Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File:                     aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier:          PireJIOiNRYDL81riPww8RhScMJ/F156FAZV23s32A0=
Subject key identifier:   73:10:9E:A5:05:1C:00:D0:E6:5E:40:95:85:9E:45:FB:E3:01:3A:B7
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer:       /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial:       0634
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number:          077D
Signing time:             Tue 12 Aug 2025 23:18:38 +0000
Manifest this update:     Tue 12 Aug 2025 23:18:38 +0000
Manifest next update:     Tue 19 Aug 2025 23:18:38 +0000
Files and hashes:         1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: 8qzXgZysyXtg2mIvplm0c+OIVsQURasRsmc2PPbHpGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
                          rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Validity
            Not Before: Aug 12 23:18:38 2025 GMT
            Not After : Aug 19 23:18:38 2025 GMT
        Subject: CN=689bcbce-3e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:76:3c:d4:7d:e5:9b:0b:19:ac:55:1d:cf:
                    5e:ea:3a:9f:80:25:a3:3e:bc:25:a1:7c:04:c7:45:
                    0c:fe:5e:1b:30:99:e1:d6:80:5f:c9:83:c3:4a:50:
                    f3:b2:52:a7:16:90:af:ce:3b:d1:d6:4c:93:2a:2a:
                    1b:31:89:09:33:1a:51:82:b5:fc:df:d1:92:d2:08:
                    0a:fc:56:d2:6e:50:7b:69:4f:5a:67:9c:15:89:89:
                    97:88:6e:9e:ff:12:fc:02:5b:66:17:ec:9d:40:4f:
                    b8:9f:ab:33:f1:a0:4e:9d:1c:0f:c8:a2:1c:4b:87:
                    10:f2:b1:92:93:10:f4:17:aa:d3:4f:b6:f3:88:cc:
                    b9:2c:9f:a2:c6:14:96:74:92:5f:e6:90:a4:37:30:
                    ad:24:8c:e7:8f:c7:ed:51:2c:a0:f9:d8:2f:e9:fd:
                    de:62:76:43:5d:5e:df:0c:d5:06:7a:34:4f:c3:b3:
                    2f:df:04:44:f3:ed:d3:ae:bf:4b:f9:1f:ce:1b:70:
                    cd:85:5d:36:01:41:c4:e8:44:3a:bd:25:d3:55:50:
                    5b:4f:b8:49:0e:9f:37:42:fd:24:67:f6:a7:14:88:
                    b8:e4:e0:0a:78:ab:7d:29:52:8c:9a:12:0e:a1:c9:
                    e9:12:a8:43:4c:22:62:b6:f1:88:76:9e:8f:99:16:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:10:9E:A5:05:1C:00:D0:E6:5E:40:95:85:9E:45:FB:E3:01:3A:B7
            X509v3 Authority Key Identifier:
                keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:49:3c:cb:b8:e5:f5:bc:59:d6:d7:e5:09:af:ae:a5:91:
         f9:12:86:72:32:38:7e:11:54:ba:4f:26:0e:09:76:0e:3c:b2:
         9a:ba:94:bc:c0:a3:45:fa:6a:c1:c6:e1:20:0a:86:d0:90:cb:
         ab:ce:f7:9c:12:cb:9e:d7:76:af:ef:e5:91:68:48:4d:dc:40:
         1d:b2:4b:2f:67:35:b1:2f:6d:6d:75:55:04:c1:c0:56:0d:bc:
         0b:92:a2:58:39:35:e0:61:9c:f9:35:e8:6a:52:db:f3:80:bb:
         4e:eb:57:62:2a:ec:0c:b4:f1:3a:29:f5:5b:63:fd:57:29:3e:
         6a:02:f9:ad:c3:32:06:e5:d6:a2:7d:74:20:ac:50:d8:20:ac:
         b8:a0:11:00:c3:d8:f2:82:6b:2a:0a:8b:bc:b4:9d:24:5c:a9:
         fb:ac:df:44:5c:81:8e:33:28:59:35:f3:5e:09:4f:84:ea:91:
         a2:77:55:da:a3:a8:fc:31:f2:54:80:c5:81:33:92:cd:89:d5:
         7a:eb:b3:c5:5c:72:be:c0:ed:58:23:de:08:11:9a:ae:4c:c5:
         b8:c5:50:b3:2e:33:0b:fd:a7:9c:ee:59:81:b0:02:17:b8:23:
         52:dc:8b:97:72:bd:95:d7:36:d6:38:c0:22:79:89:21:51:e1:
         e1:49:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:02 2025 by rpki-client