Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          eV56S8oQbk7OO6WxJrNQ90X7RFgIChZZIyw4h1RmweM=
Subject key identifier:   F8:EC:C3:4A:34:B7:BF:31:D4:7B:48:51:20:24:DD:53:DC:09:80:2B
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       03D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          03D1
Signing time:             Mon 11 Aug 2025 00:49:29 +0000
Manifest this update:     Mon 11 Aug 2025 00:49:29 +0000
Manifest next update:     Mon 18 Aug 2025 00:49:29 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: 6Eh78w5WaI0FtLle9ST2bTVVw5s+j7XwMttDYVhkb2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Aug 11 00:49:29 2025 GMT
            Not After : Aug 18 00:49:29 2025 GMT
        Subject: CN=68993e19-356e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:9a:d7:4b:95:4e:1b:c5:5f:20:22:ac:f0:
                    e8:eb:13:68:98:29:30:42:03:79:c3:ff:0f:e7:81:
                    58:54:f6:84:cb:c9:35:53:41:48:0a:9b:a2:b7:29:
                    d9:2d:11:60:dc:aa:44:ab:9f:36:85:5c:fa:9c:29:
                    ef:c0:54:36:f9:a4:19:93:22:c5:db:68:78:7c:d4:
                    bc:da:44:33:7d:6b:49:28:8b:da:38:cc:0f:fc:4d:
                    7c:88:9f:a1:50:dc:05:9e:c9:62:67:ba:e5:db:04:
                    3a:cc:f4:de:29:59:68:d0:6e:2d:5f:8d:83:a6:1f:
                    d8:2f:bb:89:67:b9:a6:f0:f5:26:81:ce:dc:41:d7:
                    f0:d0:5d:73:48:1e:c0:92:b9:fc:dc:b4:0d:ec:b8:
                    3a:4a:45:b0:18:6d:2a:f4:d7:12:d0:39:58:02:58:
                    19:70:c5:8e:0a:c8:35:e9:48:cc:b3:60:26:f1:2f:
                    e7:be:9b:91:d5:f8:6b:cc:4f:f1:9c:28:56:26:a4:
                    34:58:f8:ba:02:b7:b9:22:ec:e9:b5:d5:6c:a9:fb:
                    c6:3c:88:f5:0b:96:61:c0:99:59:f7:3d:44:7d:51:
                    be:1a:3b:21:91:7b:39:1d:bb:90:14:c9:24:82:16:
                    a6:c4:16:9c:26:31:e1:81:83:be:73:fd:b6:ba:7f:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:C3:4A:34:B7:BF:31:D4:7B:48:51:20:24:DD:53:DC:09:80:2B
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:a5:f0:a6:d2:dd:8c:53:cc:dc:c1:20:4f:4a:01:2f:3f:
         04:1d:44:a0:f8:d5:a6:e7:c4:5d:ff:a6:07:83:ba:a8:82:6e:
         f6:77:41:0e:80:fa:16:ab:b2:40:d4:42:9e:96:ab:3b:e3:9f:
         41:d9:1c:da:90:fe:75:8f:a8:29:b9:ec:7b:95:2f:00:dc:9c:
         bc:38:a5:2c:2d:fc:20:87:82:7c:ec:3d:e1:84:a2:9c:6e:cf:
         0c:1a:65:8b:69:ec:9a:19:ca:bd:03:45:b7:24:a6:c2:37:ae:
         2b:0a:4b:e1:a9:55:f7:6c:82:7b:6b:b1:52:46:47:dc:06:e3:
         eb:5c:4b:d0:8d:3d:ef:15:b8:36:3b:65:a0:05:00:7b:91:73:
         51:cb:86:59:5c:d7:58:65:b6:34:54:2e:a5:25:1a:eb:22:1e:
         c0:6f:4a:f8:4d:80:f5:2f:79:de:25:37:f9:61:4d:87:b7:a9:
         5f:2a:72:e3:cf:73:ce:63:a9:d8:4a:58:fa:28:56:4f:70:d4:
         38:15:1b:ab:a5:b1:40:a7:c4:41:f8:61:48:5c:5c:6f:bb:73:
         a0:ec:21:c5:3b:b4:a1:d9:40:59:b7:f1:f6:aa:5a:82:f8:c3:
         43:31:61:f9:33:3a:03:46:95:2d:8b:3e:f5:c7:88:48:f2:ab:
         64:a7:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:19:59 2025 by rpki-client