Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
File:                     RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json)
Hash identifier:          INx1r/Z08YiUHYq3yV/7gUZ4nD28sfFyFZqdSbyELus=
Subject key identifier:   C7:18:A5:6D:92:15:56:67:1E:B0:A4:FB:40:C2:F9:59:32:40:FD:49
Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Certificate issuer:       /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Certificate serial:       05E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
Manifest number:          05D5
Signing time:             Fri 08 Aug 2025 23:30:01 +0000
Manifest this update:     Fri 08 Aug 2025 23:30:01 +0000
Manifest next update:     Fri 15 Aug 2025 23:30:01 +0000
Files and hashes:         1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: 7Rla+Qjx3Qs6fFuHlS/34Rda81daQtmVHnmzDkZP9i8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
        Validity
            Not Before: Aug  8 23:30:01 2025 GMT
            Not After : Aug 15 23:30:01 2025 GMT
        Subject: CN=68968879-433f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:31:d8:60:ab:66:46:cd:67:b4:fe:1d:d1:
                    0d:8b:f7:08:32:5f:f6:0c:6a:22:6d:ad:93:15:f1:
                    e8:1a:cb:37:01:99:4b:58:e0:71:fa:99:ca:ad:ef:
                    06:ad:16:71:3b:e3:1c:3f:8f:3e:77:2c:29:1b:04:
                    97:6e:36:b4:d3:5e:1e:6a:08:0b:a1:16:9d:3a:45:
                    c4:b9:90:2a:cf:f5:5f:0e:0e:ab:c2:2d:78:fc:6b:
                    62:57:74:f8:d2:9c:3c:9b:1b:e6:93:c9:8e:8f:a8:
                    1c:88:cc:e4:29:e2:c8:fe:2e:1e:8d:e5:48:d9:47:
                    43:ed:7c:ca:a2:ce:b0:e8:3a:1b:97:52:4c:d7:d3:
                    bd:6f:92:87:b2:d4:1a:33:c9:d2:f9:d4:94:04:e2:
                    24:da:01:46:64:4d:16:bc:5b:d1:11:84:b8:3a:9e:
                    a8:2a:eb:43:b9:78:b8:36:78:1e:5c:f2:77:bb:b1:
                    ef:d0:56:6c:b5:0d:98:93:b1:87:4c:e6:f6:52:93:
                    fd:ff:4e:cb:5e:7b:ca:60:88:0b:b2:e5:34:bf:c2:
                    e0:6c:69:ac:09:ca:52:fc:66:af:49:ce:12:72:63:
                    b7:14:37:d9:42:b3:97:36:26:42:67:1c:f1:84:d6:
                    59:3c:2b:b6:6a:1f:28:4a:0a:ca:f8:17:63:7e:43:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:18:A5:6D:92:15:56:67:1E:B0:A4:FB:40:C2:F9:59:32:40:FD:49
            X509v3 Authority Key Identifier:
                keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:df:6e:8b:21:a4:6c:ac:32:5a:f6:80:30:a4:d5:f2:55:bc:
         80:b3:9f:7a:8e:76:46:19:8b:83:c1:bb:bb:30:0e:17:56:ba:
         c9:8e:c7:33:d5:3b:f8:a2:39:eb:91:4f:2b:ff:d3:7c:32:7d:
         7c:41:84:49:40:78:1f:17:13:29:e6:71:2a:2e:89:ab:2e:4f:
         42:7f:74:bb:cf:aa:55:5c:e1:e3:f3:38:d9:5e:9a:d8:d2:4b:
         3b:64:09:52:47:bf:eb:56:3f:b8:63:de:53:de:90:ef:84:c4:
         00:9e:40:24:1e:ab:78:ac:94:3d:81:2c:19:51:e2:0a:24:16:
         27:58:ed:e5:6b:9c:7f:8c:8a:ea:d8:cd:07:15:a1:38:e0:61:
         f4:eb:f3:a6:37:57:76:37:ed:a7:2f:29:5f:2f:a4:1a:27:38:
         9c:69:3e:8f:50:df:72:b3:5b:d5:df:71:88:99:74:26:99:8e:
         b5:de:8a:ec:12:ae:0f:14:0a:85:49:22:70:5d:52:65:ac:39:
         36:e0:e7:1a:a9:c3:e9:5c:20:df:00:de:b2:ca:66:03:db:48:
         85:38:c0:05:8b:b5:75:97:2e:a0:34:53:b1:dc:76:85:e2:98:
         0b:0a:5c:ed:bf:eb:a3:8d:ff:1b:45:9d:b2:c5:2f:2a:99:6c:
         be:2b:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:00 2025 by rpki-client