Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
File:                     cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json)
Hash identifier:          /FJx961uOxMH6Mj6YBGKdpbe4aMI51DaZIuT5FUTaXg=
Subject key identifier:   83:4F:B6:42:61:62:D6:6C:68:E5:9E:CE:D5:2E:71:58:5A:D2:2E:AA
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       09B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
Manifest number:          09A0
Signing time:             Mon 04 Aug 2025 20:23:35 +0000
Manifest this update:     Mon 04 Aug 2025 20:23:34 +0000
Manifest next update:     Mon 11 Aug 2025 20:23:34 +0000
Files and hashes:         1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: TluwHx2ogcqKFdQLTfGmWOA0vB9uNSsA73xTU1RfnUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
                          rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 20:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: Aug  4 20:23:34 2025 GMT
            Not After : Aug 11 20:23:34 2025 GMT
        Subject: CN=689116c7-8162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:7a:59:bd:2d:17:84:c2:35:32:a9:cc:99:
                    9e:48:56:72:68:9a:b8:3d:63:cb:93:6d:79:bf:60:
                    df:97:cf:b9:9c:d8:2a:87:a5:4f:e4:69:81:da:1e:
                    32:48:17:49:ac:8a:10:5b:f3:e6:a8:7c:fe:f4:f6:
                    49:03:e4:8d:29:d8:33:43:f9:0c:f8:47:88:a6:3f:
                    03:3a:81:fd:2d:32:57:65:d0:7e:12:4a:b1:64:ec:
                    d0:7e:18:9f:5f:6f:99:0b:13:9a:48:97:02:f4:84:
                    19:3e:98:8f:77:58:c6:7f:45:95:d0:a2:f2:09:37:
                    fe:36:0b:e4:cc:5e:77:a6:04:e6:77:a1:28:82:6d:
                    91:41:e7:c6:e2:62:0e:11:bd:2c:5a:95:fb:8e:0e:
                    c7:22:75:36:5e:8c:93:98:80:a7:c6:9e:c8:cd:a1:
                    bd:8b:62:90:ec:05:e9:76:4c:7b:1c:21:89:14:94:
                    ee:25:8b:ba:47:c8:53:df:e3:5f:8e:e5:98:a5:ed:
                    9a:b9:c5:be:0d:f9:92:31:7a:13:7f:88:f8:7a:a8:
                    6b:ed:aa:56:58:82:6f:00:0c:d7:77:42:97:a7:03:
                    5b:10:c1:20:9f:bd:ad:38:d3:88:4a:99:44:13:31:
                    35:68:c6:31:3c:30:21:bb:6a:b2:e7:39:82:a2:f0:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4F:B6:42:61:62:D6:6C:68:E5:9E:CE:D5:2E:71:58:5A:D2:2E:AA
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c1:86:52:b3:91:3d:88:d4:ee:0d:a7:f4:4a:f8:63:a0:c9:
         48:d1:e8:18:dd:01:cc:fe:b7:33:01:67:13:e7:ff:ee:a3:f8:
         71:a7:37:fb:e8:09:a8:52:4c:98:51:6e:b5:dc:d7:7e:27:0e:
         45:5b:52:15:77:d7:9e:1e:38:fd:0c:2e:58:8d:0d:09:c7:ab:
         00:4b:b2:43:b6:fc:d3:52:cf:90:84:2e:7a:bf:fc:1d:9a:96:
         8b:e9:73:4c:c5:df:74:5c:19:41:a9:a8:dd:87:4c:36:00:fc:
         56:7c:28:57:7b:37:a9:4d:94:b8:1b:c5:33:61:eb:cc:ec:8a:
         69:fa:d4:10:a1:fa:d5:4a:4f:5b:8d:a9:c5:f2:be:d6:75:5e:
         9e:5f:07:b4:e1:62:1a:f7:58:55:14:74:53:34:ef:64:bb:ea:
         91:c3:7e:19:62:af:8d:ea:c4:fd:f2:5d:f8:b1:c0:59:34:bf:
         23:75:b8:d0:33:79:77:87:ea:55:4f:92:12:74:60:b8:97:f9:
         1d:c3:c0:95:fa:ea:a0:81:c6:3a:1e:2d:dc:83:10:35:62:ed:
         2e:6f:9e:39:da:47:da:a7:47:1e:db:64:ea:51:28:40:b2:2b:
         32:b0:31:04:f1:8c:f5:8c:05:90:ad:ad:53:1f:b0:a5:c3:7a:
         94:32:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:55 2025 by rpki-client