Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
File:                     Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json)
Hash identifier:          6D4y3HMINheiOS/lkyhP+NPlcR7TNwkUVjd0HIdEZF0=
Subject key identifier:   6C:8D:8F:41:DB:5C:2C:7A:C8:2E:8B:99:6E:9F:A9:19:B6:78:25:B1
Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F
Certificate issuer:       /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
Certificate serial:       34B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
Manifest number:          34B4
Signing time:             Mon 04 Aug 2025 15:21:16 +0000
Manifest this update:     Mon 04 Aug 2025 15:21:16 +0000
Manifest next update:     Mon 11 Aug 2025 15:21:16 +0000
Files and hashes:         1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: 9XVxtVVqTPH8aTMY6ITECZ6BdTwBWWpuY4fevVnZxMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13492 (0x34b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
        Validity
            Not Before: Aug  4 15:21:16 2025 GMT
            Not After : Aug 11 15:21:16 2025 GMT
        Subject: CN=6890cfec-462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:8a:91:91:11:d2:25:32:f8:61:72:ee:a6:
                    e8:54:0f:fa:ba:41:20:50:5b:c9:a0:29:74:46:b3:
                    cc:ee:9c:32:01:38:76:be:a0:9d:70:57:c8:55:08:
                    bb:f6:28:bd:71:d5:a7:33:df:58:e0:7c:4d:ae:1e:
                    bc:ed:08:1a:c3:9d:c3:aa:b5:a3:bb:d7:56:e7:56:
                    4e:1f:ef:22:1a:90:9c:d3:e5:b3:ce:08:8f:28:7a:
                    c9:f6:86:d8:3e:63:3a:87:78:87:1f:48:61:a3:e1:
                    e3:5f:6f:d6:d6:59:99:e7:ff:ca:fc:c4:03:9f:b1:
                    88:dc:f2:d4:cd:f0:b7:26:9f:81:3d:9a:c7:d1:1b:
                    5c:9c:3b:27:3b:0c:00:6b:3b:9d:96:66:c7:dc:72:
                    e7:c5:02:d0:ef:32:20:08:eb:1d:72:ff:52:87:03:
                    01:fd:08:aa:ae:de:a2:5a:b8:95:40:f9:f2:1f:46:
                    30:d6:e4:7e:49:27:63:22:96:1f:75:b0:a0:1d:9a:
                    76:ff:13:d6:65:0f:a4:f5:c6:e2:81:85:54:e2:84:
                    b1:8e:9d:c7:63:51:fa:25:cf:6e:e4:fc:cb:98:c6:
                    e7:ab:cd:dd:2f:6b:61:d7:2a:b3:7a:9a:a7:b4:bb:
                    66:81:c3:4a:c2:42:66:2d:bf:1e:22:29:50:85:f2:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:8F:41:DB:5C:2C:7A:C8:2E:8B:99:6E:9F:A9:19:B6:78:25:B1
            X509v3 Authority Key Identifier:
                keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:fa:89:33:34:ac:a0:9b:3e:89:7e:73:3d:68:dc:1d:46:
         ff:33:2a:5e:25:76:be:75:ba:67:24:9d:a7:29:47:a8:6e:d4:
         a4:96:88:43:b9:ee:fd:ef:b3:e1:47:16:7d:5d:4c:6e:94:f9:
         5f:0c:00:0d:ae:fd:29:87:1f:ab:38:81:b8:46:1d:d7:50:fb:
         93:3e:5b:7f:8d:f5:55:2d:dd:aa:86:4b:70:35:60:3f:06:4b:
         2a:d7:08:ff:be:ad:ab:6c:9c:e0:e6:64:34:47:e1:b8:55:2d:
         f1:13:c0:d7:fc:5b:5c:de:f3:eb:47:78:e3:e9:71:a0:5e:af:
         c0:28:50:29:ab:4b:8f:26:3b:e4:1c:e3:b3:3a:c1:53:46:87:
         54:ed:fc:2a:0c:8b:de:6e:91:d9:92:7f:39:06:6b:06:7b:89:
         3b:05:15:a4:2a:c9:d4:5e:6b:9d:c8:f8:cd:9f:4d:62:8a:f9:
         5c:9b:19:38:97:03:ba:f8:05:04:0a:6a:cc:71:b6:95:af:77:
         5e:c2:98:39:8f:5a:15:34:59:7d:d7:43:a6:f0:e0:ec:10:9d:
         bb:b8:c4:24:3f:c7:32:38:2b:8d:31:c6:9f:27:be:26:fa:81:
         9b:df:a0:c8:28:a8:30:a3:52:f1:8a:df:86:cf:ff:33:00:80:
         44:70:f7:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex
QjBGODlCNkYwHhcNMjUwODA0MTUyMTE2WhcNMjUwODExMTUyMTE2WjAYMRYwFAYD
VQQDEw02ODkwY2ZlYy00NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+CKkZER0iUy+GFy7qboVA/6ukEgUFvJoCl0RrPM7pwyATh2vqCdcFfIVQi7
9ii9cdWnM99Y4HxNrh687Qgaw53DqrWju9dW51ZOH+8iGpCc0+WzzgiPKHrJ9obY
PmM6h3iHH0hho+HjX2/W1lmZ5//K/MQDn7GI3PLUzfC3Jp+BPZrH0RtcnDsnOwwA
azudlmbH3HLnxQLQ7zIgCOsdcv9ShwMB/Qiqrt6iWriVQPnyH0Yw1uR+SSdjIpYf
dbCgHZp2/xPWZQ+k9cbigYVU4oSxjp3HY1H6Jc9u5PzLmMbnq83dL2th1yqzepqn
tLtmgcNKwkJmLb8eIilQhfLDLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyNj0Hb
XCx6yC6LmW6fqRm2eCWxMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE
QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG
QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV8PqJMzSsoJs+iX5zPWjcHUb/MypeJXa+dbpnJJ2nKUeobtSklohD
ue7977PhRxZ9XUxulPlfDAANrv0phx+rOIG4Rh3XUPuTPlt/jfVVLd2qhktwNWA/
Bksq1wj/vq2rbJzg5mQ0R+G4VS3xE8DX/Ftc3vPrR3jj6XGgXq/AKFApq0uPJjvk
HOOzOsFTRodU7fwqDIvebpHZkn85BmsGe4k7BRWkKsnUXmudyPjNn01iivlcmxk4
lwO6+AUECmrMcbaVr3dewpg5j1oVNFl910Om8ODsEJ27uMQkP8cyOCuNMcafJ74m
+oGb36DIKKgwo1Lxit+Gz/8zAIBEcPd7
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:04 2025 by rpki-client