Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
File:                     fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json)
Hash identifier:          ncjziWAm/Eu6GdhCF5BtM8ncAhFQUbPh2fm6bE5Hr0w=
Subject key identifier:   82:61:69:01:66:82:82:9D:B7:5C:68:79:4B:1F:49:F0:E4:05:CE:00
Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70
Certificate issuer:       /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
Certificate serial:       34AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
Manifest number:          34AD
Signing time:             Fri 22 Aug 2025 15:10:11 +0000
Manifest this update:     Fri 22 Aug 2025 15:10:10 +0000
Manifest next update:     Fri 29 Aug 2025 15:10:10 +0000
Files and hashes:         1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: EkkciGCn0a/3jWVQVnEt1sThUBLB9CAUn9NjptfgKYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13485 (0x34ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
        Validity
            Not Before: Aug 22 15:10:10 2025 GMT
            Not After : Aug 29 15:10:10 2025 GMT
        Subject: CN=68a88852-c181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:3c:d7:cf:db:79:30:19:a1:5d:8b:6b:77:
                    71:23:9e:25:2c:31:0b:2a:f9:74:56:d5:0a:8d:37:
                    75:95:c3:f3:54:16:e9:f4:32:87:2e:66:34:e2:e1:
                    61:ac:a5:ff:57:87:b9:ef:d5:a6:df:d1:51:12:b8:
                    84:af:f6:0a:60:ac:5e:ce:54:ef:70:55:64:65:d1:
                    03:28:98:d3:aa:cf:ff:79:40:7f:ac:09:33:15:31:
                    0f:62:3a:05:5d:27:e4:a1:3d:89:9a:9c:d3:63:b0:
                    d2:4f:f8:fc:ab:56:3f:e1:ee:ba:74:b1:8b:e3:cf:
                    aa:d4:21:f1:76:a1:8c:70:14:42:01:71:5a:b8:35:
                    46:f7:6d:35:d7:bb:6f:73:0a:1d:b2:c6:db:32:79:
                    18:ff:a4:e9:16:83:6b:f6:49:6e:b1:45:28:d4:16:
                    37:fe:41:d0:cc:75:65:9f:a4:78:8b:c5:66:60:38:
                    ce:ce:44:95:8b:da:2a:84:12:8c:18:11:e4:f4:7b:
                    24:37:33:6f:23:42:83:36:90:3c:e7:df:82:9a:7b:
                    85:de:16:b1:66:7c:72:9b:7f:46:a0:5f:7e:d0:0e:
                    56:21:2c:fe:ef:da:1c:57:10:6f:e6:f3:43:6f:5d:
                    19:17:4a:33:e1:a1:82:c3:bd:d5:f6:2f:45:29:e1:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:69:01:66:82:82:9D:B7:5C:68:79:4B:1F:49:F0:E4:05:CE:00
            X509v3 Authority Key Identifier:
                keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:a0:8b:5f:eb:4d:88:33:6b:f0:4d:14:46:8c:69:af:3c:
         69:e4:37:02:06:c7:f7:a0:0b:8e:3d:8e:e0:28:c1:0e:33:e7:
         5e:41:ca:7b:39:9a:68:f3:ce:05:75:c2:38:40:41:29:f2:2f:
         c7:c6:b2:72:ba:fa:6e:d5:a9:f7:4c:b5:24:63:62:20:31:22:
         fd:c0:c6:79:28:7c:be:09:f2:d9:aa:ac:ad:bc:f4:4a:e1:91:
         56:91:b4:f6:ee:9a:39:26:83:e0:ae:74:35:95:f7:8d:09:b0:
         29:41:89:d2:18:73:25:92:33:24:90:67:30:68:af:77:84:57:
         1b:db:f7:4a:3d:b5:70:4f:ab:42:6a:6d:32:68:86:f0:f8:55:
         b6:73:59:72:92:ff:de:11:b9:0f:f8:9c:a5:c0:06:0b:64:62:
         80:90:3a:42:c9:c5:af:d9:dc:28:6d:ab:74:43:a2:d3:68:c7:
         18:d0:91:41:0c:18:c1:fc:01:3d:03:9f:07:0f:c3:b0:01:a8:
         26:74:5f:39:67:fd:d4:0e:45:50:b5:53:ee:46:14:d2:a2:3b:
         88:cd:26:bd:29:91:bc:f3:c3:73:3c:86:33:98:89:0c:07:f9:
         96:8a:35:22:47:2a:25:81:70:7b:dc:36:cf:b9:1b:e0:00:f1:
         ab:d6:8b:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1
NTNFRTZDNzAwHhcNMjUwODIyMTUxMDEwWhcNMjUwODI5MTUxMDEwWjAYMRYwFAYD
VQQDEw02OGE4ODg1Mi1jMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1og818/beTAZoV2La3dxI54lLDELKvl0VtUKjTd1lcPzVBbp9DKHLmY04uFh
rKX/V4e579Wm39FREriEr/YKYKxezlTvcFVkZdEDKJjTqs//eUB/rAkzFTEPYjoF
XSfkoT2JmpzTY7DST/j8q1Y/4e66dLGL48+q1CHxdqGMcBRCAXFauDVG920117tv
cwodssbbMnkY/6TpFoNr9klusUUo1BY3/kHQzHVln6R4i8VmYDjOzkSVi9oqhBKM
GBHk9HskNzNvI0KDNpA859+CmnuF3haxZnxym39GoF9+0A5WISz+79ocVxBv5vND
b10ZF0oz4aGCw73V9i9FKeE5SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJhaQFm
goKdt1xoeUsfSfDkBc4AMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE
QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh
dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfRaCLX+tNiDNr8E0URoxprzxp5DcCBsf3oAuOPY7gKMEOM+deQcp7
OZpo884FdcI4QEEp8i/HxrJyuvpu1an3TLUkY2IgMSL9wMZ5KHy+CfLZqqytvPRK
4ZFWkbT27po5JoPgrnQ1lfeNCbApQYnSGHMlkjMkkGcwaK93hFcb2/dKPbVwT6tC
am0yaIbw+FW2c1lykv/eEbkP+JylwAYLZGKAkDpCycWv2dwobat0Q6LTaMcY0JFB
DBjB/AE9A58HD8OwAagmdF85Z/3UDkVQtVPuRhTSojuIzSa9KZG888NzPIYzmIkM
B/mWijUiRyolgXB73DbPuRvgAPGr1ouL
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:38:11 2025 by rpki-client