Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File:                     odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier:          XZ2nw8/J0w2Fmm9ORppY6UpTmUVjxmfuzEsQYndu3Gk=
Subject key identifier:   FC:65:64:EC:E7:8D:FB:C7:49:40:9A:C4:6E:2A:4E:42:50:E4:D1:DC
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer:       /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number:          9B
Signing time:             Thu 03 Jul 2025 06:30:34 +0000
Manifest this update:     Thu 03 Jul 2025 06:30:33 +0000
Manifest next update:     Thu 10 Jul 2025 06:30:33 +0000
Files and hashes:         1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: /shrRjp+JWMqhQzZxlTjPhyxyvkSXqEGBvOwY2DGajc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
        Validity
            Not Before: Jul  3 06:30:33 2025 GMT
            Not After : Jul 10 06:30:33 2025 GMT
        Subject: CN=68662389-f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:be:51:72:e0:78:61:02:92:bc:f4:ee:dd:
                    be:c8:e8:5f:d2:91:e0:65:94:e7:2c:d5:ac:af:09:
                    59:a3:54:08:8e:59:8a:e8:83:0d:d3:26:93:3f:70:
                    19:0e:f3:64:99:ef:32:f9:b8:d7:2b:57:b7:51:53:
                    ca:22:c1:73:b1:50:54:9a:83:ae:bb:3c:1e:91:b6:
                    8d:94:8c:61:20:2c:be:15:c5:34:c5:1b:8a:a1:da:
                    2d:b0:8c:3f:13:ff:f8:e8:6b:ac:d1:a8:30:a2:19:
                    0d:8a:e6:db:0f:b6:db:1e:9a:84:e8:bb:85:e3:f3:
                    74:ce:c8:04:64:72:90:ff:5c:77:b3:df:55:70:f7:
                    7a:2f:41:21:f0:37:25:0f:c6:6e:ed:58:88:46:dc:
                    48:f0:c9:e6:dd:e8:2e:8d:69:57:e7:05:85:b5:bd:
                    15:6b:ea:53:74:39:7a:44:5f:fb:e2:6b:ca:ef:6b:
                    47:a1:4a:0f:58:fd:ac:9e:6b:d0:70:de:a3:b4:9b:
                    ba:35:73:09:09:de:61:7d:6a:ce:4d:5a:b1:02:bf:
                    a4:a9:43:78:38:ba:ec:8c:cc:b2:85:30:8c:ed:9b:
                    4c:97:4d:65:df:55:9e:8b:fa:46:5c:f6:09:d5:16:
                    a8:42:0c:09:18:c8:e8:ac:31:c2:e4:4f:95:7c:1a:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:64:EC:E7:8D:FB:C7:49:40:9A:C4:6E:2A:4E:42:50:E4:D1:DC
            X509v3 Authority Key Identifier:
                keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:de:c8:b8:a8:7c:f1:f7:42:2d:83:19:b0:6a:03:cf:46:56:
         8f:e3:fd:37:89:8a:60:67:b5:87:05:d4:a6:9c:bb:0c:c4:2c:
         3f:ad:bd:d0:48:20:fa:ac:63:3a:12:78:b6:81:92:72:8d:7a:
         42:e0:f8:31:b5:d7:36:83:17:f7:d3:4e:cc:08:8d:5a:0d:e0:
         48:69:d0:31:98:20:91:d1:7a:ad:c9:35:ad:65:38:66:a2:87:
         71:31:d9:96:4b:7f:70:f5:56:f9:92:d2:98:13:02:d3:93:a0:
         30:89:4d:bf:f5:1f:55:d0:a8:42:54:d2:19:4f:ca:91:a3:68:
         e8:74:cb:bf:45:2c:c5:34:b4:5a:dc:46:16:a9:82:8a:fb:ea:
         04:01:d3:9a:c6:f0:73:18:f8:f9:64:28:5e:e5:fa:6a:8f:eb:
         d5:5d:45:f4:ca:c8:28:5e:24:8f:b2:83:eb:6f:9b:ee:3e:c6:
         60:55:aa:7b:cf:2f:d0:0b:2d:a2:23:de:32:48:b8:45:a0:89:
         40:ee:f5:6d:30:2a:6f:cd:aa:01:e9:4f:66:e7:c9:02:80:5c:
         bc:7a:75:26:49:db:c8:8c:a8:1f:a7:25:3d:bd:e8:96:6d:5c:
         98:f2:6c:72:73:97:86:ca:c5:45:a6:70:e1:52:31:32:2f:90:
         1b:62:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:22 2025 by rpki-client