Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File:                     C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier:          +HFGXGw2nz2xHyJIigyvVZk3a+YFL1FKmowaRg4d/lU=
Subject key identifier:   DB:EB:B9:05:5E:BF:4A:83:A3:C4:D1:FA:65:90:7E:4C:0D:62:21:D5
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer:       /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number:          84
Signing time:             Sat 23 Aug 2025 06:53:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:53:25 +0000
Manifest next update:     Sat 30 Aug 2025 06:53:25 +0000
Files and hashes:         1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: PVLm8tB1tuHlAeTuwV4pJtq3xTf0oyGJgCiof4zZY3M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
        Validity
            Not Before: Aug 23 06:53:25 2025 GMT
            Not After : Aug 30 06:53:25 2025 GMT
        Subject: CN=68a96565-4c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:72:0d:a9:a0:73:ce:5b:00:69:f2:31:90:
                    d7:00:02:72:3b:cd:dd:e6:96:0f:85:0a:5e:29:cb:
                    ef:37:c8:94:8d:9c:04:e3:ee:94:d8:51:c7:df:82:
                    ad:e8:11:5e:e3:60:90:f5:9f:8f:2f:4c:7a:7b:7a:
                    5f:75:60:4d:8c:4f:96:5f:02:76:2e:8e:76:f1:2d:
                    95:5c:87:74:ab:8b:02:f9:51:4d:22:27:0a:4f:88:
                    76:67:95:c9:6d:8d:ae:08:92:6b:2b:12:51:27:b1:
                    2e:52:74:a3:6b:ba:9b:fb:df:a5:33:1d:d2:40:aa:
                    f7:df:60:c3:71:2c:8f:1f:3f:16:0f:ba:87:a4:c9:
                    14:24:3d:1d:71:fa:41:a2:73:e5:ef:5d:f5:ae:7b:
                    78:f7:88:5b:2a:b7:c4:f9:39:c9:cc:64:2c:71:15:
                    d0:35:b4:06:65:8f:ea:f6:57:70:01:62:ab:5e:a0:
                    c5:31:64:ee:48:75:25:6e:e8:5a:c9:90:86:be:4d:
                    16:40:1f:3b:04:3f:91:3c:6c:46:17:44:9b:ff:69:
                    d7:ed:76:ed:57:de:52:56:b6:bf:02:31:7a:43:3b:
                    c9:bc:02:0b:c1:2e:b5:e7:82:ef:f2:50:52:7c:94:
                    b2:91:cd:49:18:c9:b5:37:36:6a:78:6e:54:9b:bb:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EB:B9:05:5E:BF:4A:83:A3:C4:D1:FA:65:90:7E:4C:0D:62:21:D5
            X509v3 Authority Key Identifier:
                keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:74:07:52:7f:cb:b3:00:e6:a5:c6:c4:b9:ae:90:18:f1:
         f2:00:fb:d0:93:c9:c9:3d:a0:25:57:0a:79:47:9d:67:e8:4f:
         80:25:f6:c4:6a:ed:34:f4:0d:2d:51:3e:54:fd:fc:22:f3:a4:
         38:cd:68:01:a7:8c:60:00:4d:1a:bf:7f:10:91:13:65:cf:15:
         b7:a9:8b:18:95:cb:76:9d:3c:9b:77:9d:69:7b:1e:d8:18:cb:
         0f:96:33:1c:e5:94:40:a1:bd:2a:5b:6d:8e:6c:56:67:10:b2:
         f1:65:2b:f3:50:c2:39:e2:60:f8:03:cd:61:d2:d7:f4:44:c8:
         90:ac:51:80:72:91:7b:ec:5e:e4:c4:d1:ed:7d:21:77:09:07:
         87:a2:c5:06:45:e0:f2:c7:01:49:9a:6a:59:d4:cc:76:1b:39:
         fa:f1:25:2f:85:a9:66:5f:56:f6:f5:0f:18:b4:0c:9e:88:e9:
         f0:f0:92:dc:fa:8b:0b:78:f5:78:2b:e3:92:c9:43:c7:15:67:
         b3:4f:99:5c:ed:08:e5:df:4c:0c:9e:65:5b:f8:04:97:df:de:
         34:1b:42:69:08:b5:93:7f:8a:25:55:6d:10:90:d5:57:91:70:
         72:72:45:8f:d5:41:00:b6:5c:ae:40:6c:e3:ce:03:0f:b6:a0:
         49:ae:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:14 2025 by rpki-client