Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File:                     dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier:          i0lX+CCa5dBTvD46AGIPgOTtS9oXtSguSJ7M6g/NNHA=
Subject key identifier:   2B:AC:EC:94:7B:D8:76:51:BA:51:CB:D0:01:F9:12:80:36:E6:D7:F3
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer:       /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial:       075E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number:          0901
Signing time:             Fri 22 Aug 2025 21:49:47 +0000
Manifest this update:     Fri 22 Aug 2025 21:49:47 +0000
Manifest next update:     Fri 29 Aug 2025 21:49:47 +0000
Files and hashes:         1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: cm4M3u2gShCKxqtF5QGw8wVaEdvvLvniZfe5TlSe7ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
        Validity
            Not Before: Aug 22 21:49:47 2025 GMT
            Not After : Aug 29 21:49:47 2025 GMT
        Subject: CN=68a8e5fb-7280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:a0:2a:cc:2c:c9:d6:2c:cc:a3:c8:0c:1d:
                    24:1a:c4:e2:15:8e:d1:53:f6:05:15:cb:40:a1:ae:
                    dc:56:12:e8:42:35:03:38:c6:e9:60:14:35:83:c4:
                    c7:1e:bd:12:94:9c:f5:e8:85:1f:4b:df:45:5f:e7:
                    4e:78:d1:35:ff:6d:03:d7:3b:7c:fd:7b:ae:a8:78:
                    8e:61:7f:5f:9a:e7:bc:dd:be:94:fd:08:53:3e:7c:
                    b7:ab:1f:45:00:0f:48:8c:c9:f0:00:d8:c0:37:8f:
                    52:31:71:84:87:61:36:04:7b:e5:ea:3c:74:a5:2a:
                    28:e1:b6:95:65:a8:81:d3:bb:dd:80:9e:67:4d:85:
                    95:41:e1:84:37:75:f5:01:de:2c:19:f4:a9:2e:7b:
                    f0:e3:46:f6:93:cf:a0:ba:c9:6f:6b:11:a4:1e:96:
                    7a:e2:eb:e6:be:c1:54:04:8d:79:f6:1c:ff:03:6b:
                    f2:85:9d:9b:7e:66:52:ee:ec:c7:c3:4e:b1:86:b4:
                    34:b0:70:94:e5:27:2e:4b:34:2a:99:41:0c:a1:4d:
                    25:d3:2d:3c:28:be:47:19:bb:51:bf:c7:62:5a:d1:
                    19:4e:49:82:33:bf:cd:43:cd:81:f5:29:1c:83:b9:
                    90:dd:ce:9c:a4:74:ed:98:65:f8:8f:73:86:54:5e:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:EC:94:7B:D8:76:51:BA:51:CB:D0:01:F9:12:80:36:E6:D7:F3
            X509v3 Authority Key Identifier:
                keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:4f:f1:b4:bf:aa:54:03:5b:d4:0f:d8:a2:3a:1a:4d:d2:
         c0:c5:ef:8b:35:60:06:53:79:b7:1f:ff:25:ad:93:24:05:a2:
         be:85:9c:50:55:0e:65:08:bc:d2:e0:c4:7b:26:9a:07:59:46:
         4b:2d:f5:c5:dd:2a:0d:07:43:56:83:e1:dd:f4:a2:ef:92:64:
         6e:1a:d5:d3:44:07:47:bb:e5:0d:f8:cd:09:9f:7f:e9:1b:4f:
         3c:67:70:90:f0:f8:fe:27:a8:5e:ce:dc:52:cf:0b:56:20:66:
         47:16:c9:fc:5e:d3:75:a5:85:6b:8e:f4:44:d7:66:32:5f:4e:
         15:6e:43:32:26:1c:bb:f2:36:b4:1c:3c:9c:ec:fa:34:dc:15:
         2f:77:9d:1a:ec:bc:d8:5a:ce:1f:54:83:bb:6d:c4:a1:07:66:
         e6:2c:55:39:c1:ad:89:2d:15:c9:a5:d0:59:4a:34:79:99:be:
         05:e1:2b:f1:98:f9:1f:27:e4:6c:6c:52:d3:cf:5b:29:d5:d2:
         68:38:37:c5:1f:de:01:89:63:98:e0:32:b7:aa:95:a1:98:04:
         60:ae:a0:0f:31:48:10:1c:3d:ef:c5:e1:48:16:4c:5e:25:d4:
         93:a6:f0:d6:fa:e6:92:6a:20:46:f0:58:70:33:8b:54:63:d8:
         3a:e7:4d:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1
QTI1OEExNTIwHhcNMjUwODIyMjE0OTQ3WhcNMjUwODI5MjE0OTQ3WjAYMRYwFAYD
VQQDEw02OGE4ZTVmYi03MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwD2gKswsydYszKPIDB0kGsTiFY7RU/YFFctAoa7cVhLoQjUDOMbpYBQ1g8TH
Hr0SlJz16IUfS99FX+dOeNE1/20D1zt8/XuuqHiOYX9fmue83b6U/QhTPny3qx9F
AA9IjMnwANjAN49SMXGEh2E2BHvl6jx0pSoo4baVZaiB07vdgJ5nTYWVQeGEN3X1
Ad4sGfSpLnvw40b2k8+guslvaxGkHpZ64uvmvsFUBI159hz/A2vyhZ2bfmZS7uzH
w06xhrQ0sHCU5ScuSzQqmUEMoU0l0y08KL5HGbtRv8diWtEZTkmCM7/NQ82B9Skc
g7mQ3c6cpHTtmGX4j3OGVF5euwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCus7JR7
2HZRulHL0AH5EoA25tfzMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1
MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV
bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYpk/xtL+qVANb1A/YojoaTdLAxe+LNWAGU3m3H/8lrZMkBaK+hZxQ
VQ5lCLzS4MR7JpoHWUZLLfXF3SoNB0NWg+Hd9KLvkmRuGtXTRAdHu+UN+M0Jn3/p
G088Z3CQ8Pj+J6heztxSzwtWIGZHFsn8XtN1pYVrjvRE12YyX04VbkMyJhy78ja0
HDyc7Po03BUvd50a7LzYWs4fVIO7bcShB2bmLFU5wa2JLRXJpdBZSjR5mb4F4Svx
mPkfJ+RsbFLTz1sp1dJoODfFH94BiWOY4DK3qpWhmARgrqAPMUgQHD3vxeFIFkxe
JdSTpvDW+uaSaiBG8FhwM4tUY9g6500r
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:28 2025 by rpki-client