Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
File:                     AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json)
Hash identifier:          lS/CVuIz6/rpedlirpSEfUZKL6zmtQyT0MXaPc/MFd0=
Subject key identifier:   27:E1:6D:3F:A8:1C:5C:38:15:90:0A:C6:50:5D:B1:EE:95:E8:99:D1
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Certificate issuer:       /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
Manifest number:          0148
Signing time:             Sat 09 Aug 2025 04:42:16 +0000
Manifest this update:     Sat 09 Aug 2025 04:42:15 +0000
Manifest next update:     Sat 16 Aug 2025 04:42:15 +0000
Files and hashes:         1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: Z3YbOQh+7kPk5abJSMQ2E2mdLNKe/NX+HJt7RZ6P/tQ=)
                          2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: K6AeShDx5+I/nCnkd6XWtADIagUHyyAB2FaUjuCmbW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
                          rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
        Validity
            Not Before: Aug  9 04:42:15 2025 GMT
            Not After : Aug 16 04:42:15 2025 GMT
        Subject: CN=6896d1a7-c218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:5a:81:fc:03:38:b8:c3:df:c0:26:10:e6:
                    0b:48:4e:09:e3:c8:c6:51:6e:62:af:1e:1f:8e:66:
                    15:49:65:2a:26:16:66:de:3d:cd:4e:2c:f0:f2:b0:
                    c1:23:b4:60:d6:11:fd:67:62:38:6f:c7:cf:af:fd:
                    c7:b6:92:13:6b:20:0c:ab:e2:39:59:2a:ef:17:44:
                    df:5e:41:19:15:65:9c:46:ed:00:81:ec:35:6e:41:
                    41:cf:21:f6:a0:99:8b:11:85:d3:75:06:95:ee:ab:
                    0b:6e:2e:ab:1a:ab:d7:65:c4:b4:40:d9:fd:cb:ea:
                    7c:30:a4:8e:48:d2:82:fb:ef:5d:79:21:d9:1a:2b:
                    94:62:d2:4e:de:a1:ab:1c:98:0d:9c:3c:f2:1d:9d:
                    53:9a:47:be:5a:13:67:a0:ae:08:44:19:6f:70:80:
                    50:94:12:81:d2:19:35:4a:79:f1:be:55:66:50:0a:
                    72:53:33:c1:fc:11:f6:31:81:b9:7c:b2:00:7c:dc:
                    7a:1b:74:79:2c:57:3e:aa:43:d2:d5:ce:fd:1d:6a:
                    97:0a:fb:14:67:16:86:d7:f1:70:d3:57:80:ab:4e:
                    d3:9e:9c:ad:0a:ba:7c:91:c9:1d:8e:3e:ae:3a:3a:
                    88:17:a2:10:45:c9:d7:7d:7c:92:d3:f0:bb:58:44:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:6D:3F:A8:1C:5C:38:15:90:0A:C6:50:5D:B1:EE:95:E8:99:D1
            X509v3 Authority Key Identifier:
                keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0c:06:52:55:65:9a:e8:ae:5c:04:29:96:af:b3:71:f1:59:
         e7:fc:48:c4:87:64:8f:c0:99:52:06:d5:be:c1:2a:e1:26:af:
         94:67:fa:1f:f6:43:f0:50:f4:00:4c:45:62:fe:18:ff:fc:7a:
         0a:2e:7f:ca:21:ac:9a:d3:63:06:7e:36:2d:d7:61:94:f9:3a:
         77:16:b9:a8:c8:5c:0b:6d:f5:df:a0:91:7d:f6:ff:bd:71:a3:
         51:16:6e:55:46:88:ab:98:f0:1f:af:2f:34:72:29:b6:39:a3:
         c1:4f:75:a8:c6:d8:3c:02:b5:33:ac:8b:33:1e:54:3a:38:b4:
         d9:19:82:8c:39:d0:a3:dd:22:88:56:d2:73:84:af:e8:2f:71:
         85:33:e5:41:21:4d:d2:7e:6f:3d:a7:04:4f:69:26:5f:16:b6:
         8c:a2:a5:33:f7:4f:b5:71:ee:26:82:ab:97:d1:ab:04:43:b2:
         6b:ab:1b:ff:23:81:93:15:30:02:1a:f6:3b:ad:6f:64:93:de:
         da:13:2c:d5:e7:56:61:da:cc:bd:50:5c:23:72:44:81:18:6d:
         f6:23:ab:fe:e1:6e:90:63:15:14:45:d7:74:4a:d9:fd:86:03:
         1c:a9:9b:e1:1f:d6:c9:22:c4:87:67:ad:84:0b:69:55:b4:2c:
         ef:82:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:08 2025 by rpki-client