Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
File:                     1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json)
Hash identifier:          xLfKpjfWO5lcLoKtNW1BEfuv2LSRGyQGeh0MfgITP/4=
Subject key identifier:   FC:48:B2:62:C5:75:14:21:4E:D3:D2:B6:6B:4F:F3:35:EA:A0:8A:E6
Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
Certificate issuer:       /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
Manifest number:          CC
Signing time:             Sat 23 Aug 2025 05:52:38 +0000
Manifest this update:     Sat 23 Aug 2025 05:52:38 +0000
Manifest next update:     Sat 30 Aug 2025 05:52:38 +0000
Files and hashes:         1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: 2QH7nU/nTtI3dQCSJMmThVEigfMMVtfLonxoDnUnajs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
        Validity
            Not Before: Aug 23 05:52:38 2025 GMT
            Not After : Aug 30 05:52:38 2025 GMT
        Subject: CN=68a95726-e480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:0c:12:88:d8:88:0c:a9:49:ec:2f:9c:e0:
                    bc:5f:77:be:56:e1:13:a1:18:b0:21:06:48:49:39:
                    97:27:b9:25:f9:1e:43:61:b5:45:13:29:d5:bb:28:
                    df:fd:9d:37:58:86:45:4a:65:22:19:c0:01:3e:84:
                    50:ae:ab:96:0a:fa:30:42:dd:ba:7d:aa:13:67:f5:
                    9c:16:6e:fd:05:e8:8a:2f:5f:1a:f4:e2:eb:c6:6e:
                    a7:c5:e4:61:01:90:06:8b:18:68:04:0d:8b:19:41:
                    c7:92:cf:17:70:4f:4f:d0:bd:f2:f1:bd:ae:e2:2e:
                    32:4c:f6:31:ad:54:18:03:7d:60:ca:48:60:2b:ce:
                    7a:6f:00:16:21:cb:69:9f:51:b4:3a:36:e2:35:91:
                    54:f3:e2:c8:19:e7:c6:e7:ab:e8:7d:ea:91:a7:89:
                    3a:67:17:22:71:68:18:9e:4d:4e:b5:58:2b:6c:31:
                    8e:c4:75:3f:9f:57:c4:90:73:21:42:b2:2a:7b:23:
                    33:7f:53:f3:e6:e2:80:a2:55:15:90:31:f2:3e:17:
                    02:73:61:88:05:04:bc:ec:13:39:62:6a:de:4f:b1:
                    af:8c:bc:7b:a5:44:15:58:1d:d3:ce:f9:d8:3b:52:
                    a6:83:ea:3a:76:bc:08:38:14:14:a1:e4:4b:e5:83:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:B2:62:C5:75:14:21:4E:D3:D2:B6:6B:4F:F3:35:EA:A0:8A:E6
            X509v3 Authority Key Identifier:
                keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:de:d7:bd:68:f1:60:d8:de:ac:78:cf:04:5c:81:6a:f1:39:
         57:82:82:5f:2b:c5:28:d9:21:35:b6:bb:5c:30:3d:8b:d2:52:
         d9:eb:e2:d8:9e:71:ac:e0:90:9e:7b:86:6c:a8:98:b6:57:fc:
         94:d5:b4:3b:f4:55:e0:8b:d0:30:60:26:46:3a:32:0c:0d:56:
         28:65:b7:cc:19:91:ed:e4:90:fd:bb:8e:33:57:05:3c:1e:c7:
         b4:f9:6b:b2:54:fd:fd:f6:43:69:38:0f:5c:e4:93:f8:24:61:
         78:0a:cd:cf:87:6c:c4:cd:f4:e4:5c:51:34:0d:2c:9b:5a:c6:
         c9:06:80:f9:88:0a:89:a6:bd:80:94:3f:bf:7e:ea:da:84:be:
         da:85:2a:af:58:3a:31:3b:13:79:d9:35:83:5d:92:d9:4f:2a:
         6f:34:5c:01:2f:70:c2:88:53:e6:e0:7d:57:53:b9:20:9f:9f:
         8b:21:14:a3:8e:d7:f8:60:34:54:b4:60:bb:59:4b:27:18:cf:
         51:31:f8:6d:50:f7:d4:a7:45:24:9c:ae:53:d8:5c:18:a2:5c:
         67:98:c8:40:8b:d9:e5:6e:20:ee:ac:8b:65:c8:b1:56:c1:77:
         87:aa:8f:7f:f5:ca:fd:1b:e1:37:4c:6d:06:91:58:d0:98:bb:
         1f:a5:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:24 2025 by rpki-client