Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          1secJ4HLZkTtf7TZ0099JGgFs53IP7aAWSnW7CY8H6k=
Subject key identifier:   BB:5A:47:A4:48:76:20:EF:A5:F9:24:3F:40:97:FE:2D:AF:F7:10:8A
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       114C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1DD6
Signing time:             Fri 22 Aug 2025 17:22:43 +0000
Manifest this update:     Fri 22 Aug 2025 17:22:42 +0000
Manifest next update:     Fri 29 Aug 2025 17:22:42 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: 3/bix4DXAW5v1e/flDH6pwn0KjfgRvO+B0DeM76DeS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4428 (0x114c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Aug 22 17:22:42 2025 GMT
            Not After : Aug 29 17:22:42 2025 GMT
        Subject: CN=68a8a762-9e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:94:a0:0b:d0:69:cd:b3:c7:ab:56:16:0d:
                    1d:eb:61:29:e8:ba:42:73:45:d8:6b:8b:3f:42:57:
                    3c:d5:35:34:ee:8c:ba:cd:6d:2f:d5:4c:b9:80:85:
                    ef:2f:4f:6f:5f:69:0d:b3:01:68:cf:bb:94:28:0d:
                    b8:be:51:84:06:f5:d6:d8:53:ba:bf:0e:a2:93:f4:
                    0f:55:d5:f3:ec:6a:93:46:09:89:f1:60:6c:05:00:
                    ee:e7:a4:11:81:3d:78:45:86:c3:e4:39:61:2c:5e:
                    c8:47:8e:da:20:05:ea:fc:2a:74:6b:98:83:8d:2c:
                    39:4c:5f:f5:1a:fa:f5:ce:3f:d9:64:c3:18:97:18:
                    da:d2:48:3b:7f:34:5d:f6:03:a1:de:57:2e:89:7f:
                    cb:06:f0:b5:c8:78:55:29:da:df:c7:af:4a:f2:42:
                    95:ea:3c:18:fc:16:be:c5:e9:2a:a8:2b:42:c8:3b:
                    00:c1:f0:eb:82:b0:77:91:04:ce:ed:ed:d7:35:d2:
                    85:78:e3:58:95:15:17:42:dd:fc:d2:1d:f8:d6:89:
                    a6:8d:4c:11:40:e6:4b:7e:e6:2a:1f:46:7d:eb:46:
                    86:45:53:58:90:e8:74:a9:c1:75:86:26:c9:45:c7:
                    e1:43:ee:b7:cf:3b:d6:35:ad:27:0f:91:ed:71:ab:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:47:A4:48:76:20:EF:A5:F9:24:3F:40:97:FE:2D:AF:F7:10:8A
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:42:a9:e1:a9:d7:77:67:ca:42:ee:5c:c6:5c:72:ba:4c:36:
         5e:90:18:bf:b4:54:b0:10:6f:0b:d9:72:11:a3:98:36:ab:21:
         ba:91:3f:90:cf:c2:c5:4e:e5:ed:90:ec:f4:4e:0c:91:ce:dc:
         11:99:e4:23:90:d7:2d:99:47:97:09:ae:4e:34:c3:cc:3e:fa:
         3e:90:c7:b5:4d:d6:ca:47:4f:44:09:75:bd:45:e5:d9:cf:55:
         d9:26:a4:05:b5:a7:0e:61:8c:4d:a1:12:5a:b9:b7:3d:dc:b1:
         94:bf:3a:77:87:a1:83:c3:ac:7e:6f:50:48:9d:8f:31:86:ae:
         88:3d:4d:41:00:f4:ad:b3:aa:64:56:24:fc:e1:7f:38:7e:5a:
         7e:51:12:e8:f5:7d:42:5c:c2:49:d3:85:4b:8d:b9:ba:a7:5c:
         91:79:b7:91:78:5a:37:b4:35:cc:fb:e3:b9:90:9a:f5:04:a6:
         69:2e:05:a8:5b:b7:0a:be:5d:ca:26:69:c6:ca:27:39:53:72:
         fd:a2:95:b7:51:89:cf:48:be:8e:94:38:44:5f:8b:17:d6:ba:
         7e:67:58:a8:9f:47:be:0e:9f:a7:4d:11:5e:c0:ed:74:06:9e:
         2c:38:6e:d9:67:3d:9f:84:0d:cc:d1:b3:3e:b1:d6:49:f4:fc:
         6b:3f:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:41 2025 by rpki-client