Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
File:                     V-g9gYxmEEbA4OLv5TjuEncAqjM.mft (raw, json)
Hash identifier:          n52tEEmxs8t6/LcTNRUs4HdHEnwC2skqF7XxdbKbeE0=
Subject key identifier:   74:64:CC:A3:EB:7B:CC:43:8D:56:B7:02:B9:6B:E4:E3:97:4F:1B:C5
Authority key identifier: 57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33
Certificate issuer:       /CN=A91DD1CC/serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
Manifest number:          25
Signing time:             Sat 23 Aug 2025 08:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 08:02:07 +0000
Manifest next update:     Sat 30 Aug 2025 08:02:07 +0000
Files and hashes:         1: V-g9gYxmEEbA4OLv5TjuEncAqjM.crl (hash: hju2PDR9zFo8o+3ZNo1ocdIWDlF0MCH38+dCsV7PFPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33
        Validity
            Not Before: Aug 23 08:02:07 2025 GMT
            Not After : Aug 30 08:02:07 2025 GMT
        Subject: CN=68a9757f-bd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:2d:97:20:0b:3f:dc:41:11:47:ba:e8:64:
                    bd:9f:c0:3f:58:80:74:8b:32:41:d0:97:26:de:a9:
                    78:fa:4a:32:cc:7c:c6:42:dc:52:9f:3e:be:68:76:
                    7d:ad:0f:13:98:2a:ad:04:01:ba:51:97:d6:bc:ed:
                    85:1f:ac:01:fe:15:76:5a:59:60:04:c9:84:5d:19:
                    09:4f:3c:4e:cf:fb:d6:5e:28:b3:58:04:93:a5:fe:
                    b9:7e:47:fa:7d:62:4e:3f:d0:9d:b2:b5:2c:e6:88:
                    c5:35:aa:3d:95:ed:6b:01:54:fc:e4:50:66:5c:bb:
                    bb:37:3c:79:2d:db:0a:1f:2b:75:5f:99:dd:1a:69:
                    cc:58:28:ad:51:0c:93:f4:aa:28:52:45:83:64:28:
                    09:38:3f:5b:d7:95:e7:f5:5a:73:b8:d3:d1:cd:80:
                    5c:68:50:8d:69:9a:aa:cf:bd:78:ac:35:5f:ea:95:
                    45:2c:df:c3:cd:3c:cf:0c:f1:88:44:ab:22:45:e1:
                    8f:8a:7d:c3:95:5c:5f:19:cf:92:67:b4:70:0c:e2:
                    c3:31:c9:5a:7f:05:49:29:84:cf:8e:05:f7:a7:50:
                    13:b0:0a:dd:67:db:f0:61:59:63:54:36:26:b5:b5:
                    c9:a3:36:d6:9a:30:13:25:31:b7:96:4c:87:39:eb:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:64:CC:A3:EB:7B:CC:43:8D:56:B7:02:B9:6B:E4:E3:97:4F:1B:C5
            X509v3 Authority Key Identifier:
                keyid:57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:ee:fc:30:71:7d:7e:46:4f:a4:75:de:ed:8e:7f:1c:cb:
         1d:de:24:90:a0:75:f6:77:24:f7:e1:71:86:8d:43:0f:74:a3:
         ce:e1:f0:31:c1:a0:a9:b5:10:9d:36:33:a8:28:4b:07:3c:43:
         87:64:a9:fb:2e:86:15:81:9c:5c:ea:b8:32:b7:1a:52:1f:28:
         b0:c9:ea:76:a4:c4:ea:ad:62:32:ea:de:ce:ff:2e:7b:27:17:
         d3:dc:10:0f:66:a4:f4:74:89:4f:7b:d1:5e:d9:23:f9:7a:2c:
         32:bd:89:6a:d5:1b:82:38:25:12:1d:03:e2:42:c7:21:76:e4:
         f0:01:73:30:8b:4d:ff:62:00:6d:7e:81:ae:f6:f2:22:a7:2c:
         b4:df:5f:c4:65:9a:cd:99:a0:56:ff:95:b8:83:5b:02:eb:94:
         3c:2b:1b:1e:50:d2:27:10:eb:68:69:72:f1:8f:4e:22:e6:d1:
         d4:0e:23:ea:cd:88:65:3a:8b:99:b2:29:06:bb:d2:8b:76:b4:
         c5:e1:15:9d:49:78:8f:dc:7c:b5:aa:49:14:71:a5:ab:c5:fe:
         df:32:b1:8c:c1:59:33:92:6a:3b:dc:0b:37:fd:cb:95:d2:c6:
         91:e1:63:27:2a:d9:05:8e:9c:c7:37:dd:ee:73:8a:f8:18:45:
         d0:44:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:40 2025 by rpki-client