Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File:                     dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier:          kLXnhjnRFYJ0C0qqBlOshO+dhpjU/1eLY6eaonI72NE=
Subject key identifier:   B7:CE:72:7F:3A:95:67:FF:59:C2:63:A3:21:73:8A:50:EC:20:E2:F6
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer:       /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number:          08F3
Signing time:             Fri 08 Aug 2025 22:05:51 +0000
Manifest this update:     Fri 08 Aug 2025 22:05:51 +0000
Manifest next update:     Fri 15 Aug 2025 22:05:50 +0000
Files and hashes:         1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: 3GWpd/QbQTF2NofUMihsHXBFz8wswZf/3JdEl2qjBSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
        Validity
            Not Before: Aug  8 22:05:51 2025 GMT
            Not After : Aug 15 22:05:50 2025 GMT
        Subject: CN=689674bf-a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b7:ce:35:b0:20:cd:ba:6e:5f:b7:33:80:a3:
                    32:80:04:42:6d:2a:59:c6:f6:6c:61:00:0b:f8:4e:
                    fb:ca:db:de:59:ea:9b:ea:4f:2e:a2:89:88:53:6c:
                    02:ad:27:b6:30:c5:78:23:b9:d0:d0:a0:d4:d6:7a:
                    10:bb:64:91:48:81:f5:71:b3:30:f2:b1:13:be:35:
                    12:e3:3b:ee:e6:13:1a:5f:5f:aa:49:cd:37:65:09:
                    c5:fd:16:21:3f:6a:29:d1:16:bd:7b:b8:43:b8:43:
                    a2:6d:e9:22:df:43:2f:58:c3:df:9f:8a:18:0f:1b:
                    1f:d4:c8:9d:2c:80:4d:30:8f:71:91:3c:1f:b4:01:
                    78:5a:d0:ae:9c:f2:7c:45:a1:cc:92:7e:71:16:b8:
                    c7:8b:01:c2:8b:c5:36:b8:6a:35:19:44:ff:d5:ef:
                    97:8f:0f:6a:a2:5f:c3:4c:5d:a2:24:45:ca:99:74:
                    cb:d9:8a:56:c4:fc:1f:ff:64:02:de:91:45:95:6a:
                    a4:8b:bf:c2:5c:14:d9:43:fc:45:91:61:31:53:c5:
                    bf:7d:e0:c7:b6:d1:1b:98:74:d4:58:8e:3a:4f:d5:
                    ca:89:71:a7:e6:c3:c8:c3:ad:b8:ec:69:a3:8a:82:
                    88:b3:d0:be:ac:00:aa:7a:50:9a:c4:96:b1:d6:ad:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:72:7F:3A:95:67:FF:59:C2:63:A3:21:73:8A:50:EC:20:E2:F6
            X509v3 Authority Key Identifier:
                keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:5b:3a:88:9c:1c:d0:59:61:db:55:c1:10:9e:6f:72:ce:
         f3:5d:fa:06:9f:53:97:74:d2:38:8d:6e:00:a3:94:0b:fb:82:
         09:ec:d3:f8:8a:55:a0:b9:59:bf:74:79:a0:b2:85:0c:50:53:
         c4:79:15:7d:8e:f7:04:ff:32:8a:f2:81:fe:92:a8:6d:79:a8:
         9d:73:b8:6d:2a:b7:95:2c:36:20:b9:bf:29:f7:86:36:d5:6a:
         65:2b:2b:64:8a:ca:5a:e1:71:e3:3b:92:96:de:51:f2:96:14:
         84:fd:be:94:5a:90:09:85:36:70:1a:a5:bd:f3:40:51:fb:4a:
         d9:b2:f9:84:72:52:15:76:24:bb:ba:c0:9f:3d:a7:bd:fb:a4:
         63:a2:43:5a:e9:8e:e6:1c:e3:de:3a:63:62:91:42:cd:19:90:
         35:6d:e6:96:a1:b7:aa:3c:00:12:73:98:ba:99:c2:41:32:2e:
         2e:0c:f4:7d:13:b9:58:a9:08:48:91:95:d0:71:1b:a1:75:6d:
         04:cc:6c:02:a9:06:42:fe:65:dd:60:0f:98:f9:98:9a:4c:41:
         fb:e3:aa:ca:0f:cf:3c:7a:da:85:d9:2e:d1:f6:62:40:9f:99:
         ef:f7:e9:b4:b6:ed:4e:56:ec:62:60:3f:39:77:24:02:00:b5:
         9d:60:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:54 2025 by rpki-client