Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          uXPnO6zBjYhUmFMPyd06ko6Bagb38yyAJ47vMQY77OA=
Subject key identifier:   8B:BF:49:BB:BF:14:37:13:77:F6:82:67:FD:D9:BE:5D:12:A5:AD:0C
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          BA
Signing time:             Thu 07 Aug 2025 06:30:25 +0000
Manifest this update:     Thu 07 Aug 2025 06:30:25 +0000
Manifest next update:     Thu 14 Aug 2025 06:30:25 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: DjSu+hFBv7/1S1sUqcaiHjV7wVIdoaN2ECUEL1Xw/lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Aug  7 06:30:25 2025 GMT
            Not After : Aug 14 06:30:25 2025 GMT
        Subject: CN=68944801-5772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:49:1d:3c:27:c8:42:ba:16:50:c4:aa:25:
                    85:a6:98:60:f8:9b:7b:1c:45:71:04:3a:53:f6:0b:
                    b2:fa:b2:ef:9f:9f:d5:00:b1:7b:28:49:d4:b3:3a:
                    2d:96:85:65:e0:db:05:bd:cc:b8:61:d0:47:c6:05:
                    28:9e:a9:49:a0:70:49:b8:82:63:86:77:0e:a8:d1:
                    51:88:3d:59:67:a5:5b:3f:35:32:7a:b4:d9:8b:45:
                    8f:02:5d:55:45:27:4e:2b:c6:4f:3e:02:07:cf:e9:
                    ac:92:47:32:b8:34:a4:fd:8c:9b:d2:e4:82:80:b5:
                    18:46:0e:37:df:27:c0:07:a1:13:fb:d7:d5:d8:15:
                    80:35:c1:a6:23:93:48:31:80:1d:48:22:c9:6e:ab:
                    63:f8:03:74:c0:db:31:6b:72:a3:e2:c9:af:3c:e5:
                    79:9a:0f:f4:5a:06:59:9c:ee:74:c5:d8:5d:3b:2b:
                    ba:29:ec:18:a9:59:e6:12:cc:49:b1:fd:92:5f:03:
                    79:57:63:fa:71:c7:05:f0:d9:87:64:f0:5a:9a:70:
                    2d:24:48:dd:84:b7:cb:4e:89:e8:72:60:4d:f5:06:
                    d4:22:3c:93:d1:be:4c:11:3b:2c:6d:9f:ff:cc:c8:
                    e9:3f:a0:32:28:42:67:52:89:43:c9:a4:d4:9a:55:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:49:BB:BF:14:37:13:77:F6:82:67:FD:D9:BE:5D:12:A5:AD:0C
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:6f:bf:d4:6a:ff:b9:77:82:e5:07:4c:31:26:56:2f:94:
         97:fc:f1:21:e8:73:93:f7:1f:bc:f8:fd:c8:44:de:c6:17:6e:
         4e:ab:c7:58:b9:c9:11:fc:33:2e:27:3b:c0:6e:a6:43:90:72:
         c2:2e:c0:e8:a8:92:81:94:86:c4:bb:51:da:cb:aa:4b:c4:e5:
         f5:e0:b7:51:9e:68:07:cd:15:b0:43:ec:6f:7d:e6:c7:42:ea:
         0e:88:d7:35:da:77:be:73:fb:26:57:d2:85:fe:a7:cc:4a:67:
         20:09:36:35:0c:8e:30:de:97:f0:5a:cb:50:32:f1:54:df:0b:
         93:0b:47:98:13:d7:75:07:b1:9d:a6:a8:cc:ac:7c:55:27:61:
         95:57:1a:1e:c1:3d:3c:68:cc:df:bb:1e:26:eb:1a:9b:57:24:
         c4:34:7c:85:3c:9e:60:b7:b0:c7:26:90:82:66:5f:37:69:e0:
         ee:0f:0f:1c:cf:e8:f9:98:87:8c:6e:08:f3:e1:31:cf:03:50:
         bf:02:d4:07:ed:5b:73:ce:dc:ed:d4:61:6c:b8:22:3d:67:ed:
         89:1e:0f:f5:fa:5d:2d:dc:a6:70:30:0c:b5:9e:cd:00:48:08:
         8e:c8:11:13:ef:58:db:c6:5f:9e:ea:34:16:3e:61:5f:73:ff:
         f4:7d:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:26 2025 by rpki-client