Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File:                     z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier:          qndn/tzGnSuWMoDbBnXP+l+xXNK8JraRsWE4+ylL3Dg=
Subject key identifier:   3C:C9:EB:C6:C8:12:F7:D2:7C:B8:AD:F7:4A:4C:E0:F8:A9:02:DC:15
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer:       /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number:          0144
Signing time:             Thu 03 Jul 2025 04:22:59 +0000
Manifest this update:     Thu 03 Jul 2025 04:22:58 +0000
Manifest next update:     Thu 10 Jul 2025 04:22:58 +0000
Files and hashes:         1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: g/J++JdbEeG6z2nhe+jlK7b7pYVgJzovrYPqJi0EgBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
        Validity
            Not Before: Jul  3 04:22:58 2025 GMT
            Not After : Jul 10 04:22:58 2025 GMT
        Subject: CN=686605a2-9974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:f5:06:73:df:83:91:8c:d5:ed:18:48:3e:
                    27:17:39:1f:9b:2e:24:78:31:51:6b:d2:49:17:91:
                    6a:df:ec:a1:0b:c9:e6:c6:2a:b6:39:dd:b4:65:70:
                    11:1f:20:5b:a2:57:c4:50:c9:99:27:23:16:b1:e7:
                    43:7f:44:74:bb:a3:bc:e5:16:36:ad:06:33:08:32:
                    d3:2a:20:c7:ab:4b:73:85:94:11:cc:1b:8f:03:72:
                    53:3f:21:4e:18:8c:e7:75:2f:b7:16:b0:3c:b2:03:
                    3a:c4:d4:14:fe:bf:a6:68:69:ca:d9:2c:5b:43:4c:
                    a0:cc:d9:bd:71:e6:a8:6e:cb:69:9d:2d:b9:d6:ae:
                    0b:13:06:41:93:57:86:e4:1a:6b:90:b4:68:e4:f2:
                    0e:bb:e5:4a:dd:55:34:43:be:dd:e3:d7:c9:61:79:
                    fe:36:cc:f4:91:4a:09:58:af:22:f2:e2:5e:d2:2f:
                    c0:d1:4f:9f:49:39:d4:c8:d1:ae:7e:f8:1e:6a:ef:
                    80:a9:96:e9:18:f9:3b:96:4b:89:42:12:a4:a9:58:
                    c9:f3:5c:03:a4:ab:12:d4:13:54:3c:3d:f6:4e:ac:
                    e4:9f:21:b2:f2:19:8f:78:d5:c4:42:d8:70:a2:09:
                    b3:42:b1:50:bb:e5:06:66:2d:2a:a2:21:44:f7:09:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:EB:C6:C8:12:F7:D2:7C:B8:AD:F7:4A:4C:E0:F8:A9:02:DC:15
            X509v3 Authority Key Identifier:
                keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:94:c9:ac:7e:a2:b4:4c:2e:4d:bb:04:ec:e3:11:fe:d9:fe:
         fa:31:58:2b:0e:ec:93:00:ec:db:04:15:4c:a2:6b:f0:d7:25:
         47:b7:cb:94:3e:2e:d4:54:55:df:ae:38:e7:99:5c:54:a9:67:
         72:88:56:21:c3:09:43:c8:26:7a:52:9e:a8:8f:5d:ac:23:18:
         c4:82:9f:5c:68:5c:8f:ce:a4:3c:47:9e:0f:50:ba:0e:d4:7a:
         14:58:86:23:50:fc:02:10:b7:0d:26:f4:db:16:bd:b6:f8:fd:
         29:88:6c:cd:bd:b0:5d:36:84:0d:e3:a9:ce:20:75:48:24:96:
         f6:68:3c:18:1a:be:d3:47:f1:a8:48:6d:d8:a4:4d:7a:4c:55:
         f4:69:64:c3:93:51:d2:3e:9a:74:ff:fa:ce:ed:67:70:d0:b0:
         16:7b:d6:17:63:94:b5:df:2b:e1:97:6c:d7:08:a1:82:93:33:
         ca:0d:95:9f:20:a1:42:73:80:40:fc:49:51:36:98:73:6e:f5:
         e9:d2:37:16:ac:e7:7d:ff:57:c8:9c:95:84:99:c4:88:1b:b6:
         9e:74:eb:d8:40:d3:a1:a0:c9:12:48:7e:5e:b6:bd:b0:ca:6f:
         90:f0:42:d9:53:44:6d:c0:99:b7:0d:47:4f:d7:b4:79:00:f3:
         e9:06:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:14 2025 by rpki-client