Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File:                     odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier:          NajVt1volz2U3kJ6eEZXuswedXvhVCdi4Ny7gxWr4jc=
Subject key identifier:   00:06:9C:03:55:83:3D:45:0E:64:9D:FE:8E:99:5C:1D:99:71:E2:6A
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer:       /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number:          B5
Signing time:             Sat 23 Aug 2025 06:13:20 +0000
Manifest this update:     Sat 23 Aug 2025 06:13:19 +0000
Manifest next update:     Sat 30 Aug 2025 06:13:19 +0000
Files and hashes:         1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: JBZr3N/5cYnGOiec299cqaG164myFk08q3h+GGMJEBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
        Validity
            Not Before: Aug 23 06:13:19 2025 GMT
            Not After : Aug 30 06:13:19 2025 GMT
        Subject: CN=68a95c00-79fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:4a:f4:64:5d:52:dd:ad:e6:bb:69:c1:fe:
                    c9:79:e2:cb:ce:53:3c:f5:b8:c6:d9:00:f9:9e:a0:
                    3e:30:06:05:c9:5b:29:a7:4a:95:78:ab:04:94:89:
                    f8:b7:08:d5:af:0d:40:ec:95:d4:91:6b:d6:23:7a:
                    c5:97:33:39:d3:31:65:d3:cb:9b:70:6f:fe:ea:69:
                    b2:9b:2c:fc:0a:64:80:c8:ea:46:d3:46:d5:ae:e9:
                    5d:58:76:0a:6c:db:10:8d:dc:67:60:f5:43:a8:32:
                    61:84:7e:f1:80:8f:a4:85:03:74:73:92:5e:9b:db:
                    42:64:e9:11:b8:6d:69:14:d9:18:66:5b:fc:a7:c8:
                    a0:7d:d4:0e:16:8a:4c:dc:de:5a:c3:fa:23:77:15:
                    64:29:4b:52:33:ca:4c:b2:07:ed:06:73:5c:d3:36:
                    ef:a1:91:e7:52:2d:d3:c2:bb:4b:b1:8b:b6:5c:8f:
                    31:19:2a:ec:26:38:de:5b:8f:f1:8e:90:ba:32:3c:
                    f7:4f:97:bc:ec:38:77:2b:4c:11:93:75:75:7f:c9:
                    2a:2e:29:2b:96:c7:5f:28:44:5e:50:f1:8a:f4:fa:
                    c2:2c:98:ec:56:02:0a:53:6f:53:61:ff:58:7d:17:
                    75:cd:66:af:23:95:6e:27:2f:bc:0b:f3:16:ee:0a:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:9C:03:55:83:3D:45:0E:64:9D:FE:8E:99:5C:1D:99:71:E2:6A
            X509v3 Authority Key Identifier:
                keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:59:14:81:36:29:53:5f:6f:73:9c:c2:ce:0e:4e:8a:a9:d6:
         38:f0:ff:09:40:65:43:31:07:b6:1b:48:96:b4:6b:61:ea:ea:
         d7:03:d2:0c:8e:31:ac:95:dc:21:bf:2a:b5:5b:62:66:e1:b0:
         af:f2:74:db:8d:a3:b9:ba:10:00:de:bc:a5:2d:7d:0b:bf:73:
         f1:01:42:37:85:06:1a:08:8e:e2:ca:cf:03:bb:7e:d5:a4:e6:
         24:a1:32:94:fe:85:89:f6:df:8a:15:4f:68:39:91:87:7e:17:
         a1:3c:56:04:a4:03:07:a3:01:84:5b:35:cc:8d:b5:73:7c:d2:
         2f:49:01:d8:a5:62:b9:77:9c:69:72:dd:d5:67:71:12:06:33:
         46:62:f7:a6:b5:8e:52:9b:ce:f0:4f:02:24:11:2e:73:15:8f:
         12:bf:7f:87:29:15:4a:94:5f:e6:69:3e:b7:2c:2e:ed:b2:e1:
         a1:3e:e3:b4:3b:66:4e:46:13:28:e0:fd:45:eb:70:d5:a9:b9:
         a3:4e:4a:b6:d4:bc:a3:6f:6b:17:93:2c:16:06:78:63:c0:b0:
         42:af:fe:81:ae:2a:16:a8:7b:0f:8e:35:2f:f0:9a:32:7c:f7:
         b1:91:26:89:18:da:6e:88:96:5e:a1:8b:c0:93:9c:95:b9:28:
         61:42:d4:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBERTAxMTAvBgNVBAUTKEExRDI1REUzQTU1OUZEQUYzMDQ0OUQ5NDc3RDE3NkVB
Mzc4OTcxRjgwHhcNMjUwODIzMDYxMzE5WhcNMjUwODMwMDYxMzE5WjAYMRYwFAYD
VQQDEw02OGE5NWMwMC03OWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuZK9GRdUt2t5rtpwf7JeeLLzlM89bjG2QD5nqA+MAYFyVspp0qVeKsElIn4
twjVrw1A7JXUkWvWI3rFlzM50zFl08ubcG/+6mmymyz8CmSAyOpG00bVruldWHYK
bNsQjdxnYPVDqDJhhH7xgI+khQN0c5Jem9tCZOkRuG1pFNkYZlv8p8igfdQOFopM
3N5aw/ojdxVkKUtSM8pMsgftBnNc0zbvoZHnUi3TwrtLsYu2XI8xGSrsJjjeW4/x
jpC6Mjz3T5e87Dh3K0wRk3V1f8kqLikrlsdfKEReUPGK9PrCLJjsVgIKU29TYf9Y
fRd1zWavI5VuJy+8C/MW7gpNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAGnANV
gz1FDmSd/o6ZXB2ZceJqMB8GA1UdIwQYMBaAFKHSXeOlWf2vMESdlHfRduo3iXH4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83QTY1RTkzQzZB
ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9hOHdSSjJVZDlGMjZqZUpj
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MERFMC83QTY1RTkzQzZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9vZEpkNDZWWl9h
OHdSSjJVZDlGMjZqZUpjZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBWRSBNilTX29znMLODk6KqdY48P8JQGVDMQe2G0iWtGth6urXA9IM
jjGsldwhvyq1W2Jm4bCv8nTbjaO5uhAA3rylLX0Lv3PxAUI3hQYaCI7iys8Du37V
pOYkoTKU/oWJ9t+KFU9oOZGHfhehPFYEpAMHowGEWzXMjbVzfNIvSQHYpWK5d5xp
ct3VZ3ESBjNGYvemtY5Sm87wTwIkES5zFY8Sv3+HKRVKlF/maT63LC7tsuGhPuO0
O2ZORhMo4P1F63DVqbmjTkq21Lyjb2sXkywWBnhjwLBCr/6BrioWqHsPjjUv8Joy
fPexkSaJGNpuiJZeoYvAk5yVuShhQtRs
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:17 2025 by rpki-client