Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          edCySYjkFhtqjsyecayv306RKD3NztSH0F+GdIQkRS8=
Subject key identifier:   59:D5:70:A0:01:FF:ED:69:E2:F2:81:9C:E2:D2:3C:D7:9E:09:A1:51
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0472
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0472
Signing time:             Sat 09 Aug 2025 00:35:52 +0000
Manifest this update:     Sat 09 Aug 2025 00:35:51 +0000
Manifest next update:     Sat 16 Aug 2025 00:35:51 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: WsarsisN0aegaeosQVPpH5zPfzFKQAJ4zzv3E1VY7ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: Aug  9 00:35:51 2025 GMT
            Not After : Aug 16 00:35:51 2025 GMT
        Subject: CN=689697e7-1c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:8c:10:6c:52:ef:33:69:e0:45:44:5a:50:
                    44:58:27:60:d0:20:7f:54:f9:d6:2d:22:c0:d0:80:
                    e8:2d:6b:45:22:bc:93:85:83:ef:c8:c3:7a:cd:8d:
                    3d:a7:7e:14:08:9e:6a:79:a8:6d:58:47:5e:6b:ce:
                    94:12:eb:60:58:12:58:9f:09:28:0f:b6:97:44:b8:
                    71:01:b1:38:6f:f1:a7:ab:57:70:af:df:40:39:49:
                    42:ba:6f:9b:5d:d9:08:07:15:6d:6d:8c:71:66:d9:
                    9e:4a:7e:8a:f4:63:dc:18:49:a9:4e:e1:24:a6:f9:
                    17:0d:0d:94:71:ed:a4:c5:27:f6:92:b0:0c:68:42:
                    2a:ad:5c:59:25:6e:33:bd:21:a3:ee:b8:9a:ed:cf:
                    36:b9:e2:57:17:36:e5:58:cb:ec:95:c0:67:3b:19:
                    cb:17:ff:ca:c3:29:e1:88:4e:75:21:4b:db:9e:da:
                    37:44:9f:cc:e3:a2:f3:94:ef:09:43:5b:31:bd:c6:
                    fc:cc:82:c5:0d:f2:4d:29:2b:f5:22:bb:c0:ab:18:
                    d2:c2:46:34:40:1d:4c:9b:fb:30:82:9d:b0:ff:2c:
                    ed:73:60:f3:35:bf:83:12:7a:46:5c:03:42:79:27:
                    76:d6:ce:48:40:f0:35:54:73:b2:ce:90:f7:3c:b3:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:70:A0:01:FF:ED:69:E2:F2:81:9C:E2:D2:3C:D7:9E:09:A1:51
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:10:5e:f9:ce:57:7c:91:ec:4d:ff:49:2e:32:1a:05:f8:
         20:6a:4f:07:86:db:ef:07:22:03:be:f4:cc:33:42:e9:45:77:
         be:b0:8b:a0:8a:d0:e2:f3:10:3f:22:58:6b:b5:fb:b8:52:70:
         2f:1d:0d:01:12:a3:0a:20:7f:83:7f:29:e8:be:49:44:d2:a1:
         67:cc:70:4d:6a:c2:cd:f1:c9:44:a4:89:84:58:0e:f5:39:50:
         a8:ae:4a:93:b7:99:72:02:b3:d1:9f:64:c3:3c:71:0c:11:4c:
         98:c2:2d:73:b1:44:f7:48:3d:c5:1c:67:65:8e:f8:e5:a5:78:
         95:1e:89:18:37:c7:24:9a:15:82:60:af:f9:34:64:a3:db:67:
         fd:93:d2:02:f8:1a:ab:18:e2:40:ee:03:35:7a:58:16:88:35:
         ad:bc:28:77:91:c7:4a:68:2c:96:35:87:a2:36:bc:29:89:30:
         0e:b0:b6:4a:47:b5:bc:5e:e6:a9:95:aa:b6:28:9a:e5:22:59:
         ae:d7:76:d5:27:45:c0:aa:eb:67:1f:c2:80:3d:08:e3:04:49:
         d4:77:82:a5:00:59:92:97:18:79:61:74:96:41:f4:0e:2c:fe:
         9d:24:c5:6f:10:b4:6b:c1:da:ac:ce:b9:30:4f:f1:4f:51:f9:
         23:14:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:12 2025 by rpki-client