Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          2v88ehEztvEYOFerfY6z565GbyFIgsMMjZcv+z0BTzQ=
Subject key identifier:   B2:BA:D8:02:B0:03:8E:9E:77:AB:5E:26:1E:B2:E4:AD:5D:8D:B0:CD
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       1767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          1FEB
Signing time:             Fri 22 Aug 2025 16:41:48 +0000
Manifest this update:     Fri 22 Aug 2025 16:41:47 +0000
Manifest next update:     Fri 29 Aug 2025 16:41:47 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: aNGKymrILu1P8Kk9rTgDktwms8+vsN0cOg6iSMe8O94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5991 (0x1767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
        Validity
            Not Before: Aug 22 16:41:47 2025 GMT
            Not After : Aug 29 16:41:47 2025 GMT
        Subject: CN=68a89dcb-8821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:e4:56:f7:14:91:70:b7:eb:33:a0:6f:4f:
                    7a:81:e5:dd:0b:bf:e6:26:27:a9:85:72:4e:a5:93:
                    ff:d9:6d:4d:37:f4:bb:a0:3f:e1:91:3c:78:90:2f:
                    4d:20:8e:a6:6a:0f:7c:3a:cc:87:2c:08:79:6e:2e:
                    03:73:97:50:57:5a:fc:3e:18:a5:3e:bf:44:5a:08:
                    9b:2d:e4:3f:60:7f:f4:58:f4:f1:89:ec:66:1d:60:
                    03:ee:17:19:37:35:fb:68:02:42:a7:c3:b8:b1:63:
                    e0:c4:d5:bc:90:93:46:2f:c3:bc:1d:1b:c9:09:1f:
                    f0:3d:13:87:f4:07:fe:73:10:41:d5:fe:42:23:ac:
                    29:b6:8b:62:fd:c2:21:f1:de:7b:8f:9c:fa:a7:20:
                    5a:ee:d0:c5:a3:d2:4c:14:59:83:be:a1:e7:10:35:
                    e3:fb:26:23:b4:19:e5:e6:de:fb:d0:74:94:00:83:
                    62:5c:58:ff:2f:05:78:1a:4a:1c:fb:d1:98:19:fa:
                    42:13:47:2d:63:87:60:22:4a:90:da:61:5c:ec:b2:
                    16:a5:90:14:54:d5:2c:bc:e3:89:52:8a:16:a1:72:
                    c4:1e:07:99:a8:1a:c9:a2:cd:9f:14:d4:d9:8d:e2:
                    8b:68:69:d4:fe:d0:87:a0:c6:80:c0:5b:27:2d:86:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:D8:02:B0:03:8E:9E:77:AB:5E:26:1E:B2:E4:AD:5D:8D:B0:CD
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:a4:7a:94:84:a7:97:57:f5:ef:0b:a3:20:69:62:b2:a7:
         c5:a5:3a:9c:41:65:62:e3:b0:7e:c5:ab:87:13:27:36:07:22:
         3f:94:a9:50:78:86:c3:44:12:10:58:38:18:44:86:dc:49:67:
         19:5e:d6:7c:eb:27:bd:f5:31:15:ef:fa:5d:7f:50:b1:63:ba:
         35:26:1d:ee:01:9c:8b:ab:9d:7d:f8:9a:7e:9d:84:e5:9f:00:
         13:51:54:e0:12:54:f9:da:5b:6b:c4:2b:9c:a9:b9:f4:bb:9c:
         97:53:5f:b6:4b:ac:cd:6d:62:66:ea:77:1b:3f:36:a4:51:47:
         b3:eb:fe:fb:bb:18:b2:a2:e4:ee:48:5c:94:4b:50:05:5d:06:
         03:0c:22:74:3a:83:bc:96:18:08:4e:b9:08:72:48:68:0f:47:
         67:fd:88:1f:3f:c6:fb:ce:fb:3b:e5:a7:39:70:02:36:42:30:
         55:b8:c6:17:be:68:53:c7:98:15:a7:a7:1e:9a:57:aa:37:56:
         a1:ca:7c:ae:5d:19:e6:96:47:04:25:d2:21:95:28:9e:67:65:
         c8:04:24:ef:5b:a2:19:22:8c:db:21:4a:bd:d7:1c:a9:9a:db:
         68:f0:0b:87:6d:c9:ea:b2:66:28:22:9e:2a:4d:d7:21:04:8c:
         c2:c7:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:28 2025 by rpki-client