Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
File:                     j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json)
Hash identifier:          Q4nm9uIW9KMFbsgpWc25dbHW8ikV9td4ys7S/1NJ59M=
Subject key identifier:   79:C0:04:B1:0A:48:DE:7F:6B:78:43:B5:7B:53:7E:1C:25:F2:C1:CA
Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41
Certificate issuer:       /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
Manifest number:          2C
Signing time:             Sat 09 Aug 2025 08:13:31 +0000
Manifest this update:     Sat 09 Aug 2025 08:13:30 +0000
Manifest next update:     Sat 16 Aug 2025 08:13:30 +0000
Files and hashes:         1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: au0DoHP/v+tK2XBFQKLYjAn7OnBZRkxdWTFalMa9MFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl
                          rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
        Validity
            Not Before: Aug  9 08:13:30 2025 GMT
            Not After : Aug 16 08:13:30 2025 GMT
        Subject: CN=6897032b-14d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:a6:c2:5d:09:6a:07:44:0f:92:67:2d:a0:
                    5b:01:f1:4c:0a:42:e2:97:0c:4a:db:29:c5:1e:7e:
                    8c:4a:72:1e:f8:76:37:19:28:ad:b1:cc:b7:1e:28:
                    84:2f:7e:9e:68:83:03:2c:92:42:0e:17:99:ef:e4:
                    a5:75:c3:c4:92:29:e8:6d:c2:a5:46:8c:22:4e:ea:
                    53:22:a0:34:06:0b:ca:f8:7b:d5:9a:44:ea:6f:c2:
                    0e:08:63:28:1c:eb:4b:ac:93:13:26:87:31:74:84:
                    61:3d:8e:2e:a2:71:c9:65:ec:98:da:4e:99:7f:a3:
                    eb:ac:24:03:b1:36:56:32:f7:ff:eb:3f:8d:29:03:
                    f9:86:34:a5:76:08:1a:43:b0:34:8b:28:01:d5:41:
                    c1:28:57:49:2d:89:d3:29:b1:1b:c1:8d:2e:8d:ed:
                    40:02:8a:05:3a:8a:e9:71:b7:4e:37:73:49:bc:36:
                    43:42:22:c1:9d:b1:fd:a1:2b:2c:4c:a7:32:18:bd:
                    1a:9e:a8:0d:d4:54:99:2b:1d:8b:d8:d6:ea:e3:2c:
                    66:50:26:58:b2:13:98:08:a7:0a:4f:20:75:6e:be:
                    b9:e6:71:a1:b8:97:72:8d:48:5c:b5:84:95:ae:bb:
                    d8:1a:62:55:4d:d2:3d:1f:28:0c:8a:75:d3:78:e4:
                    99:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:04:B1:0A:48:DE:7F:6B:78:43:B5:7B:53:7E:1C:25:F2:C1:CA
            X509v3 Authority Key Identifier:
                keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:46:cc:ae:7e:00:f7:cd:0a:9a:04:2a:9b:ae:23:f1:db:82:
         11:d3:ef:7b:fd:a0:4b:a8:54:63:35:7b:2d:f6:b8:55:03:fa:
         24:52:58:73:2f:72:62:b4:e4:df:a9:97:90:58:50:67:62:4b:
         65:60:4a:2b:ac:38:d9:6b:a0:d2:ae:6e:e2:5c:8a:df:05:6d:
         c2:3a:bc:45:79:15:95:0c:98:a8:03:4d:05:e3:47:42:a8:46:
         45:71:a8:87:00:99:18:30:e4:14:0a:d5:e9:34:1f:28:3c:7d:
         8c:77:46:00:34:71:4a:44:c4:37:37:f6:57:79:f8:df:02:c4:
         05:4d:41:30:b4:7b:a7:b6:71:03:53:bd:ec:fb:05:b2:25:29:
         9d:18:65:f5:ed:bd:4b:cc:80:b4:23:55:42:30:2d:c6:fc:a3:
         74:10:a2:35:b0:76:0c:9c:a4:c9:18:e3:c2:8a:94:63:89:59:
         74:9f:5b:46:f9:36:2e:d3:6f:a7:a5:15:44:da:13:cb:ec:e1:
         47:aa:1d:0f:79:ea:6a:04:ad:dd:4f:bc:03:fa:fe:2f:64:b9:
         79:da:3f:64:48:a5:fe:93:1b:ac:1e:35:a1:df:54:c7:75:58:
         f2:1a:83:21:24:5f:ad:74:0d:f6:45:23:ed:8a:fe:d2:6b:87:
         75:1c:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:48 2025 by rpki-client