Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
File:                     j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json)
Hash identifier:          VnOdmurYkZr2tuvEs8c9O83EC8uKn0ZlqQb1ss1lIcY=
Subject key identifier:   B1:DE:F3:6D:1F:58:4F:DC:66:37:92:B2:55:FE:16:07:9D:29:3F:59
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Certificate issuer:       /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
Manifest number:          0BFE
Signing time:             Fri 22 Aug 2025 18:53:07 +0000
Manifest this update:     Fri 22 Aug 2025 18:53:07 +0000
Manifest next update:     Fri 29 Aug 2025 18:53:07 +0000
Files and hashes:         1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: qLJFVxI0JeyYKqCWdpnIcgJBjI8kLUi0i4MeVYVCEAI=)
                          2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
                          rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
        Validity
            Not Before: Aug 22 18:53:07 2025 GMT
            Not After : Aug 29 18:53:07 2025 GMT
        Subject: CN=68a8bc93-b25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:03:74:a0:a3:01:03:b5:26:d9:48:f6:d2:
                    6f:52:0e:5f:5c:b4:52:f1:0a:d0:d0:c3:10:22:13:
                    87:6c:9b:82:5c:2d:cd:f6:b7:23:bf:ca:b3:78:94:
                    60:f4:13:7f:b0:7f:9e:83:1f:25:9b:9a:88:7f:8b:
                    c2:76:ee:b1:d2:e7:47:32:e3:40:3e:a4:99:a0:45:
                    c5:b7:27:81:7e:0a:d2:d0:2f:13:b7:5f:08:f6:a4:
                    44:19:dd:cf:8b:92:1b:5e:f5:4a:e3:93:f9:e8:28:
                    13:fd:bc:1b:af:15:bb:97:79:f2:d1:b6:56:a7:77:
                    94:fc:a9:00:4c:64:44:87:f8:e8:99:d4:ab:57:1e:
                    43:22:06:fb:66:9f:c9:b1:b5:56:c3:59:a8:2a:90:
                    92:b5:4d:3e:3c:3f:e6:7e:de:67:ee:38:e4:92:3e:
                    5b:e9:8b:6d:7e:9f:4a:0e:28:8e:d6:fa:90:94:f7:
                    c3:48:b0:87:97:18:45:7f:cf:b1:4b:e9:4d:b6:2f:
                    d3:c5:81:3e:0f:59:04:26:ce:e5:74:ed:88:4b:23:
                    24:b0:9b:75:7d:c7:0b:85:b5:b0:84:cc:48:e8:bd:
                    32:f6:8d:ba:de:3c:21:a6:71:56:cb:b2:fd:05:a2:
                    d2:92:85:2c:5d:05:85:95:df:f0:39:4d:7d:6e:ef:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:F3:6D:1F:58:4F:DC:66:37:92:B2:55:FE:16:07:9D:29:3F:59
            X509v3 Authority Key Identifier:
                keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:01:eb:05:ea:8e:b5:7e:fe:ca:bc:02:2a:1c:94:e4:be:a2:
         76:c2:aa:7d:5e:d3:c7:04:c8:59:af:8d:c0:df:2d:d9:69:6c:
         84:66:02:7a:47:58:c9:d1:55:70:00:58:82:da:79:0c:4f:9b:
         52:fc:89:04:d4:8c:67:5e:7a:5e:96:57:ec:aa:8f:29:93:28:
         27:9d:d9:06:36:67:2f:b1:0d:22:34:53:37:d6:85:22:61:02:
         7d:d9:41:2a:4d:65:e2:f5:ac:67:42:28:eb:52:a8:23:34:8d:
         7c:bb:74:76:a9:ab:1c:aa:fe:84:9f:24:8f:4e:ed:8e:49:f4:
         2c:4d:99:04:3a:56:c8:d0:23:d1:ab:dd:f2:75:17:6a:1a:2a:
         c4:69:7b:96:c7:61:fe:b4:57:d2:70:ae:5b:38:fd:b7:c7:2d:
         3b:c9:9e:0f:75:fd:66:a5:63:09:8a:47:1d:ab:5a:d8:da:fa:
         18:ff:c2:37:37:a5:03:ea:bd:6c:6e:52:87:70:a3:94:55:dd:
         94:0f:52:ad:69:64:08:38:e1:a4:7e:fe:03:d0:62:ff:ec:b0:
         1b:b9:5a:28:00:7a:31:50:e0:a8:74:aa:c6:57:c3:8a:d3:48:
         a0:b9:0b:89:2b:cb:82:88:0f:21:12:16:de:56:8e:c1:e8:ea:
         1c:ac:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:42 2025 by rpki-client