Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
File:                     fH06qZRpRKT9iR5GspbjygcKOF4.mft (raw, json)
Hash identifier:          MCyG+ko6wtncYRGWY+Ysd0OzP3RrF+QK3Exl6t2/DpE=
Subject key identifier:   B9:C2:BE:5E:6E:8B:70:2F:2D:B8:F3:6E:36:72:49:53:BD:02:84:EA
Authority key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E
Certificate issuer:       /CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E
Certificate serial:       0661
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
Manifest number:          0661
Signing time:             Fri 22 Aug 2025 22:40:43 +0000
Manifest this update:     Fri 22 Aug 2025 22:40:42 +0000
Manifest next update:     Fri 29 Aug 2025 22:40:42 +0000
Files and hashes:         1: fH06qZRpRKT9iR5GspbjygcKOF4.crl (hash: QPFJOHmk3dqXUTTcrOdfxYO0mrRHG4k1Hkg3EGxl6Fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE449, serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E
        Validity
            Not Before: Aug 22 22:40:42 2025 GMT
            Not After : Aug 29 22:40:42 2025 GMT
        Subject: CN=68a8f1eb-ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:ab:b4:83:32:1a:c6:c9:a5:1b:42:26:76:
                    16:b2:1c:61:26:b4:43:9d:ee:41:c7:b4:b2:ba:b5:
                    7e:fc:77:d2:ac:89:46:bf:23:a4:f6:41:ea:98:c5:
                    29:ec:3a:2a:79:a9:c1:30:bd:59:ec:7c:62:48:26:
                    4d:8f:32:c5:b3:7e:01:b3:c1:fb:50:64:e0:69:5b:
                    bb:4a:d1:78:05:c4:1b:cd:b3:d7:f9:5b:cc:06:52:
                    91:68:f0:b0:ec:c9:19:75:3a:cd:2d:bd:ab:0c:3f:
                    81:c7:88:f8:a5:43:1a:14:dc:d1:18:5c:70:8e:be:
                    38:29:1e:be:83:5a:62:47:64:c6:0a:de:1e:41:dd:
                    8e:7e:41:d2:ed:89:90:d1:48:b2:4e:6e:2f:43:db:
                    ad:a6:c4:d8:75:91:06:9a:95:78:b7:99:21:61:c1:
                    3a:66:f5:08:d7:e2:cf:08:e5:b0:8d:23:f7:8e:7a:
                    ee:8c:82:34:02:85:31:c6:d1:56:7d:42:38:7b:99:
                    0a:2d:24:f0:69:b2:fa:c6:87:a5:ab:3c:84:fa:17:
                    07:71:93:8f:fc:66:40:4c:5a:8d:e2:ae:3d:17:e3:
                    2b:fd:88:38:b2:dd:7b:81:d3:50:aa:14:98:10:e4:
                    b1:da:1e:de:5c:40:0c:92:29:ac:b6:07:b1:cc:9f:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:BE:5E:6E:8B:70:2F:2D:B8:F3:6E:36:72:49:53:BD:02:84:EA
            X509v3 Authority Key Identifier:
                keyid:7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:ef:9a:0c:2a:af:60:a9:73:7c:11:dd:83:9a:b5:83:ef:
         7a:96:86:d3:2d:f2:45:c1:aa:14:5b:74:62:ad:a9:fa:09:5d:
         64:8e:40:58:04:e3:27:6a:42:da:51:47:8a:40:f3:c4:de:ea:
         75:aa:99:fb:75:84:ed:48:e1:17:4c:0d:0c:e1:07:dc:2d:d0:
         9b:65:79:ce:62:a3:fc:c6:87:4e:ef:10:c8:81:b8:01:47:01:
         a3:85:a9:e2:42:79:fd:94:a1:fe:55:50:e5:af:c4:f3:4a:89:
         da:25:30:38:1e:40:ce:fd:72:e9:96:ad:3a:56:98:7a:34:60:
         06:bb:68:b8:85:ff:38:0a:35:ad:43:ee:6d:e3:42:ff:64:f6:
         23:85:8b:a3:9b:b7:5e:c1:c6:68:3b:11:74:24:65:d6:5a:13:
         16:51:6d:17:c3:62:e1:8f:a4:b7:ad:65:30:b6:ec:3f:aa:0b:
         20:22:98:c9:f6:7c:f8:c3:98:24:16:64:41:c7:15:81:e2:94:
         2c:97:0f:03:6c:51:21:f1:e8:bf:61:22:cc:9f:ca:d2:6a:6f:
         2d:09:c4:9f:7e:06:0f:e9:17:3b:6d:1e:4f:6c:5c:fd:ff:8a:
         f3:12:cd:08:29:c7:ff:1f:35:c8:70:6c:ed:53:8a:20:46:5a:
         66:31:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:57:58 2025 by rpki-client