Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File:                     z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier:          mMrziMn18UipxbfG3F+ijP6saxK2ir0qzUbUnMzQr1c=
Subject key identifier:   A4:8B:7F:7F:71:E3:17:CE:8E:6C:EA:40:F8:F9:52:D2:8A:1F:ED:36
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer:       /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number:          02A3
Signing time:             Sat 09 Aug 2025 03:55:43 +0000
Manifest this update:     Sat 09 Aug 2025 03:55:43 +0000
Manifest next update:     Sat 16 Aug 2025 03:55:43 +0000
Files and hashes:         1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: Qq/eTpGJkkh0MYIFJb1ktqZSvDIqsLoegV3LZOHkUDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
        Validity
            Not Before: Aug  9 03:55:43 2025 GMT
            Not After : Aug 16 03:55:43 2025 GMT
        Subject: CN=6896c6bf-da40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:6b:71:d5:69:20:a2:a6:52:ae:c2:6e:85:
                    01:ca:8a:15:fa:82:82:bb:7a:e8:5b:a8:5f:4a:d0:
                    b1:e9:d2:f2:15:fa:72:c6:5d:36:cc:55:a8:fc:77:
                    1c:db:ec:e5:d7:ce:fa:43:16:52:fe:da:45:22:27:
                    63:df:25:c9:53:2d:9b:dd:05:07:3e:3b:81:0f:56:
                    ad:2b:27:f5:c2:20:c4:70:b8:63:22:12:54:56:2a:
                    3f:40:91:c8:ac:6e:a5:75:97:52:ff:ac:da:95:24:
                    b7:41:ee:97:78:3a:26:86:f4:c4:39:23:0d:b1:17:
                    80:c5:31:be:a1:f9:27:29:71:d9:7e:1f:ae:a2:3a:
                    c6:22:c0:8e:11:01:de:c1:26:e7:90:09:26:df:15:
                    bc:bf:46:36:4e:02:bd:f4:9f:01:cc:c6:d5:19:6b:
                    4b:83:69:60:b8:6b:6c:a8:e4:db:8f:02:14:bc:7e:
                    ad:27:23:81:ad:af:d9:55:ff:68:da:07:39:6a:00:
                    61:5d:b6:20:76:5c:d4:a5:57:5a:28:89:cc:23:a8:
                    a4:f1:26:e6:a3:ab:5b:61:b6:f1:7d:f9:46:10:5b:
                    5b:8f:3e:27:a1:f6:7b:05:e8:8c:55:98:a5:ca:84:
                    6a:f7:e8:62:8e:1a:30:d1:a5:bd:37:63:97:ae:90:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8B:7F:7F:71:E3:17:CE:8E:6C:EA:40:F8:F9:52:D2:8A:1F:ED:36
            X509v3 Authority Key Identifier:
                keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:a9:2a:bc:97:e6:37:de:24:45:10:f8:c5:06:b4:91:e2:
         24:ee:2a:85:6e:4f:14:06:b4:3e:c7:8c:d1:43:45:bf:03:4f:
         28:a9:77:17:ee:d8:02:c6:40:7d:29:bf:8a:2f:bc:c6:7f:8b:
         e0:ab:03:97:a9:30:e6:4c:36:e1:0b:5e:8b:9c:e7:12:62:15:
         20:2d:2e:00:6b:06:b0:50:cc:ae:2e:87:da:83:b0:7b:18:9e:
         4a:3d:af:2c:c0:e1:72:fe:57:33:21:7e:03:dc:af:2a:e7:1a:
         e7:f2:69:cc:6a:2f:ed:e3:06:32:ff:29:23:7a:f5:57:6d:fa:
         4e:6c:00:83:f3:72:f7:dd:57:df:7e:81:21:f2:8e:94:7a:4b:
         93:39:83:c7:3c:cb:59:52:a4:9f:1e:20:22:2c:ab:b0:72:b1:
         37:9b:25:02:b8:be:12:f2:b2:22:d4:e7:05:40:0d:03:8d:5f:
         3c:e4:f9:65:28:82:41:27:e6:7c:0a:3f:9f:90:58:58:bf:ef:
         b8:68:cc:6a:20:39:d9:05:98:36:de:c2:5d:69:ab:27:50:b1:
         46:a7:80:c3:1e:ce:9c:0d:a0:e4:e1:d6:31:9a:62:d3:a6:dc:
         d7:be:dc:c2:45:3e:07:3f:fb:be:41:b4:d9:6d:6c:e8:e3:35:
         be:3f:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:04:14 2025 by rpki-client