Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File:                     nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier:          8iYZ2XhUWO0b0N4RXYbq71x7gk5NOdTJ8NqsU524zmM=
Subject key identifier:   13:43:4A:F2:EB:EC:61:F4:70:A9:EF:C2:ED:85:83:AE:3A:8A:C0:AE
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer:       /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number:          0987
Signing time:             Fri 04 Jul 2025 20:58:53 +0000
Manifest this update:     Fri 04 Jul 2025 20:58:52 +0000
Manifest next update:     Fri 11 Jul 2025 20:58:52 +0000
Files and hashes:         1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: KOExWLUCZgrc7IhCB59HC3wx2iOnKcZee30v3krrQH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
        Validity
            Not Before: Jul  4 20:58:52 2025 GMT
            Not After : Jul 11 20:58:52 2025 GMT
        Subject: CN=6868408c-0846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:2d:8e:c9:b9:46:2c:b2:15:ec:3d:94:74:
                    8d:70:12:98:d2:07:df:dd:64:af:97:74:f0:e7:f3:
                    0f:14:1b:f6:8c:e1:58:eb:ea:53:11:ff:b6:56:18:
                    40:e6:5d:27:3c:e7:fa:29:7b:da:2b:ad:e0:f4:97:
                    da:7b:04:64:5a:df:99:7b:b2:86:4b:ee:49:36:da:
                    1f:b7:00:dc:44:9a:1f:29:4e:de:71:06:8b:06:2e:
                    df:06:e2:e2:1a:33:e5:5a:35:5d:22:ae:c1:20:d0:
                    a4:2b:73:34:85:3a:a4:e2:8e:5f:8e:c7:db:f4:83:
                    5e:dd:04:1c:bc:b2:47:f6:01:5f:ae:d6:bf:12:25:
                    77:98:3d:8c:f7:f5:50:99:c2:21:bd:ae:26:cd:ba:
                    fe:a6:45:6e:9c:69:f1:e6:0c:38:46:f6:4f:d8:08:
                    dc:2e:d2:75:ea:2f:5b:0a:76:94:1f:4a:14:13:a0:
                    10:e8:2e:ae:a1:36:1e:bb:c0:3a:c1:b9:bd:fb:df:
                    31:ac:a7:62:2d:5c:86:16:87:04:fb:64:0d:12:10:
                    7c:a3:5c:76:f0:dc:79:ef:9f:b1:06:d6:5e:12:8b:
                    cd:82:19:a2:70:88:18:08:88:ca:12:37:99:bc:e4:
                    8f:ab:b9:2d:20:f6:a3:92:46:9f:b7:f1:03:41:c0:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:4A:F2:EB:EC:61:F4:70:A9:EF:C2:ED:85:83:AE:3A:8A:C0:AE
            X509v3 Authority Key Identifier:
                keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:00:df:04:50:20:97:aa:81:0b:82:16:fb:ca:18:22:74:
         50:f6:80:52:77:9b:f2:fa:4b:9a:7c:65:15:65:84:05:6a:be:
         88:af:d6:72:16:e2:13:6d:86:4f:00:d6:ee:2c:30:44:fa:e6:
         75:f9:3c:c5:a6:2e:98:e2:00:96:5c:27:39:16:aa:f9:6b:5f:
         2f:4f:dc:04:9c:4d:a4:c7:d6:bc:54:35:e2:4e:63:00:d1:19:
         4d:9e:ba:fa:59:75:2a:9e:81:88:f3:d5:e4:a0:85:3c:22:1e:
         57:47:fd:d4:b2:fd:54:45:47:ee:08:4c:af:f5:58:2b:14:fe:
         3d:6e:5b:81:6d:d2:4c:39:79:b9:cf:47:7a:5a:78:b6:cb:42:
         ab:f1:e6:19:27:b0:3e:aa:39:c9:81:22:fe:5d:28:d4:5b:35:
         09:04:bd:5f:e6:bc:4d:dd:72:56:24:ea:2a:ef:71:54:c1:95:
         94:9a:89:33:bc:a8:89:5e:8c:ce:40:28:20:dd:be:43:d4:15:
         2b:35:1c:49:6d:5a:ca:c7:78:a6:0c:19:e3:3d:e2:d3:21:97:
         6e:e5:c5:11:17:a1:97:32:a0:b7:97:c9:b7:a3:7c:54:56:66:
         89:c5:e7:20:91:c4:90:70:22:9d:10:6f:23:17:09:85:33:90:
         ac:9d:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:11:10 2025 by rpki-client