Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File:                     odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier:          1GYWcazlZlLC9ApD4eWy+st9E2XYH54RhSgA5pdMjhI=
Subject key identifier:   24:75:90:60:F1:F8:35:D2:13:1D:FC:23:53:46:F9:E0:97:A9:F0:E1
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer:       /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number:          AE
Signing time:             Sat 09 Aug 2025 06:31:26 +0000
Manifest this update:     Sat 09 Aug 2025 06:31:26 +0000
Manifest next update:     Sat 16 Aug 2025 06:31:26 +0000
Files and hashes:         1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: Q7qLQJo2B1KCKax1+8akiH21d8+iylbvYbgKQuR76pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
        Validity
            Not Before: Aug  9 06:31:26 2025 GMT
            Not After : Aug 16 06:31:26 2025 GMT
        Subject: CN=6896eb3e-39de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:34:c4:9d:ad:de:69:cf:7f:52:57:35:22:
                    e4:1e:67:e5:26:0a:e7:d4:a1:c0:0e:cc:72:ab:8c:
                    94:05:e1:a3:35:68:52:9d:7d:ea:7f:01:65:e6:55:
                    19:9a:25:1e:e9:ba:e7:9e:ec:2a:e8:0a:46:3c:b3:
                    1d:98:76:0b:98:71:7e:e5:a7:db:7b:11:91:29:53:
                    b0:4a:8d:93:51:0f:22:af:bf:b3:cc:94:9f:eb:78:
                    3b:93:78:da:ca:74:a0:19:59:54:8f:a5:71:75:a1:
                    65:aa:05:f1:44:17:08:fc:ce:c1:7d:f5:10:a3:9f:
                    2b:36:01:ea:c9:ce:40:db:77:97:a2:f5:3c:da:55:
                    dd:56:dc:5c:1e:b3:c1:14:24:90:ba:4b:a7:90:ad:
                    ec:3b:ac:3a:a8:6f:4a:7d:c2:58:f2:ad:5f:01:1d:
                    84:6e:0f:18:8d:3e:90:66:a8:92:c2:b0:1d:e1:21:
                    b6:72:2e:42:ba:c4:f2:13:87:4e:d7:06:56:e5:a7:
                    c6:af:5e:12:ed:26:ef:6a:08:a4:09:79:90:7b:2d:
                    74:e2:9f:bd:d9:db:3f:b1:c5:67:a6:ac:3f:95:51:
                    ba:92:2d:28:0d:23:41:9c:c9:cf:c0:cc:ce:3a:8c:
                    a3:9a:5c:a2:5c:ff:c6:ac:4b:67:2d:ea:97:18:15:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:90:60:F1:F8:35:D2:13:1D:FC:23:53:46:F9:E0:97:A9:F0:E1
            X509v3 Authority Key Identifier:
                keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:49:f5:62:3a:6c:c9:be:26:5c:f3:6c:58:f8:e0:3b:e8:16:
         69:39:bf:40:59:49:b4:b9:83:85:84:33:e6:1a:91:7d:ec:4d:
         0e:20:98:58:4d:bc:e2:35:32:0a:31:90:f2:9f:a7:dd:fe:9f:
         d9:bc:95:b8:6e:a9:e6:87:b0:0a:d0:23:59:3b:11:9b:17:df:
         46:18:2f:61:71:8d:ec:c0:c9:a4:f3:53:16:64:f2:51:8b:04:
         96:ee:22:a1:a0:22:62:a2:de:ed:aa:60:bb:bd:e1:be:94:1f:
         a7:48:1a:2d:b6:04:08:4c:de:f5:49:98:07:b1:26:47:4c:5a:
         bf:7a:7a:66:36:71:33:8b:5a:b3:98:e5:c2:55:f9:dd:41:da:
         55:3e:47:1e:f9:40:c6:dd:51:db:ef:d3:01:76:b6:09:21:cf:
         80:64:e7:e2:b7:c8:d8:18:ca:57:f3:82:76:7c:43:f2:25:a3:
         e3:ac:03:11:a7:e9:36:3c:9b:16:16:6b:53:45:f1:80:ce:30:
         46:03:69:a1:cb:cb:aa:0b:a6:02:82:59:d6:b0:f4:7f:5a:c8:
         e8:f7:13:35:01:e1:1d:7c:a2:1d:09:48:84:a7:eb:20:43:b4:
         97:96:bd:ba:2b:24:fa:c4:c1:d5:73:09:78:ae:0a:61:44:3a:
         86:07:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:54 2025 by rpki-client