Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
File:                     1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json)
Hash identifier:          AphrKFfqc8OUvLO4ImPJJdopjqpKC94JcVsMOrehOlM=
Subject key identifier:   65:9E:D9:79:1A:C9:A4:D9:89:F5:24:F5:72:99:B4:12:9D:63:6E:C1
Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
Certificate issuer:       /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Certificate serial:       327F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
Manifest number:          327F
Signing time:             Sun 10 Aug 2025 15:22:07 +0000
Manifest this update:     Sun 10 Aug 2025 15:22:06 +0000
Manifest next update:     Sun 17 Aug 2025 15:22:06 +0000
Files and hashes:         1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: BJwx7RcG9YeHp1PlK7Abwior5v6k5V+3Z0mFeW/HTjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
                          rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12927 (0x327f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
        Validity
            Not Before: Aug 10 15:22:06 2025 GMT
            Not After : Aug 17 15:22:06 2025 GMT
        Subject: CN=6898b91f-4a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:f6:c6:e4:d1:63:6c:cd:8c:9b:1a:1d:f5:
                    53:c3:8a:b3:07:e6:b9:5f:ef:8e:67:58:06:9b:f4:
                    54:d9:0e:71:84:84:ed:be:33:62:26:9b:7c:43:93:
                    1e:a4:d8:4c:ce:77:6a:c2:d3:a8:4b:a4:02:b9:53:
                    b3:15:04:8a:e2:c5:1c:48:68:f8:6d:7b:f8:61:48:
                    89:2a:b5:55:f6:30:c0:b2:49:b3:23:79:28:a3:88:
                    91:ae:b9:2b:d1:d1:4d:22:66:21:dc:dd:e5:ac:e5:
                    51:b4:41:db:a6:3c:e0:4d:57:08:97:11:f6:a9:c2:
                    b0:31:f8:d1:81:b7:46:66:f1:27:16:4b:ec:90:fa:
                    86:72:ad:31:9d:42:15:ba:d8:0c:dd:c5:ea:32:df:
                    47:35:43:38:df:04:69:de:2b:41:ce:4e:04:65:1b:
                    a2:68:f1:e8:38:bb:44:36:58:a7:c5:37:97:b5:64:
                    74:7b:41:f4:e8:21:44:78:01:11:0e:83:4a:1b:79:
                    33:d7:2c:7d:ec:66:d4:ca:d6:1c:9e:36:ad:9e:c7:
                    ed:6c:64:a4:b6:4d:ad:c2:f8:d3:ab:d7:3e:eb:0b:
                    9e:8d:1a:82:8b:62:c9:a3:ef:bc:58:71:b3:2e:1c:
                    f4:21:5b:b7:3a:56:a5:9c:95:1e:f4:b8:8c:d1:2b:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9E:D9:79:1A:C9:A4:D9:89:F5:24:F5:72:99:B4:12:9D:63:6E:C1
            X509v3 Authority Key Identifier:
                keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:db:55:2a:ff:4f:45:43:e3:b9:c8:9b:16:83:84:69:a5:10:
         07:53:34:77:d2:75:cb:14:bf:c3:7e:a5:ae:20:93:63:53:04:
         e0:cd:f5:70:11:c7:96:04:de:5a:ab:ad:15:f1:e0:4b:cb:f7:
         63:25:2d:e4:37:d8:92:34:80:5f:a8:00:f2:0c:47:94:0f:b0:
         69:30:eb:57:48:db:ee:7d:ff:f7:be:12:0f:25:bc:eb:c4:ca:
         cc:96:08:71:ed:c3:2f:03:0a:80:cc:61:64:98:5b:21:0a:15:
         b8:6a:d1:b2:9d:0e:d1:c8:41:a3:c2:34:cc:53:7a:52:42:39:
         1b:ae:62:50:cb:fe:21:90:18:cd:82:d5:bc:0e:57:98:0e:02:
         ed:96:3a:ac:e5:16:bc:78:a6:7c:15:9b:ff:b1:0d:ee:c2:29:
         ef:cb:29:8d:3a:da:4e:08:51:7c:17:19:76:ef:dd:3a:33:af:
         58:04:f9:73:92:70:b0:eb:e1:bb:76:22:54:d0:73:98:81:0f:
         34:8c:51:03:50:1f:fd:e0:ea:a0:0e:25:c8:d7:22:2f:95:64:
         2f:b0:0e:fd:2b:6c:f4:16:1b:2c:6b:10:b0:0f:2d:7f:2c:5e:
         cc:a2:f4:93:71:b3:b6:98:b1:2e:91:ef:3d:6b:2e:53:92:e4:
         2d:d5:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:53 2025 by rpki-client