Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
File:                     sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json)
Hash identifier:          DoOuKQ2wpbv+RV5AECyvRziLem3j6PuO4Olphz8jJJo=
Subject key identifier:   23:DC:F8:AF:98:CB:BF:44:2F:97:37:40:D1:AB:A7:02:40:2D:21:45
Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
Certificate issuer:       /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
Manifest number:          08
Signing time:             Sun 29 Jun 2025 07:10:14 +0000
Manifest this update:     Sun 29 Jun 2025 07:10:14 +0000
Manifest next update:     Sun 06 Jul 2025 07:10:14 +0000
Files and hashes:         1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: UYdW+eiTrl+gU2v3ueg6BeuwnH2qCIsWSFT+fd4Tpdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 07:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
        Validity
            Not Before: Jun 29 07:10:14 2025 GMT
            Not After : Jul  6 07:10:14 2025 GMT
        Subject: CN=6860e6d6-32c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:ef:c8:91:a7:06:23:36:68:05:c2:0d:ce:
                    90:8d:ce:6e:b9:ea:90:a3:ef:2e:12:0e:f5:eb:8e:
                    7e:f8:2b:24:6a:19:65:b1:c2:4f:aa:32:3f:f0:d8:
                    2e:21:38:55:fb:73:b7:22:c4:d1:ba:d2:78:81:e1:
                    92:68:c8:27:29:f3:e8:41:47:3d:90:26:73:2b:d0:
                    19:69:dd:a2:05:2c:eb:79:f1:89:c2:82:5b:66:ab:
                    2d:bf:06:60:c4:75:96:d4:18:09:d0:74:9c:0b:54:
                    a0:90:d3:a9:54:16:f4:ec:27:0f:8d:79:6b:1e:f5:
                    ac:ec:ee:03:e0:8b:c3:c2:3a:80:3f:3a:07:ba:c6:
                    c3:c9:49:c5:2a:bf:b1:db:31:2a:a1:9d:c9:de:24:
                    b8:f6:b1:80:3f:eb:d5:0d:9c:82:5c:37:c2:de:42:
                    1f:bf:8d:7f:d7:d3:ea:a1:e3:f7:02:cc:98:81:a4:
                    36:07:a9:36:dc:37:61:ca:10:75:46:05:5c:69:74:
                    9e:5c:c1:ae:a5:5a:d1:82:30:9d:ad:85:56:84:03:
                    7a:d6:d2:40:6e:ee:5a:02:d7:ec:68:ff:90:3b:c3:
                    7c:44:66:ff:3b:73:e4:6e:a7:be:34:3d:b3:58:b6:
                    98:75:cf:d1:33:1f:e9:c2:57:d6:a3:e1:3d:88:90:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DC:F8:AF:98:CB:BF:44:2F:97:37:40:D1:AB:A7:02:40:2D:21:45
            X509v3 Authority Key Identifier:
                keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:fc:b1:0b:ad:ac:c5:1f:1b:58:e5:e1:0e:91:39:3f:07:
         5d:c2:da:da:14:d0:b8:b9:9b:ee:db:18:cf:22:80:86:d8:8e:
         b8:08:45:bf:7b:a3:b5:82:19:5f:02:de:3c:a5:0b:8b:bd:ea:
         e4:fa:c3:9b:b0:94:e6:a1:71:01:5b:9a:61:7f:14:7f:5a:4a:
         ca:68:e9:5a:aa:14:d4:d0:24:69:da:54:5f:db:76:e5:bc:c1:
         6f:8f:b8:ca:41:56:25:1f:2e:42:42:45:2c:1a:d1:35:dd:35:
         ce:15:68:59:e9:f6:c1:bc:8f:c3:16:b3:70:c5:8d:00:47:af:
         b2:f8:a0:37:6b:4a:5f:9e:e8:57:c6:b4:ea:80:73:cf:a4:fc:
         7b:34:1b:a2:ec:d7:98:97:d8:d3:3b:e1:27:20:92:1e:be:93:
         c5:21:01:b8:6e:d3:20:50:72:8e:e8:df:18:67:69:bf:7a:d9:
         28:bd:b8:52:8d:61:59:ed:d8:b3:f8:84:fc:f1:20:58:de:8b:
         b5:f7:43:c5:6a:c4:6d:b1:f8:a4:ee:52:56:8d:07:00:99:37:
         3e:61:e1:41:f6:4a:40:cf:90:83:90:ef:e6:63:6b:68:d1:30:
         4c:df:56:84:8f:ff:1e:43:a8:2c:7f:6b:8a:39:ee:aa:8d:fc:
         a8:42:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:52 2025 by rpki-client