Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File:                     7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier:          wA63SOmSvUclAjXwWNiASeNEaiZjKaCaLE6h7EA3ap8=
Subject key identifier:   73:F2:10:C1:61:D3:17:58:09:C6:90:A2:60:41:C2:0E:8C:02:D9:7B
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer:       /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial:       34A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number:          34A4
Signing time:             Tue 12 Aug 2025 15:11:00 +0000
Manifest this update:     Tue 12 Aug 2025 15:10:59 +0000
Manifest next update:     Tue 19 Aug 2025 15:10:59 +0000
Files and hashes:         1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: VQNOZ5+PthQpeQ7S4iQgkvd9c/GHD/gf09KTYGrjx9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
                          rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 15:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13479 (0x34a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
        Validity
            Not Before: Aug 12 15:10:59 2025 GMT
            Not After : Aug 19 15:10:59 2025 GMT
        Subject: CN=689b5983-395c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:8f:97:23:96:85:0f:53:f7:77:c7:e5:76:
                    0a:70:f2:62:0b:be:f3:d0:ef:62:69:d7:11:54:9d:
                    4f:f0:1e:72:c0:d2:71:52:c1:5c:a9:24:86:d3:53:
                    15:58:6d:7b:b8:66:ae:8e:9f:f7:3b:4d:34:e9:b3:
                    29:17:8c:c9:61:9f:2c:bd:60:df:be:f0:87:7a:13:
                    a3:39:3a:2e:6c:c7:cc:7f:b5:27:de:bb:de:13:37:
                    f6:38:83:8f:1d:5e:f9:40:cc:f3:0f:e6:e5:67:c8:
                    b0:52:00:7d:58:d9:96:27:12:cf:3d:78:92:a7:18:
                    1f:97:1f:a5:8c:6e:a0:ab:74:3c:5a:04:52:c3:21:
                    29:fc:c7:f6:82:9e:f9:d8:e0:ab:3c:c1:66:31:9a:
                    7f:7a:d6:8f:93:d2:4f:9a:08:cf:2c:de:8f:4e:ff:
                    c3:69:41:0b:e5:7a:50:c3:0f:af:35:cb:c1:6b:bd:
                    56:db:69:8c:b0:67:02:88:57:a6:6b:a4:11:1a:aa:
                    f9:60:a1:0f:f1:ef:1f:f9:d9:f1:1a:92:69:d7:34:
                    22:f3:44:de:bd:9a:b4:7c:84:b0:3d:d9:2b:8f:33:
                    f0:16:11:34:bb:60:79:ab:6a:1b:35:6f:d3:bb:30:
                    a5:c3:aa:0c:3a:d6:35:58:5f:df:f0:a0:12:86:fa:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:10:C1:61:D3:17:58:09:C6:90:A2:60:41:C2:0E:8C:02:D9:7B
            X509v3 Authority Key Identifier:
                keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a9:cb:82:47:75:4d:46:49:0b:87:61:6b:3a:dc:59:78:72:
         d9:e9:ad:64:70:e1:46:e7:20:6b:bd:70:7e:ac:92:c1:5c:75:
         aa:68:3e:27:d3:22:67:32:c0:6f:97:44:c8:ad:84:74:e5:aa:
         32:f0:07:9d:23:ad:60:f2:a8:12:c1:cf:88:fb:82:19:e1:9b:
         55:33:5c:21:61:70:13:cd:80:0d:63:1e:33:59:dc:65:0b:c6:
         58:d6:b2:7d:18:68:6e:ca:f5:3a:e8:b1:8a:6d:f3:3c:c6:ea:
         1d:37:d3:4c:5a:69:5a:f9:50:48:d2:8f:36:8a:75:e7:02:39:
         a5:4d:74:41:b7:a0:97:c9:71:3d:eb:7f:9f:a6:5e:9a:05:52:
         3b:ea:2b:9f:5f:d1:9e:a2:58:66:29:21:56:93:ef:c9:fd:f5:
         48:7d:b5:90:b9:e5:7b:fd:1a:a7:01:f2:9a:6a:c9:68:d0:21:
         cc:ed:1c:35:1b:e6:80:ec:12:6b:f3:98:b5:56:67:51:6f:ff:
         33:a9:49:6d:33:bd:48:a7:92:a5:8a:08:9d:65:1e:d0:2d:b8:
         64:b3:ce:96:c1:cc:f8:9f:e4:57:37:38:ca:6d:0c:f3:35:14:
         20:b7:85:3a:63:ea:36:b6:c4:df:4d:f4:e5:1e:5f:d6:4c:c3:
         68:08:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:06:35 2025 by rpki-client