Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          PXS1gLtbmn0iDUbTRDUD4lBKD9TOAQ/9ET7jSQGqb30=
Subject key identifier:   12:C2:C0:F3:2E:C0:43:B0:64:B5:72:C9:FA:D2:E6:50:D1:02:39:56
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          7E
Signing time:             Mon 11 Aug 2025 06:59:49 +0000
Manifest this update:     Mon 11 Aug 2025 06:59:49 +0000
Manifest next update:     Mon 18 Aug 2025 06:59:49 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: b9r8bRnoOlwrpoNLizfhfnV1lFzd0sc6RTcOIyfp4fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Aug 11 06:59:49 2025 GMT
            Not After : Aug 18 06:59:49 2025 GMT
        Subject: CN=689994e5-4f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:63:d7:cd:4f:02:20:d6:87:79:2d:20:92:
                    4b:91:b5:4a:94:96:ac:2f:02:3e:df:9b:fc:f3:d7:
                    49:98:b4:35:46:d5:17:01:de:d2:96:02:c7:2a:57:
                    4b:66:6a:bd:10:72:1b:9f:bc:42:d1:73:fc:ce:08:
                    88:41:a6:e6:e1:fa:2b:89:51:e8:f4:0e:11:42:d9:
                    fb:d0:aa:d8:8c:b9:65:72:08:f6:d0:d4:86:b0:81:
                    56:9f:42:9f:1d:a0:b0:1c:cd:4d:17:a6:00:05:e7:
                    e5:c8:b3:5f:97:45:79:3f:68:0e:8b:65:c0:a2:ff:
                    6e:e0:ab:4e:d2:cb:26:e8:d3:e0:c6:47:b9:d0:f4:
                    2e:59:89:3a:77:b5:ef:78:e5:92:f2:c8:8b:6a:b3:
                    13:82:5a:fb:1e:9e:d6:29:8c:4e:ef:13:bd:f7:06:
                    43:7a:d8:3f:24:0a:63:ce:e8:49:d5:bb:bb:cc:a7:
                    74:09:a5:4e:c5:67:19:7b:f5:2f:6e:72:c9:4a:70:
                    db:0f:b3:a8:13:41:bc:08:46:b0:4a:00:7e:48:e6:
                    86:56:f5:93:ee:20:78:93:3d:83:c3:08:7c:c0:f7:
                    ad:a2:b7:a6:32:60:d9:4e:47:a8:44:0f:86:d6:93:
                    af:c3:35:bd:20:02:d5:5f:52:12:fb:b7:d5:a6:3c:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:C0:F3:2E:C0:43:B0:64:B5:72:C9:FA:D2:E6:50:D1:02:39:56
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:23:12:99:d1:5e:72:39:95:3a:38:23:fb:0a:28:e9:d7:
         59:81:c5:3f:76:a6:0b:b2:fa:1c:62:0c:ac:87:63:87:88:a9:
         23:f9:a4:d0:af:68:2a:87:3c:d0:d1:c0:9b:e6:82:0b:ff:36:
         ea:bc:26:57:b0:e1:fa:83:c7:28:ee:34:a9:3f:02:53:a5:db:
         74:d9:a8:e1:b3:93:dc:1d:1f:c4:81:b8:7f:c8:9c:30:e2:c5:
         d1:1c:63:58:52:ad:8c:bd:92:52:81:d1:a2:16:00:3d:32:4d:
         89:b6:01:ad:9b:68:dc:47:aa:f9:df:8c:b4:60:40:d0:76:72:
         4e:5f:22:99:04:66:56:9c:81:aa:e6:6b:3b:41:fd:99:71:c0:
         58:99:2b:d3:23:81:d0:8a:a6:74:42:f0:6a:01:a6:95:d8:9c:
         30:1d:fd:6c:14:af:2f:21:69:76:41:f9:3a:88:90:e5:f9:02:
         04:6f:06:65:dc:cd:68:12:24:e3:84:e0:ca:4c:bd:92:94:1a:
         ab:fe:54:b5:d6:ea:62:bd:0c:3e:5b:1b:1e:61:82:d3:4a:05:
         e3:e5:83:fe:85:7e:e2:ad:48:b1:97:01:e7:57:2f:05:13:2b:
         1b:9a:44:fb:80:9c:b4:6c:c9:df:f4:03:b9:57:79:01:ad:83:
         43:88:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:29:57 2025 by rpki-client