Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
File:                     RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json)
Hash identifier:          xR6gob4lqsIwcZc24DYznTYttOwf0Wiyb57pgsq3q0A=
Subject key identifier:   82:64:32:E5:E1:32:1D:65:30:EF:BC:CF:1C:26:C2:57:98:0F:36:33
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1C03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
Manifest number:          1BF0
Signing time:             Fri 22 Aug 2025 16:18:39 +0000
Manifest this update:     Fri 22 Aug 2025 16:18:39 +0000
Manifest next update:     Fri 29 Aug 2025 16:18:39 +0000
Files and hashes:         1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: 7MWZDk26jOXiL+5rsZkV4WsPc76pfySggiE+H67M80Y=)
                          2: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: YvBaVC/FCxSr3mH7Wniem5Fc4fRE2xPCszYEETdJT64=)
                          3: 575AA83EC89611EDB6E9F849C4F9AE02.roa (hash: zUQrvX33/3TCKafKm47GXtbl0gyaNKZ7M04LcO+HoFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7171 (0x1c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Aug 22 16:18:39 2025 GMT
            Not After : Aug 29 16:18:39 2025 GMT
        Subject: CN=68a8985f-4e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:45:55:ac:ca:3f:2c:06:5b:db:d9:39:6e:
                    c3:6f:c7:5c:26:01:c8:5f:73:e1:92:c4:83:21:13:
                    a9:79:55:15:e7:02:b2:69:db:a8:3f:2e:a5:75:bf:
                    b9:aa:60:20:a0:46:3d:20:1f:40:33:13:67:fb:81:
                    bd:e8:c1:72:b9:f8:41:58:5f:ee:1f:7a:a9:8a:da:
                    93:58:42:86:e5:2b:aa:3e:33:3a:34:c8:69:5a:cf:
                    4c:d8:f1:39:64:0a:fb:50:ea:e5:d6:ed:52:c8:49:
                    6c:15:d0:34:33:0d:4a:83:ba:57:c9:ea:69:20:e4:
                    8a:f1:2b:a1:e3:d1:3e:cc:a6:a0:bc:65:ec:b9:b9:
                    70:0b:b4:06:d5:1b:55:19:4a:95:97:ce:1a:fc:d4:
                    8a:09:4f:c1:f9:06:c7:52:74:1e:1b:43:4e:a4:cc:
                    5e:33:ae:ab:1e:b6:28:50:f3:e8:f7:97:48:7a:b3:
                    a2:6d:78:19:25:40:b5:b5:72:55:92:4f:0f:fb:32:
                    30:60:02:83:8e:2c:d1:53:16:c0:66:bd:64:55:2c:
                    37:f4:84:88:53:65:6a:89:20:ed:0e:03:fa:66:7f:
                    e2:a6:29:fc:7b:8d:59:a0:43:63:ea:a2:90:ad:8e:
                    14:4a:30:c3:a5:cf:9f:76:cb:db:ce:9c:13:ba:f6:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:32:E5:E1:32:1D:65:30:EF:BC:CF:1C:26:C2:57:98:0F:36:33
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:46:cd:b8:85:a1:68:61:1b:79:cb:34:b9:f3:af:2b:1c:c9:
         2e:0d:ab:87:b4:61:bf:4b:36:01:00:16:f4:34:c3:bd:c9:bd:
         33:1a:73:ee:39:bf:7a:53:68:0e:e6:7d:26:44:8d:71:76:69:
         af:20:28:03:33:8a:00:52:f3:3e:e5:7c:07:9f:d0:94:b1:97:
         7f:57:9d:93:4f:0c:48:ca:1b:47:4f:c1:ba:90:88:ff:40:28:
         44:c0:9f:39:a8:84:d4:3b:df:da:89:76:71:eb:82:98:b1:2e:
         74:51:43:1f:7d:46:46:42:d3:af:34:fc:65:20:0c:09:1a:39:
         1f:34:11:b4:27:18:db:6c:77:fc:9f:d3:9b:7e:df:9b:d5:d9:
         71:0b:80:0f:4b:5b:4d:2c:8e:00:27:36:6f:c4:95:8e:92:3d:
         77:86:7c:12:53:19:c1:46:83:92:ac:18:bd:4d:3d:2f:c1:82:
         88:c3:91:d9:3c:fb:19:8e:1c:e0:c1:f4:c8:81:b6:3c:3f:d2:
         60:3f:5d:b7:4c:08:52:0c:27:6b:c5:60:b7:06:78:3a:f8:27:
         ec:36:68:92:15:49:d3:cf:03:c1:9b:7d:07:5c:d6:d0:90:98:
         1d:73:fd:9f:33:8a:78:97:2a:01:4a:f4:32:5d:0b:d3:83:e4:
         69:86:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:40 2025 by rpki-client