Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier:          et5MJt6YMh8kgG1fknLN3RPMu4MCBU3H3lgIdNheTe0=
Subject key identifier:   0C:8F:21:10:45:2E:11:90:A9:DA:95:D0:E6:4E:5E:DF:FB:CF:DA:0C
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer:       /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number:          0727
Signing time:             Fri 08 Aug 2025 22:12:45 +0000
Manifest this update:     Fri 08 Aug 2025 22:12:44 +0000
Manifest next update:     Fri 15 Aug 2025 22:12:44 +0000
Files and hashes:         1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: xZFyaR6fGODaSMYsqXgqKZThLBmF4/8VJ3jsB7LCaFc=)
                          2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: qvspaedVSxXhNT9OPfm4dmWtO2TlaRcmc3pC2Y/603Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
                          rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Validity
            Not Before: Aug  8 22:12:44 2025 GMT
            Not After : Aug 15 22:12:44 2025 GMT
        Subject: CN=6896765d-d7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:79:10:f8:58:0d:b7:1e:78:4b:57:46:04:
                    32:91:68:0e:8b:25:4e:46:68:74:ab:61:57:87:3e:
                    d1:47:8f:e0:63:53:77:c4:eb:e9:da:ab:e0:21:4e:
                    3e:85:c1:79:ed:57:e2:f1:00:bf:26:f7:1e:d4:90:
                    25:d1:c9:e4:04:31:44:fc:98:0a:39:09:0d:f6:89:
                    84:a1:d4:84:e0:3c:07:ea:d2:05:c0:ff:8b:17:fa:
                    1b:66:fc:0e:69:e2:38:5e:69:87:c7:7b:a1:47:e7:
                    17:a6:19:cd:fe:46:6d:8b:c1:b7:30:10:b5:c3:ef:
                    3b:37:d7:2e:a6:3e:e9:d4:f7:10:72:16:2a:4a:f9:
                    ae:d8:c4:cf:be:16:e5:83:e5:3b:b3:8e:b6:53:97:
                    90:73:c2:48:7f:9c:bf:21:a5:22:70:08:1b:2c:f3:
                    58:0d:f0:e1:14:81:67:05:de:27:bd:ab:08:9d:60:
                    a6:e4:30:22:74:8c:47:47:5f:84:34:a8:ce:42:96:
                    36:c2:df:61:b3:37:29:1a:24:e5:f3:16:25:40:05:
                    d7:5c:dc:41:5b:f4:fb:41:c8:1c:b9:58:79:69:97:
                    b7:73:5c:80:31:f0:91:dd:ea:78:54:14:85:29:1e:
                    1f:ee:d1:49:2c:bc:44:b2:d0:cb:56:f8:41:d2:e3:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8F:21:10:45:2E:11:90:A9:DA:95:D0:E6:4E:5E:DF:FB:CF:DA:0C
            X509v3 Authority Key Identifier:
                keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:48:16:91:6e:cc:10:8e:96:a8:b4:5e:a7:ae:5c:12:c6:
         66:f8:77:94:45:4b:72:fe:d8:26:41:64:21:18:92:19:29:e3:
         78:81:c0:ee:2f:fc:10:0c:d3:08:3d:a4:73:73:2e:80:4b:6d:
         c7:e7:3b:59:93:d4:55:b7:27:b8:58:d8:30:b2:bb:26:5d:c3:
         23:0a:40:bf:af:c1:14:af:ac:5c:a4:0d:41:25:d9:61:fa:f8:
         a8:8d:af:d8:64:97:66:88:25:06:17:62:76:55:bc:52:1a:27:
         9d:08:35:cd:a4:e2:65:65:03:b2:67:4e:1d:22:74:99:0a:41:
         59:30:9b:8d:71:bf:b3:17:31:e4:be:f0:2d:16:6f:d7:11:bb:
         1e:19:8d:9e:1a:b2:02:85:44:1d:61:3a:51:00:ac:c4:3e:1c:
         c6:d0:55:27:98:56:9c:a5:b1:d6:3f:a5:ba:ef:64:96:a3:54:
         19:40:be:9e:25:e8:f7:f1:a6:c5:05:82:54:7a:57:99:6c:40:
         42:86:3a:fc:0c:99:9a:78:f9:09:71:27:4f:66:28:eb:f0:0f:
         2a:98:c9:c3:0d:d7:2a:49:19:52:53:eb:28:ec:b8:d4:a6:15:
         a9:47:36:e7:6e:10:58:a0:9f:d2:b5:08:de:53:8d:d8:c3:38:
         b8:e4:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:49 2025 by rpki-client