Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          umoipcweG1PQUuw8qdJDiuz3kCQxGD85oAIbeM3pwVs=
Subject key identifier:   33:5D:14:3F:7A:AD:CD:43:C7:39:7C:C6:59:5F:8D:AB:F0:BA:C4:C4
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       0657
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          0657
Signing time:             Sun 10 Aug 2025 22:38:31 +0000
Manifest this update:     Sun 10 Aug 2025 22:38:30 +0000
Manifest next update:     Sun 17 Aug 2025 22:38:30 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: iSIu9rIa6Px68+Z/VgKfFRK1B71B3YzuKBiJ4hSir/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Aug 10 22:38:30 2025 GMT
            Not After : Aug 17 22:38:30 2025 GMT
        Subject: CN=68991f66-31ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:36:69:d6:9c:f6:77:5c:f5:2d:f7:98:cc:
                    fc:f1:3c:d2:23:10:47:13:06:13:8f:7d:e0:57:49:
                    89:17:75:76:5b:61:c8:a3:98:ff:15:a8:03:6b:ca:
                    ee:d2:08:e0:1b:ab:a9:c4:bc:2d:02:47:c7:74:4e:
                    47:08:51:ae:c4:4e:61:72:e6:9a:fd:8b:cc:86:44:
                    55:25:2c:3e:33:f9:6f:0c:3a:f5:d0:0a:60:79:f5:
                    19:f3:bc:24:34:01:92:ca:43:a1:51:72:4c:d1:6a:
                    99:03:c6:6d:d5:d7:72:2a:98:9b:e6:94:7f:fa:b8:
                    1c:c6:c6:a3:6a:23:9e:f6:de:13:56:20:8e:36:fb:
                    2f:df:4c:b7:a7:71:24:70:ec:66:0b:be:c5:dd:47:
                    97:d1:c9:f8:5c:6a:8c:13:03:ee:b1:f3:2b:a7:d5:
                    32:38:fc:68:9f:64:ea:8d:e5:1f:6a:79:0b:19:94:
                    76:76:98:20:e2:cd:02:20:34:52:83:27:17:d3:e0:
                    39:d0:8b:5b:79:cc:7f:b4:5c:e9:97:35:6a:54:59:
                    b3:06:f6:ed:d4:d4:e3:91:0c:15:62:2a:a4:b5:b5:
                    a9:27:35:f8:58:2d:38:7a:08:ea:1b:40:5e:9d:74:
                    1c:f1:92:95:37:1c:e3:02:8d:87:b5:89:e2:48:a5:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:14:3F:7A:AD:CD:43:C7:39:7C:C6:59:5F:8D:AB:F0:BA:C4:C4
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:62:b3:83:64:14:f9:1c:b8:a4:0c:c4:10:30:18:0f:26:
         fb:7c:3d:39:9f:4d:6e:eb:89:cf:e7:2c:17:93:3e:23:2b:69:
         8a:7e:5d:3e:0a:36:d1:73:b6:5b:07:bf:b9:2d:69:92:41:77:
         48:b3:99:5a:58:39:90:79:ec:c6:89:1b:51:a9:43:b4:d0:c3:
         46:f4:6e:9d:53:d7:1c:16:1f:e2:a9:9f:fb:69:62:0c:d9:6a:
         6a:a3:ff:df:4f:3d:c8:79:c0:0e:a7:7f:c6:83:09:d1:15:1f:
         0b:4a:af:6e:b1:56:b2:80:8e:93:73:fd:12:63:e8:09:f5:1c:
         3d:a9:6a:d2:12:e7:65:22:93:61:11:b2:c1:40:99:fb:2d:6a:
         eb:75:a9:7b:25:79:79:94:fc:1f:d2:a9:20:b6:ac:0d:01:e8:
         a6:3b:f0:dd:e2:65:eb:1d:6d:7d:96:08:c2:27:3c:87:52:2b:
         aa:fb:ab:a0:54:0d:e6:57:46:9a:31:fe:d2:c1:4e:bb:73:9a:
         d0:c1:22:11:fa:f6:95:76:f7:f9:8d:d3:67:99:bc:56:cc:f4:
         29:9c:cb:a8:af:31:f7:cc:39:56:57:78:a6:d5:cc:7b:f2:02:
         81:bd:ed:a5:6b:5c:62:40:aa:4c:62:73:e1:37:43:58:5a:ba:
         93:d5:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:10 2025 by rpki-client