Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          yN7JeLZWgAtLLyi6DxULtmI02tFSVslNTMVoiCMUbfc=
Subject key identifier:   AA:1C:9F:A0:78:F6:3A:1B:08:67:25:66:28:FE:D7:C2:E9:B7:6F:8C
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          22
Signing time:             Tue 05 Aug 2025 08:31:16 +0000
Manifest this update:     Tue 05 Aug 2025 08:31:15 +0000
Manifest next update:     Tue 12 Aug 2025 08:31:15 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: P3WdmrGbBs6rRTroR+WRz5g8jl6iLwXH4mD7FavsuiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 08:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Aug  5 08:31:15 2025 GMT
            Not After : Aug 12 08:31:15 2025 GMT
        Subject: CN=6891c153-b1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:53:ac:c4:0e:33:9b:1d:71:cb:67:2e:9c:
                    33:3e:10:45:9b:9e:34:ca:41:11:ee:ee:ac:f0:71:
                    3a:aa:96:fc:57:81:e3:16:5b:ef:e8:b8:dd:3d:fc:
                    ba:71:61:da:ac:2e:b8:7e:fe:74:04:1d:07:82:d3:
                    5f:b2:4e:6c:eb:a0:c7:2e:e3:53:7b:84:a8:82:1d:
                    ad:78:44:e0:b8:c1:d1:7c:c5:fc:40:11:e9:d1:ac:
                    20:34:35:33:f4:41:40:a7:96:8f:04:02:ad:1b:05:
                    15:78:4d:ec:44:bb:4f:d7:e8:ec:a5:f0:5b:00:0f:
                    f1:1d:fb:d2:80:33:3c:42:15:d0:a7:91:44:c3:51:
                    94:d7:5d:21:61:93:1b:f7:b7:f5:75:6f:02:b8:03:
                    bb:88:27:8a:31:50:45:c7:0f:8b:41:80:d1:97:d9:
                    b3:3e:23:6a:bd:25:56:ca:68:9e:01:e3:5a:f1:ac:
                    19:20:c0:93:97:96:80:97:e8:23:36:a8:92:76:b7:
                    66:b1:e9:ed:ce:b0:e6:45:80:6e:38:58:2d:39:40:
                    04:48:08:6d:31:f6:0c:8d:77:48:97:9e:d6:a6:d8:
                    47:8c:d9:81:77:4b:86:55:b7:4a:9b:7b:28:45:aa:
                    32:93:52:56:95:7c:80:d8:33:60:b2:e6:46:bc:66:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:9F:A0:78:F6:3A:1B:08:67:25:66:28:FE:D7:C2:E9:B7:6F:8C
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:09:d4:aa:33:6a:b6:ef:20:8c:13:94:af:24:be:f4:20:90:
         00:e6:81:de:53:f0:fa:61:e3:ee:b9:52:bf:82:02:5f:2b:d7:
         e7:15:fc:86:c1:68:03:15:2a:1f:66:df:4f:a6:d8:2f:3a:67:
         27:a9:2f:fc:b4:45:be:d8:d6:5d:8b:6b:bb:8a:9e:77:1f:31:
         9a:85:10:83:ca:27:0a:62:99:f0:d7:e2:c2:0e:97:d6:e0:5b:
         26:11:df:f4:53:50:25:99:b3:3c:f1:7b:80:ff:13:80:4e:9c:
         ab:cb:dc:19:dc:25:72:e2:3c:59:64:2d:78:b1:e9:f4:17:67:
         b6:6c:73:81:5d:0b:72:5d:05:d7:d0:b8:bd:a5:88:c1:ac:83:
         ec:62:c0:4b:8f:1c:e8:66:1b:8c:20:4d:51:91:e4:7c:76:f7:
         27:c6:12:c4:22:26:49:e7:ef:e6:0c:5c:4b:9c:cd:4e:9e:5f:
         0c:ef:69:f6:83:d3:ee:55:d9:0b:77:f9:cb:02:fa:96:af:55:
         6e:18:7b:69:75:fe:b6:20:4f:fc:92:ea:71:cc:33:4c:de:74:
         7e:cd:e8:49:62:ff:20:a1:70:25:ab:d5:6e:43:55:38:9d:cf:
         50:26:59:25:c6:3d:67:a5:09:48:da:22:5e:ed:f5:41:a3:b7:
         dd:39:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:55 2025 by rpki-client