Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File:                     rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier:          udIArNrSH23K3kWPVfKgGdtgsl4Rmcc83hPC6MqRmJo=
Subject key identifier:   2B:BD:AC:91:3D:56:3A:58:27:F8:88:A6:C1:0A:A8:98:BA:5D:99:8B
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer:       /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number:          82
Signing time:             Sat 23 Aug 2025 06:55:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:55:25 +0000
Manifest next update:     Sat 30 Aug 2025 06:55:25 +0000
Files and hashes:         1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: BG+YaFjnPif/wWAqO8TgoiooMogNR/PXQ/hiR2rg1xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
        Validity
            Not Before: Aug 23 06:55:25 2025 GMT
            Not After : Aug 30 06:55:25 2025 GMT
        Subject: CN=68a965de-6b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:80:b9:2c:a7:b2:ac:a6:38:c4:0f:8a:25:
                    bd:df:f5:22:a2:55:11:d5:9c:b8:1d:71:3e:0f:72:
                    ae:6c:52:fe:08:85:df:33:17:ba:8f:29:59:29:8b:
                    c2:9f:51:57:5b:f7:21:5f:1b:02:77:38:03:22:16:
                    a9:7c:f6:ab:64:58:40:16:3a:ce:51:49:8a:05:52:
                    88:55:5a:81:45:9b:46:5a:9e:1b:21:d8:6a:38:33:
                    e6:29:7f:eb:f3:93:2c:0b:7e:c1:39:04:a3:f9:0b:
                    9a:eb:6c:2e:77:78:b7:a9:0c:90:76:3b:25:49:a1:
                    e4:78:59:9d:ca:48:66:03:7b:70:7b:af:49:3f:6b:
                    23:a8:ee:80:b1:19:b7:7a:3c:13:a0:69:1d:8d:25:
                    8a:20:96:28:46:e5:24:16:f8:7c:b9:1d:83:45:d6:
                    7a:f1:00:5f:bb:98:a9:83:f5:73:06:2d:04:9e:0f:
                    ad:03:f1:04:19:52:61:34:5f:47:27:af:90:7d:25:
                    8a:f0:d1:a5:a3:e4:01:58:0e:bc:66:5f:53:ec:e3:
                    30:ce:7c:f3:97:42:64:8c:ec:dc:42:da:b6:73:00:
                    28:5f:83:f5:3d:a7:e2:11:e0:35:b2:9f:98:55:e8:
                    20:ba:56:b8:13:30:0c:7a:5c:96:f6:13:94:d7:67:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BD:AC:91:3D:56:3A:58:27:F8:88:A6:C1:0A:A8:98:BA:5D:99:8B
            X509v3 Authority Key Identifier:
                keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:09:c6:ee:6d:a3:c5:82:a8:71:60:49:11:90:a3:a5:b4:
         a0:bd:ff:21:93:82:64:b1:f7:fe:fc:af:3d:2e:66:10:4a:d4:
         04:68:d2:9b:ae:12:43:7e:75:e5:0e:12:d4:f7:ee:21:99:97:
         34:b2:60:60:d1:2a:de:b3:82:cd:b8:3a:d6:52:bf:86:3d:9e:
         ec:26:af:32:ed:44:c5:e2:c3:05:aa:8e:21:59:b8:31:e4:6a:
         a1:2c:2d:13:5a:c2:25:ed:6f:50:23:41:25:d0:e9:c4:03:ec:
         79:0e:b9:57:12:d1:2b:6b:67:1e:b9:3d:d9:f5:5e:90:41:81:
         79:74:d8:2a:bd:a4:49:57:23:aa:c2:e4:c3:e2:8a:b8:f3:fa:
         40:e5:70:98:42:de:e6:8b:02:26:6e:47:9d:2d:6a:d8:18:67:
         cc:a0:ff:5d:8e:9e:e0:a7:07:2b:db:05:87:c3:49:96:4d:74:
         55:e3:39:e5:69:1d:11:2b:b0:c0:82:42:3b:0a:c1:ab:7b:65:
         3d:a6:4f:1a:60:87:e9:64:91:fb:27:7f:9b:9d:f0:cb:6f:bc:
         7e:cf:2b:2c:76:cf:ff:13:e0:58:a9:0b:4c:dc:af:62:48:a2:
         1b:bc:78:85:11:4c:74:48:90:8f:a0:13:60:c4:20:97:a9:65:
         15:ae:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:11 2025 by rpki-client