Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
File:                     ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json)
Hash identifier:          ItkcDAUbymsF4LTKuEGs+W33qOBC7rhyVcffuu9r34U=
Subject key identifier:   9B:54:E2:E3:6C:11:A9:D0:70:98:AC:D7:41:72:78:D2:C0:B5:3B:BC
Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC
Certificate issuer:       /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
Manifest number:          01E0
Signing time:             Sat 09 Aug 2025 03:17:53 +0000
Manifest this update:     Sat 09 Aug 2025 03:17:53 +0000
Manifest next update:     Sat 16 Aug 2025 03:17:53 +0000
Files and hashes:         1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: jrMm1EsCPOTyelpWUXzqfgjnkKWI0IYkCeALw1YtQQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC
        Validity
            Not Before: Aug  9 03:17:53 2025 GMT
            Not After : Aug 16 03:17:53 2025 GMT
        Subject: CN=6896bde1-7069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:92:08:6f:c6:0a:76:18:ef:4d:7b:32:e0:
                    eb:eb:e5:03:d0:0e:6d:89:32:3f:09:d0:3e:ea:a2:
                    05:8d:98:b1:70:54:a2:9d:16:8d:71:e9:7b:a0:f8:
                    c9:93:e4:3c:19:f2:91:50:2c:71:a6:99:33:b9:b3:
                    61:3e:67:17:a3:fd:91:8e:db:0e:42:b8:91:ff:9a:
                    a2:b0:da:7d:ac:9c:7b:70:d2:87:5b:8b:23:e4:90:
                    60:87:78:36:86:9c:ff:80:01:49:6e:0d:0a:6a:12:
                    a1:a9:90:c6:e6:22:0f:e5:cf:9f:13:ed:0f:9b:dc:
                    15:98:ad:a6:73:5a:de:f7:44:80:e1:cd:f6:ce:03:
                    68:63:ec:d5:2f:36:43:02:fa:2b:8d:5f:60:70:b5:
                    2f:e0:b8:cc:c4:43:7b:17:73:70:06:29:8f:f1:63:
                    27:ef:4e:df:ce:7a:a2:e4:a0:6c:70:45:d5:92:be:
                    49:10:c5:35:50:00:10:5d:0a:fe:53:b6:a2:98:fe:
                    81:5e:80:68:89:3c:8a:c8:b9:1b:04:7c:a8:46:bd:
                    d1:e2:62:c3:ca:c2:24:f4:6b:56:42:2e:8c:05:ef:
                    73:68:e2:59:dd:91:55:4d:f3:f9:1c:fc:da:21:a5:
                    5a:36:98:6f:60:3d:fa:c5:76:ed:e0:87:42:1e:41:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:54:E2:E3:6C:11:A9:D0:70:98:AC:D7:41:72:78:D2:C0:B5:3B:BC
            X509v3 Authority Key Identifier:
                keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:02:18:e7:b4:fd:40:21:8d:6c:ef:9e:f0:fc:fc:33:ce:
         57:b7:1f:f6:0f:46:fe:a7:72:42:2b:fd:8e:95:c6:b9:71:47:
         b3:4d:48:f3:3d:5a:2f:ba:03:0f:e2:8b:09:6e:9e:c8:fa:57:
         fd:6b:10:1b:c3:72:65:99:b1:40:4e:7e:30:64:cc:71:61:fb:
         22:3f:3c:55:60:91:e4:da:55:b9:e6:90:6e:90:6f:0c:8e:2e:
         2b:d2:e3:0b:0d:3d:4b:40:e4:a7:4b:94:c0:30:2f:33:4a:97:
         43:ab:55:5c:63:e3:dd:0c:35:a6:a9:84:41:8c:c5:28:fa:38:
         1b:a4:c3:75:9b:fe:92:78:e5:1e:86:5d:97:56:cd:c0:58:40:
         4b:3d:e3:cc:ef:46:9d:5b:d0:c8:c2:71:6e:61:82:3c:4b:5d:
         82:8b:de:93:01:c4:e7:1e:e4:49:07:12:34:eb:99:29:ad:a7:
         09:99:56:26:f8:02:7c:02:9c:11:32:0e:1d:c9:25:ca:5b:d9:
         8d:68:1f:9f:52:63:a4:4d:32:ba:c9:08:e0:01:78:9b:44:8e:
         34:cf:84:70:55:d4:48:73:2f:1c:20:11:f9:e2:67:ad:f3:6d:
         c3:63:da:43:84:dc:6e:40:81:4d:0b:c6:1b:ca:29:d4:55:c6:
         ae:91:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:57 2025 by rpki-client