Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
File:                     k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json)
Hash identifier:          Row9EDeEkp1MZqvgos/oUSc3j8KkigomjmF+GFqBMCI=
Subject key identifier:   1D:E1:94:FA:48:16:8C:56:D9:30:D6:47:4C:66:E5:38:09:A1:9B:19
Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
Certificate issuer:       /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
Manifest number:          27
Signing time:             Thu 07 Aug 2025 08:28:08 +0000
Manifest this update:     Thu 07 Aug 2025 08:28:07 +0000
Manifest next update:     Thu 14 Aug 2025 08:28:07 +0000
Files and hashes:         1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: ko7Jph7YdQZwdm9G897j3VxZm+Y3rB0g3Vzqj7DikTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
                          rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
        Validity
            Not Before: Aug  7 08:28:07 2025 GMT
            Not After : Aug 14 08:28:07 2025 GMT
        Subject: CN=68946397-84ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:50:c1:09:3b:a4:7a:c1:2a:40:2a:a2:1d:
                    ae:f0:82:66:7f:e8:6a:17:68:b5:c3:ec:31:3c:2f:
                    fe:9d:08:24:f3:df:25:8f:4c:83:fb:4e:9f:9a:1a:
                    29:9b:2a:d6:e2:91:82:e9:8f:65:8a:7b:a6:e4:05:
                    7f:8e:7e:56:7b:cf:ea:5a:a0:03:4b:5c:14:d3:9d:
                    d2:c9:15:a2:6a:64:70:9b:ac:8c:b3:91:53:ef:1b:
                    fa:1b:5c:64:8b:6e:8f:ef:20:b8:72:7a:17:36:9c:
                    a5:de:6e:13:85:6b:50:11:c9:61:8e:4d:e0:8b:d8:
                    7e:63:44:97:b8:39:ce:a7:d8:95:4d:fc:c7:0d:68:
                    5f:d7:fa:fc:98:75:9d:b5:f8:06:28:f6:42:f5:c6:
                    63:3c:4c:6f:91:33:21:95:a5:92:db:fb:41:fd:df:
                    b5:fb:3f:10:1d:98:67:dc:51:3e:24:08:ce:82:bb:
                    1e:b1:1a:51:29:94:fb:a6:79:c4:d2:44:5a:5c:0d:
                    52:d2:e7:8f:96:a4:df:42:a2:00:57:f2:69:a3:0a:
                    c7:d3:18:d2:fb:d6:92:a4:33:d4:e6:a1:db:ed:40:
                    a9:d4:49:12:2a:17:64:0d:0b:f9:35:be:73:23:e0:
                    93:87:82:9c:00:5a:8a:2f:ee:91:40:1b:26:98:ac:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:94:FA:48:16:8C:56:D9:30:D6:47:4C:66:E5:38:09:A1:9B:19
            X509v3 Authority Key Identifier:
                keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:08:b4:9c:34:98:30:e5:68:d1:17:3d:78:9e:5e:03:f5:ae:
         c4:83:24:3a:e3:53:91:d5:8c:13:9d:70:4e:c3:fb:63:9b:04:
         02:21:39:6c:20:79:5a:3f:70:ce:2e:87:a1:e2:c8:70:51:4c:
         e7:2c:fc:0a:07:27:2e:4f:d8:92:d6:57:3d:7a:df:85:14:66:
         8d:33:81:50:e9:5d:1e:d4:f2:8d:f3:1c:b9:61:3e:3b:54:42:
         74:b5:e7:f6:14:ea:65:3f:81:47:0c:a3:4f:28:90:42:af:3c:
         79:1a:43:ca:70:37:30:96:15:af:f3:15:e8:1c:37:ff:33:3c:
         5a:94:35:11:dd:10:29:3e:24:27:2f:2d:ab:f7:e7:62:cc:04:
         06:0c:a0:2b:d3:71:cd:cd:8c:7d:5f:2e:9d:2f:c3:78:3d:dc:
         6c:3a:6b:97:d8:eb:ca:c1:c3:4e:fe:b0:2a:a3:10:81:10:4d:
         b2:71:ce:66:7e:66:c3:6f:59:69:d5:79:74:a1:89:2f:30:12:
         ca:55:e4:7b:63:62:ed:e8:56:e3:b9:76:ab:16:a7:d4:70:ec:
         05:c5:91:c6:a6:5b:12:06:02:38:46:ce:ea:50:08:b4:13:de:
         10:20:bc:d9:3d:5a:2b:13:b1:a5:75:63:e2:ae:fd:91:88:2c:
         7c:bb:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:02 2025 by rpki-client