Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          qQO/wacgOGKZKJpCZ2gzd43w2okAvcocCM9HKg810Qs=
Subject key identifier:   A2:79:E5:30:38:25:65:B8:B6:4A:E9:69:9B:42:92:AC:20:C6:2B:07
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0A33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0A29
Signing time:             Fri 22 Aug 2025 19:54:20 +0000
Manifest this update:     Fri 22 Aug 2025 19:54:19 +0000
Manifest next update:     Fri 29 Aug 2025 19:54:19 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: z99wrzW49CvMKMubko5soI2Gn2EeqKI6o3ozpeSD5rw=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611 (0xa33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Aug 22 19:54:19 2025 GMT
            Not After : Aug 29 19:54:19 2025 GMT
        Subject: CN=68a8caeb-1be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:20:51:31:5c:0d:88:2d:0e:78:bc:8b:e6:
                    50:af:68:39:d4:73:83:b2:5d:57:ab:5e:46:26:e5:
                    c0:7f:56:44:09:df:ad:e5:85:01:21:7b:03:a2:92:
                    8a:dd:1c:77:f2:25:7c:cc:a9:e1:9f:08:67:51:4d:
                    18:1c:ef:d1:d6:94:dc:75:39:3b:8f:c4:a9:fc:91:
                    d5:91:e0:9e:18:f3:4d:0f:bd:14:21:6d:e8:52:96:
                    36:3f:c4:53:67:6c:2f:22:40:19:46:0c:8a:9d:b4:
                    84:b3:b9:e4:6f:2c:cf:b7:60:3b:74:ca:c9:35:96:
                    b4:1b:26:f5:48:c1:63:0f:40:29:28:5e:4a:30:e1:
                    f0:e9:c0:8c:e8:21:fa:cf:aa:5c:33:31:2b:95:c5:
                    83:8e:42:08:88:56:d9:ee:7b:fe:12:17:7c:3b:9e:
                    59:d1:71:6a:00:bb:47:e7:93:f4:05:f8:bb:29:73:
                    ae:e8:cf:11:d0:1a:1b:2e:87:d0:6e:8a:26:70:e1:
                    d2:8e:4a:1d:81:e2:8d:82:8e:e3:5f:6a:a0:2d:28:
                    32:dd:d1:b7:b9:ff:a3:ac:af:54:89:ef:66:3d:b2:
                    64:43:8e:78:82:0a:f4:51:f4:9c:dc:89:66:c2:d8:
                    c4:ab:cf:a1:6b:27:43:6b:c1:37:c7:44:48:5f:22:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:E5:30:38:25:65:B8:B6:4A:E9:69:9B:42:92:AC:20:C6:2B:07
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:65:06:8c:cb:15:80:63:cb:be:3d:5a:1c:e6:a4:c3:21:
         aa:12:3c:67:be:4e:c7:06:82:77:15:37:5a:4c:53:e5:dc:8c:
         6f:a0:c5:52:e0:b8:19:a2:98:98:ec:17:5b:80:d5:10:47:ed:
         bc:ec:fc:c4:56:c0:bb:7c:76:7d:7c:51:d3:56:a0:41:03:bb:
         6d:69:0d:e3:7a:20:80:88:08:ab:6a:ce:38:fe:b7:ec:72:53:
         34:2e:c7:4a:7a:e4:a8:3d:51:10:93:17:6f:db:fe:f3:29:ab:
         e8:92:b1:fa:64:53:52:7d:90:d0:b8:04:78:c2:89:64:5c:67:
         19:63:59:74:59:bb:28:5e:99:28:cf:50:08:a0:f0:0f:7a:f3:
         a4:04:91:91:92:e7:cd:91:9b:e2:34:ed:0c:5c:fc:db:f1:58:
         23:90:58:9c:7b:65:a0:56:b6:f1:d9:e9:a1:41:be:b9:24:ca:
         b1:16:9b:e1:f7:c6:9f:a6:b4:8f:9a:b4:fe:3e:30:b0:67:e2:
         2f:58:b0:b9:52:5d:07:0f:0b:96:77:d2:21:b1:a6:8f:7c:11:
         65:b7:14:0b:d0:e6:85:d3:20:02:c5:51:01:1a:46:aa:82:91:
         47:57:5a:b2:1b:8b:a1:72:f4:10:5c:38:99:4c:8d:cf:54:83:
         7e:68:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:54 2025 by rpki-client