Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          YQQ118TIFybk6RLwxY7AzGitAlbvjvdCLc9ZzzU87go=
Subject key identifier:   48:9A:3C:B0:78:86:4B:69:47:FE:4D:9C:38:CE:5E:D5:AA:EE:72:52
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          A4
Signing time:             Sat 09 Aug 2025 06:39:00 +0000
Manifest this update:     Sat 09 Aug 2025 06:39:00 +0000
Manifest next update:     Sat 16 Aug 2025 06:39:00 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: jsd9UXdZkBsB9KuL+7ew0jUjdVJR0f9wKTjPjHMLk9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
        Validity
            Not Before: Aug  9 06:39:00 2025 GMT
            Not After : Aug 16 06:39:00 2025 GMT
        Subject: CN=6896ed04-f654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:9c:58:2d:68:e8:c7:38:f6:a1:01:77:e1:
                    e7:95:d1:b5:c4:de:67:71:9e:29:e6:26:38:a4:71:
                    99:96:c8:5e:7e:97:3f:43:de:2f:af:11:44:8e:95:
                    31:17:a6:c0:8e:6e:2b:59:f1:13:9a:6a:aa:6a:1e:
                    d0:81:68:30:ae:08:22:37:ee:e3:07:1b:25:e2:6a:
                    77:8a:d1:fa:49:4d:38:8f:d1:62:69:f9:46:9b:4f:
                    22:70:38:f8:2e:90:f8:1f:a9:9a:f6:3e:ca:52:e0:
                    76:c2:5b:12:58:b8:3e:4a:9c:e1:b3:0d:a5:66:a2:
                    94:00:07:d3:85:d2:be:bf:c7:ed:6e:d9:2f:8f:4b:
                    81:ee:4f:1e:55:bf:92:db:fb:56:c2:e0:f3:08:00:
                    5e:03:e9:81:25:e8:eb:63:cd:b3:31:00:dc:3d:51:
                    56:38:ca:16:e7:dd:46:d5:cc:de:99:b2:a5:86:6b:
                    cf:5a:85:0e:55:28:b8:01:82:7f:98:33:03:ce:33:
                    e3:77:9f:f3:c8:21:fd:bc:58:dd:e9:1b:9c:c4:9e:
                    87:10:80:10:22:28:16:42:cd:0f:32:68:00:f6:ca:
                    2b:64:f1:63:19:10:8e:6a:43:f6:b8:d1:8e:9a:f0:
                    b6:14:86:7c:57:93:1f:fe:55:56:09:c4:da:1f:a4:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:3C:B0:78:86:4B:69:47:FE:4D:9C:38:CE:5E:D5:AA:EE:72:52
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:a1:46:08:ef:bf:aa:8e:c7:fd:1b:31:00:23:72:13:c9:
         56:6a:4b:88:e3:d3:3a:41:21:8d:bc:e2:bc:4c:73:c8:a1:33:
         27:68:1f:44:24:93:ab:3d:16:0e:a5:21:1c:5d:c4:d8:39:fb:
         da:14:2f:63:fe:ea:c5:5a:41:70:b6:f9:19:ca:4a:17:3f:ee:
         49:70:54:08:99:c0:e3:4a:3a:fe:e9:16:82:f7:b6:44:bd:a4:
         3b:dd:e0:cb:ef:f9:eb:5b:ee:73:2c:73:a8:b9:76:b6:bc:26:
         9d:37:91:ae:7d:42:13:3f:c4:bb:30:4f:ce:dc:c1:94:35:99:
         2e:18:bb:22:bc:1d:f2:37:dc:e8:e6:1d:fa:10:f8:07:82:a3:
         5a:e8:e4:5b:35:ec:c2:5e:19:b8:f7:8b:52:e0:96:38:b8:91:
         86:2e:3d:3a:e4:17:c9:8b:18:f8:67:c6:9b:4c:ad:00:c7:22:
         67:7f:fd:29:8f:65:f2:cf:fd:e0:e9:bc:70:28:91:5a:f0:c0:
         9b:37:1e:1a:6e:40:f4:70:3d:26:56:f4:87:69:d3:85:d1:bd:
         5e:c1:e3:c4:6f:55:40:f3:63:a5:ca:4f:f0:64:14:51:9a:9a:
         46:ee:e3:32:d4:ae:a0:20:0f:4c:e7:40:5a:d3:68:26:d7:ad:
         e3:15:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:53 2025 by rpki-client