Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          KC5GzRDFwb+LzeA6xb+zuoFPG5XtYoueGMy7egSK8Co=
Subject key identifier:   44:F5:E8:B3:AF:F0:AA:FE:22:41:54:15:71:D7:99:B2:0B:09:CF:38
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          0152
Signing time:             Sat 09 Aug 2025 04:33:29 +0000
Manifest this update:     Sat 09 Aug 2025 04:33:28 +0000
Manifest next update:     Sat 16 Aug 2025 04:33:28 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: 5Mv12lDS+CGmbYJhH8NKxmPPmvhJ/IqeX7Ckyb/KfNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Aug  9 04:33:28 2025 GMT
            Not After : Aug 16 04:33:28 2025 GMT
        Subject: CN=6896cf99-9f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:db:f0:60:b4:f8:4a:f3:e1:bb:11:0b:b0:
                    96:af:31:90:9e:87:31:07:7b:0c:48:b1:b0:ba:e8:
                    55:9b:07:8a:8d:11:7b:33:d6:9f:ac:e7:9f:e9:1b:
                    38:cb:58:16:c0:7b:2b:78:7b:43:7c:3f:4b:de:72:
                    29:c1:45:de:65:e5:07:dc:71:e8:ab:29:0e:cd:85:
                    31:3b:0e:62:19:48:e8:91:53:c4:df:0d:79:4b:ae:
                    76:e1:b8:bc:10:00:ca:ec:44:4b:84:fa:da:56:2a:
                    1c:79:bc:0f:b5:bf:7e:1e:f5:55:5a:3e:cd:65:a7:
                    9e:0d:af:5f:24:16:5a:bc:26:4e:dd:3e:71:6c:51:
                    ac:63:27:e6:eb:0a:88:4d:37:87:54:86:04:88:07:
                    30:2d:18:ac:4c:22:eb:92:cd:3c:5e:6b:05:18:37:
                    94:15:69:f7:85:54:7d:99:db:4b:9d:e3:d8:a9:d3:
                    46:b2:10:69:63:0e:e5:26:b9:e4:df:47:3e:9d:fe:
                    4b:1d:29:fa:dc:32:33:c1:3f:11:2a:77:65:0c:63:
                    3e:5f:41:a7:ef:03:55:46:41:9c:c9:d3:37:94:7b:
                    b2:e0:49:c9:1a:3c:4d:a8:2f:6d:cb:fa:c8:0f:8e:
                    6e:d7:5f:e2:82:85:df:f9:67:ef:87:44:86:a1:c4:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:E8:B3:AF:F0:AA:FE:22:41:54:15:71:D7:99:B2:0B:09:CF:38
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:6f:90:88:19:1b:4e:2a:bb:4d:24:64:0c:7f:49:84:5d:
         55:2b:c6:f4:2d:3a:59:c4:32:9a:31:f9:47:42:60:79:bc:78:
         4a:61:b2:ac:55:90:5d:99:cb:96:76:14:c0:bf:cb:dd:47:8c:
         47:5a:10:60:64:99:4f:15:e3:20:76:a4:53:7c:d9:d1:61:cd:
         39:2c:dd:2a:dc:25:ee:13:d9:99:54:09:39:ab:d6:a8:49:d2:
         83:b7:82:17:ea:ad:7c:eb:22:91:01:c1:59:95:ee:7e:8f:f4:
         50:c5:6e:68:8f:82:9d:11:6f:b1:f9:76:63:73:d8:53:b5:73:
         8b:f9:f7:a9:36:85:f5:4e:5c:88:63:ee:6e:c5:55:34:98:9b:
         14:ea:19:3e:46:aa:4e:04:a5:07:db:52:be:4a:f2:f2:ce:0f:
         e9:b3:2d:2f:b7:d8:07:30:f3:c0:35:44:91:cf:f1:2b:c6:6e:
         e9:bc:5c:20:ec:b8:af:70:8d:cd:4e:d5:b7:cc:56:69:50:27:
         70:16:12:f3:d2:6e:12:b0:1b:b7:d5:a6:92:88:75:76:c1:78:
         bd:da:1c:8a:be:92:b8:90:23:fd:e5:35:e1:f5:89:14:b4:17:
         cf:2b:c6:f4:7c:2f:4e:65:cc:c0:fd:ca:37:8f:91:6a:cf:af:
         1e:6d:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:39 2025 by rpki-client