Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          DLNTDk4Mac9slWp1JJqQyy0RNQ5zwZAhDqQBcmHTyoc=
Subject key identifier:   07:3F:19:3F:66:F8:F1:2D:EC:17:E1:97:56:B7:8A:DB:CD:1F:A6:68
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       34AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          34AA
Signing time:             Tue 12 Aug 2025 14:43:47 +0000
Manifest this update:     Tue 12 Aug 2025 14:43:46 +0000
Manifest next update:     Tue 19 Aug 2025 14:43:46 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: Fqug1BJIFbZtBBVZIdWr8fw1/1SihBkvkoiM2F+YxSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13482 (0x34aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Aug 12 14:43:46 2025 GMT
            Not After : Aug 19 14:43:46 2025 GMT
        Subject: CN=689b5322-3f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:22:25:78:0e:36:5b:21:32:c4:93:07:5b:
                    75:a9:e5:ec:9d:50:32:4f:87:36:a5:8d:23:37:bb:
                    b3:28:31:12:c6:00:e7:99:72:17:cc:32:4b:d5:63:
                    34:8e:5a:4c:0a:fe:bf:c5:db:d6:81:89:40:7d:48:
                    44:59:3b:94:6d:aa:3e:52:48:ce:94:6f:c4:df:f5:
                    3f:5d:8a:2e:9d:8d:cd:ef:79:86:f1:a7:fe:74:2b:
                    3b:29:a8:63:0f:28:2d:4a:22:8c:07:d5:c2:94:ec:
                    61:46:e6:5b:c3:f4:93:4a:89:d8:40:ff:77:28:16:
                    75:ce:87:a0:7c:df:56:41:d9:16:66:8a:74:57:a2:
                    03:de:3b:97:12:c6:58:71:38:16:bd:dc:5c:de:aa:
                    e9:78:6c:16:56:1e:67:20:b1:8b:0d:57:9a:58:49:
                    8f:76:03:73:e1:93:27:ad:62:e4:24:1b:85:4c:81:
                    3a:f8:5a:1a:4d:61:ee:b8:36:72:c1:eb:32:25:42:
                    e6:e4:46:a4:f6:9d:12:f7:34:b4:56:1c:30:8f:41:
                    a0:a7:df:f1:4b:18:db:7e:1c:94:ba:52:91:97:dd:
                    66:f5:dc:79:7a:2a:1c:03:d3:63:0b:90:8b:f1:a7:
                    35:fc:44:c9:c2:0c:b2:18:39:b2:4d:82:8b:0d:5e:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:19:3F:66:F8:F1:2D:EC:17:E1:97:56:B7:8A:DB:CD:1F:A6:68
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:51:e6:f8:0c:91:c4:c9:32:c8:f8:c8:a8:67:cc:a9:78:7a:
         b1:8b:fd:ce:74:56:df:da:bf:af:35:49:52:e5:ed:a7:a6:4d:
         04:ac:07:da:11:44:45:34:94:fc:92:c8:9d:a0:e5:37:23:4d:
         8d:4a:55:3c:dc:8e:b6:47:9a:37:01:bf:e4:a7:f6:64:71:4b:
         7c:36:c2:15:a1:ec:08:73:bb:5a:35:83:9f:7f:f1:f1:3e:77:
         a1:be:17:2a:dd:16:4d:18:f8:b2:52:b6:88:83:2c:ec:bf:5e:
         d4:d7:f1:6b:65:7f:81:d6:6d:02:53:5b:28:78:80:d7:40:7c:
         d3:ac:22:6d:7b:a6:3d:e3:a3:d7:b8:a7:5e:94:a4:bc:42:13:
         8a:fb:b5:7e:e5:04:a4:65:f7:02:6d:ec:db:76:aa:11:8c:dc:
         5b:13:48:f1:b2:f9:7f:0e:e8:10:77:b4:77:a9:74:a5:49:f5:
         e2:75:4c:f6:73:4f:4e:e1:9d:0d:7a:e7:90:69:67:84:53:f1:
         3e:96:6e:eb:bb:04:6a:e8:e7:2b:eb:f5:cb:dd:bd:4b:34:28:
         86:49:21:f9:33:ff:79:83:fe:d6:23:bd:36:c3:bd:dd:8c:ea:
         58:d5:81:25:ec:c5:b5:78:46:4a:50:e3:e3:28:06:44:be:bb:
         7c:13:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:16:02 2025 by rpki-client