Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File:                     J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier:          JREvyJDJupLJpH3C+9oQoM+O7ABfUDxKKiI0mOIb4uY=
Subject key identifier:   F8:B0:AE:EA:74:8D:03:D5:D9:6A:31:65:55:E7:B7:D5:59:87:FF:AC
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer:       /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number:          94
Signing time:             Sat 23 Aug 2025 06:41:30 +0000
Manifest this update:     Sat 23 Aug 2025 06:41:29 +0000
Manifest next update:     Sat 30 Aug 2025 06:41:29 +0000
Files and hashes:         1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: /lZ1k5QdcphQhEzh7uUzahFISzjO+DNFaHmFoV+400A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
                          rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
        Validity
            Not Before: Aug 23 06:41:29 2025 GMT
            Not After : Aug 30 06:41:29 2025 GMT
        Subject: CN=68a96299-4ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:77:3b:01:cc:11:82:e0:5d:90:a4:62:2b:
                    9a:da:07:6c:4f:22:4c:3a:c7:f5:ab:11:89:3e:59:
                    62:b2:05:5d:28:29:71:be:dc:93:0e:36:60:f7:fb:
                    e1:75:6b:2f:58:03:fb:09:09:23:24:b5:d9:0f:e0:
                    65:50:13:2e:e1:e3:26:f7:71:eb:7a:b1:ee:15:6b:
                    fa:dc:73:df:22:53:e8:62:fb:e0:b4:23:bb:34:43:
                    27:b1:a4:16:e9:67:8d:c5:c4:c7:e3:b7:9e:73:b1:
                    55:e6:43:23:38:84:c9:88:d0:a9:7b:f2:63:9d:4b:
                    50:e8:ec:d5:39:d5:cb:a4:bd:39:45:44:61:aa:8b:
                    d0:ef:a4:62:60:64:ae:dc:8d:b3:1b:6e:f2:ed:b0:
                    e6:e7:b2:36:cc:e6:d3:63:09:57:00:bd:3b:a2:b4:
                    45:c6:39:f7:f1:37:ab:87:39:5f:d0:45:ed:7a:0e:
                    de:8a:a8:f3:d8:66:8a:d3:6c:60:39:49:e9:08:90:
                    b0:50:a0:eb:e1:62:bb:17:e1:1c:44:69:a0:99:59:
                    19:fd:c3:31:50:e3:66:e6:a2:77:c5:9e:ed:9c:56:
                    ee:29:b7:b0:62:37:64:8e:6b:7f:91:c3:dd:ae:66:
                    d4:5a:9c:d9:c2:e1:84:3c:4c:21:43:87:cf:ea:19:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:AE:EA:74:8D:03:D5:D9:6A:31:65:55:E7:B7:D5:59:87:FF:AC
            X509v3 Authority Key Identifier:
                keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:4c:c7:a7:4b:2e:ca:7f:3c:67:07:a9:ed:19:fd:4c:61:
         fa:a5:96:b0:46:f5:87:e6:d9:9f:e2:ea:aa:87:d0:48:e2:c0:
         b0:cb:6e:c4:38:22:03:27:3e:34:3a:5a:d0:8b:34:85:20:8a:
         5a:6e:da:27:ae:84:62:e8:a6:b5:27:57:d9:03:48:41:7e:09:
         fe:6d:1a:ba:d3:b1:6a:a9:30:97:80:d3:4d:72:1f:93:34:39:
         ef:7f:a8:8f:ed:28:48:7c:3f:c3:0d:60:65:50:82:e0:95:c0:
         17:c3:bb:9b:4e:2a:07:5e:a5:3e:71:29:34:0d:99:2c:98:4a:
         11:cc:c0:53:1b:a8:0c:a8:0a:ea:5c:20:80:ac:8a:d2:4d:51:
         be:c3:2a:0a:f2:ad:a3:2e:32:cc:01:99:83:db:22:16:13:e1:
         81:ec:06:a3:12:71:51:69:6b:50:65:13:cd:ef:f6:7f:f9:b4:
         1e:49:04:e3:dd:40:49:4c:81:c6:26:75:16:e8:e7:d0:20:7c:
         69:1a:e1:34:06:b8:a0:62:5a:97:b1:73:b3:02:b8:f9:ad:73:
         ef:19:91:6d:96:ea:4b:78:4f:fc:32:b4:98:6f:17:08:81:60:
         86:29:1a:40:ab:14:ff:e0:40:ba:e1:f1:4f:82:c5:b3:47:34:
         06:8e:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:34 2025 by rpki-client