Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
File:                     5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json)
Hash identifier:          wenl3wYQ48ha60Zz/xffqZ7cOcW+MtUmG5fKOlJc7Lg=
Subject key identifier:   53:77:31:36:7C:C7:05:C4:C9:39:77:9C:97:E3:DF:8E:83:92:8E:44
Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69
Certificate issuer:       /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
Certificate serial:       34AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
Manifest number:          34AF
Signing time:             Sun 10 Aug 2025 15:10:00 +0000
Manifest this update:     Sun 10 Aug 2025 15:10:00 +0000
Manifest next update:     Sun 17 Aug 2025 15:10:00 +0000
Files and hashes:         1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: fw/eXBYwZwEjY7+daPCPhFOr5uC9Vh3czu44GxjKbIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl
                          rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13487 (0x34af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
        Validity
            Not Before: Aug 10 15:10:00 2025 GMT
            Not After : Aug 17 15:10:00 2025 GMT
        Subject: CN=6898b648-89de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:1c:a1:1d:88:39:6e:f1:73:9b:13:95:62:
                    ab:e1:50:04:10:1c:ee:fe:d3:79:54:5c:be:66:fa:
                    c2:17:7b:14:97:2e:22:dc:ba:7b:6c:b8:5e:e8:fd:
                    e5:04:ab:cc:fc:e8:e6:c4:af:8b:34:51:83:80:4f:
                    4c:a8:33:d1:c1:a8:e1:53:6d:e7:1e:8c:da:c2:e9:
                    ae:40:16:41:3e:b2:71:34:35:83:de:af:b7:84:bf:
                    31:17:ca:a8:89:72:d9:aa:a7:59:6f:f1:43:f1:f4:
                    55:da:df:d2:1e:8f:4f:49:2d:7e:7d:4d:6c:a2:28:
                    c8:a3:1f:e3:6f:2c:23:a2:85:98:7d:e6:71:0b:3b:
                    20:0f:56:53:0c:80:e9:24:de:23:cd:c0:ee:f4:e9:
                    72:3d:c8:24:d0:fa:ae:6b:82:0a:d1:39:65:0a:45:
                    c5:2f:fc:62:6f:54:55:3d:79:d5:6c:99:9b:d1:7a:
                    63:80:af:1b:14:30:c6:99:16:f7:87:fc:1c:b9:8d:
                    d0:11:b6:9b:28:e3:39:92:20:05:21:03:9d:0e:8b:
                    0b:1c:59:92:4f:ad:04:ec:64:9f:bc:bb:cf:cf:95:
                    35:5a:ed:17:93:40:40:c1:f4:e1:14:b5:eb:18:d3:
                    19:48:6c:f0:1e:03:48:ae:6e:56:e0:56:7c:43:e4:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:31:36:7C:C7:05:C4:C9:39:77:9C:97:E3:DF:8E:83:92:8E:44
            X509v3 Authority Key Identifier:
                keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:a8:43:6a:63:aa:ff:1c:d9:e5:18:c7:5a:c9:41:d7:db:
         e2:50:54:f1:68:80:75:9a:05:ea:05:83:22:9a:bf:42:8b:1d:
         48:d9:7a:6d:54:da:5f:15:87:ac:71:21:b4:90:1a:6b:23:e2:
         94:82:0a:10:97:51:74:1c:92:21:aa:53:05:35:f0:59:6f:c1:
         2c:d2:c4:0f:b0:15:1b:ff:1c:d9:a1:45:52:de:78:91:aa:ef:
         5f:4b:1f:e1:f2:f1:50:37:da:f6:8a:55:e3:53:75:4e:7f:7f:
         a6:49:c9:0e:d2:45:bb:1d:1f:05:d4:9f:e9:f8:91:89:88:b7:
         a0:16:a1:42:77:ca:55:f8:36:cd:1c:c6:0c:e2:47:db:a8:8a:
         ec:78:f8:b0:9c:b0:9b:01:93:b2:36:2f:fc:4f:39:78:d0:88:
         96:23:a0:be:cd:05:8d:ed:29:df:57:da:2a:35:2a:1f:eb:e7:
         34:87:59:89:26:14:04:b3:32:be:7a:c2:d0:95:2d:79:d6:02:
         37:7a:9a:85:99:b3:cf:1e:6a:d8:4d:21:7b:a3:b3:0a:74:1f:
         0a:10:2b:10:d6:16:22:3f:c4:a5:ad:c5:24:0b:91:17:78:6a:
         a2:20:5b:a7:09:6b:ca:9c:d3:37:0a:91:2b:1f:e4:86:c9:57:
         b2:b1:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:15:35 2025 by rpki-client