Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          8mA/CjUhscHaqTlWkmeSb+Zt98wkRoivY5ru+gg7SB0=
Subject key identifier:   39:50:FE:87:35:63:1F:37:42:AC:09:2C:02:26:E1:E2:40:63:18:1B
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          47
Signing time:             Sat 09 Aug 2025 07:54:25 +0000
Manifest this update:     Sat 09 Aug 2025 07:54:24 +0000
Manifest next update:     Sat 16 Aug 2025 07:54:24 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: cFHaEreQy7+SJf/jciDKKFEFExgcFvDXAeBxgTH8Kw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Aug  9 07:54:24 2025 GMT
            Not After : Aug 16 07:54:24 2025 GMT
        Subject: CN=6896feb1-561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:a8:df:15:10:e4:7f:19:68:cb:c0:2e:73:
                    68:18:eb:04:27:b1:c0:7f:7d:97:10:14:2f:30:df:
                    64:13:f3:fb:4e:f2:cb:e5:79:23:89:5e:2d:13:22:
                    12:20:b1:ba:1e:86:82:24:8b:91:fe:22:ce:e2:92:
                    a1:d6:01:b1:33:6f:30:59:8d:bc:b0:56:c4:66:4d:
                    b1:1a:cd:94:00:50:cd:cf:d0:25:72:ab:ae:e0:ff:
                    cd:76:3a:2d:ae:88:9f:8e:98:14:2b:7d:90:25:72:
                    29:c2:27:d8:76:72:75:81:2f:ec:5c:0f:b1:e4:fa:
                    68:e7:18:24:f0:b5:61:fa:ae:ae:b2:53:a5:a7:b2:
                    c9:ac:e7:50:23:df:36:80:4f:4a:15:ba:7d:bd:5a:
                    00:38:9f:b0:ec:30:74:50:a2:d1:98:58:b4:45:24:
                    18:63:a6:32:d3:3f:3c:3f:4f:d2:28:5a:9d:7d:cb:
                    82:b3:ee:a8:6e:a4:71:a4:7a:00:27:e8:2d:68:bf:
                    cd:89:51:10:64:4c:68:9e:83:cc:49:f3:ab:5b:99:
                    49:bd:97:ae:e3:1d:6f:88:9c:ad:e2:2c:97:34:3d:
                    dd:0d:f5:95:85:b2:57:8e:e8:52:bb:68:b1:96:f6:
                    e0:06:5e:38:0b:40:ba:0f:cd:07:68:b5:b4:51:73:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:FE:87:35:63:1F:37:42:AC:09:2C:02:26:E1:E2:40:63:18:1B
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f1:18:ca:16:31:f3:37:6c:73:c6:3d:6e:e0:ec:1a:42:4e:
         9e:44:e6:18:12:28:a5:59:3a:4a:37:11:13:eb:81:3f:fd:dd:
         fb:eb:fa:8a:ca:10:a3:c6:8d:24:21:a6:82:cc:cf:b6:42:f0:
         59:2d:a4:02:e7:d6:23:79:e1:5b:92:82:d5:15:64:33:21:18:
         2d:7a:77:5f:b0:e5:fb:0a:f1:20:90:fd:aa:ae:70:82:9e:23:
         c0:bf:fa:c9:e0:9b:42:28:03:d2:e1:f3:07:cb:66:54:6f:36:
         cd:be:d1:b6:44:b5:fb:77:c4:72:33:50:54:4f:e8:23:5b:17:
         ee:d0:5a:50:96:16:2d:6f:3a:13:14:b9:7f:5a:2d:e8:eb:d3:
         ce:1d:88:ce:eb:8b:74:29:72:41:69:cf:04:0c:e3:12:d5:ff:
         1f:58:0b:7e:ae:e1:fb:f9:43:37:dc:b5:a7:5f:c4:2c:dc:16:
         b0:af:56:d3:6f:bd:16:68:a0:55:09:b1:ad:d2:1c:b9:e2:c5:
         64:7b:ff:c3:67:fc:1a:c3:2c:fa:3e:fc:ed:c3:64:75:ee:d7:
         70:1e:95:92:86:47:f4:8d:b2:93:6b:b3:1d:4c:ec:88:e5:ca:
         47:04:b6:25:78:9d:43:8f:ce:46:06:20:38:f7:4c:b3:cb:66:
         a1:4d:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:12 2025 by rpki-client