:0e:ed:29:9e:b9:cc:04:
         8a:07:92:16:52:c7:2f:52:ef:cc:64:e5:f8:aa:a9:57:6c:db:
         ba:51:a1:55:32:6e:dd:14:2b:d2:11:76:6b:ca:17:85:66:78:
         fb:f1:b6:96:6c:3f:36:f8:9f:32:a7:33:55:d3:d4:bb:01:b6:
         10:52:7f:b3:37:33:84:ac:58:ae:b5:4b:9d:02:ef:85:25:39:
         3c:63:82:b4:ff:4c:28:45:ce:f5:4f:74:11:ac:44:d2:eb:2c:
         1f:da:f5:63:a3:c5:57:74:6b:1a:c9:9f:b5:cc:0b:5b:c5:6b:
         8f:d9:94:21:63:e8:2f:bb:05:7b:12:34:59:7c:6b:ba:50:81:
         2f:01:8d:dc:6b:b1:b2:d2:fb:d9:df:e0:9c:fd:ad:41:50:6c:
         b4:40:92:30:13:e5:6e:29:0c:9e:e5:68:1f:ee:74:0c:25:74:
         06:f5:6d:54:29:38:61:e1:6c:87:14:c5:a2:ca:af:3c:41:e3:
         a6:9a:30:7a:87:67:e0:36:78:90:22:b4:f6:67:a0:c2:38:0c:
         0a:be:95:c3:9e:62:50:d7:8c:81:43:d1:2b:55:6d:60:39:c7:
         01:b9:22:35:96:bf:c6:b6:34:a8:9c:73:53:29:29:87:e7:47:
         80:9d:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:51 2025 by rpki-client