Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          AUoIkl36N/UImVtTjZURoaNSJp0aQSMqHJVmrkjsZ4g=
Subject key identifier:   DE:76:48:6E:84:8A:28:AE:8F:4A:62:3B:5C:AB:4E:98:FC:6E:99:01
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          98
Signing time:             Thu 07 Aug 2025 06:55:34 +0000
Manifest this update:     Thu 07 Aug 2025 06:55:34 +0000
Manifest next update:     Thu 14 Aug 2025 06:55:34 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: iOYUh5WAH8jVvjLvvTHklC5rcxv6W8sww80XqO+lFIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Aug  7 06:55:34 2025 GMT
            Not After : Aug 14 06:55:34 2025 GMT
        Subject: CN=68944de6-7f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:61:fe:96:05:23:fc:27:d9:e2:11:5a:d9:
                    5f:fb:55:72:42:04:8f:39:37:20:88:79:d2:f8:69:
                    46:c6:92:02:bd:49:05:6a:c7:7d:71:10:3a:1c:52:
                    ef:ea:0e:ca:9a:68:6e:8f:93:3a:3d:2e:31:ad:3f:
                    40:c2:62:19:6a:01:c5:2d:db:e3:78:9a:1e:0f:c7:
                    e3:c7:c9:b3:d7:64:33:e4:8c:d8:a3:37:3c:95:3d:
                    de:6a:fe:34:30:79:6a:8a:da:4f:35:73:17:0d:cf:
                    de:f7:5a:f9:0e:09:72:f5:10:2d:8d:c6:1d:79:f2:
                    49:24:bc:b3:36:82:b1:d1:c8:1c:5f:03:04:2d:84:
                    d1:8b:ad:b2:91:9f:2f:7f:ee:28:86:47:15:0d:a3:
                    fc:cb:5a:26:18:97:6c:28:7a:18:cd:b9:3f:81:38:
                    ed:ee:23:98:1d:27:99:de:79:85:d3:44:b7:a1:7d:
                    03:a2:05:9e:93:d9:64:a6:b1:7d:ba:72:61:12:86:
                    04:88:fc:99:fb:47:70:54:b2:d9:a4:e0:81:81:aa:
                    88:2e:97:9d:f6:45:48:f3:03:64:d0:63:94:a1:fa:
                    f1:5b:81:94:d1:cc:6b:be:94:41:c4:51:9a:93:b9:
                    b0:59:7c:0b:65:76:9c:64:a6:ca:a6:e3:89:77:89:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:76:48:6E:84:8A:28:AE:8F:4A:62:3B:5C:AB:4E:98:FC:6E:99:01
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:09:0e:c8:9b:0f:51:f1:4a:0e:b2:fc:f5:06:1f:4c:a6:
         9c:a6:4e:76:80:a6:88:43:d5:ba:6c:3c:b1:f1:10:5b:19:2f:
         96:fd:0b:57:29:aa:d2:d4:ce:43:e1:51:47:05:d7:1e:3a:78:
         85:be:3f:cf:ed:03:66:68:b7:e0:8c:9a:a3:e1:c4:c5:28:95:
         2a:29:c5:ac:82:f1:a4:9c:c2:6e:37:e2:75:9c:e2:5f:32:df:
         7a:b6:5b:d4:18:44:22:73:d1:ed:87:26:b5:a2:63:01:3d:48:
         e7:1b:bb:44:ba:14:21:59:b8:ed:bf:bd:13:e2:93:55:11:4e:
         8e:47:0b:b7:87:1e:d5:e6:f5:90:03:ef:11:3a:ab:3f:de:b9:
         7c:48:02:31:c0:4a:da:45:0e:7b:ee:fe:91:f8:b6:8a:a4:94:
         4e:28:22:c6:90:63:59:7e:26:72:7f:c8:07:e8:cf:02:97:cf:
         53:0c:40:46:c6:26:d1:d7:b6:76:30:b8:28:2d:a9:14:85:1f:
         b5:33:6b:81:20:49:0e:9b:94:9b:5e:71:1a:03:bf:1c:4d:8c:
         39:43:cf:7e:57:28:5b:72:1f:a2:bc:a5:5a:56:9d:be:ee:f4:
         24:0c:a9:c7:7e:00:26:32:0a:d1:4f:af:43:e5:e9:ca:22:96:
         62:e5:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:42 2025 by rpki-client