Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          Ucjnw14pVfE2FO7R5Uy0s08QqX77KYs0HSOojvPBakg=
Subject key identifier:   6D:0B:20:0F:92:66:5A:FD:71:1F:BE:23:46:79:1E:C9:99:A7:EA:8F
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          9C
Signing time:             Sat 09 Aug 2025 06:44:03 +0000
Manifest this update:     Sat 09 Aug 2025 06:44:03 +0000
Manifest next update:     Sat 16 Aug 2025 06:44:03 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: A9kBONtMpE6W2DTn44nJjzbFSeNvutYwt4+sqbLoVKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Aug  9 06:44:03 2025 GMT
            Not After : Aug 16 06:44:03 2025 GMT
        Subject: CN=6896ee33-a607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:91:29:90:99:2f:cc:09:92:c8:f2:91:34:
                    b2:4e:1b:74:90:4a:93:3a:42:61:5c:d4:39:8b:ef:
                    24:6a:e6:37:d1:32:4b:94:2a:cd:6f:8e:b9:84:c8:
                    b4:0e:bb:c5:af:24:2b:b2:92:a2:08:db:38:cb:fa:
                    64:e4:49:1b:fb:39:33:46:61:60:97:99:88:38:74:
                    5f:df:20:d3:90:c4:2f:61:96:aa:55:60:fa:7e:a8:
                    0c:e5:5b:51:73:2f:fe:7e:2f:aa:7d:c7:3b:eb:19:
                    61:7e:04:4c:01:87:62:c4:08:e0:c4:c6:fd:1c:47:
                    fe:d6:c4:bb:87:8b:bc:f9:a1:7d:a0:59:07:6c:9e:
                    ba:ee:e0:de:fd:49:27:0e:42:a6:f2:ee:9e:61:e6:
                    ee:a6:12:ff:21:ff:b9:ac:7a:33:2d:e6:fc:4e:cd:
                    dc:76:d0:43:22:89:6a:87:63:85:d2:35:ee:68:17:
                    7a:98:62:cc:03:ac:f5:d5:71:57:14:e3:00:2a:83:
                    c3:07:9f:a2:52:0c:3e:d0:a5:90:f0:99:b2:f4:71:
                    6d:c4:c1:af:12:3a:95:c6:a8:6a:c7:aa:2e:dd:c0:
                    46:0e:c9:61:9b:93:f9:43:5d:a8:12:69:9c:05:33:
                    b0:65:42:d6:65:ca:0a:ac:3a:40:16:04:ba:95:19:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:20:0F:92:66:5A:FD:71:1F:BE:23:46:79:1E:C9:99:A7:EA:8F
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:97:a3:1e:31:be:d3:f6:c8:0f:86:b2:e4:0f:d3:40:50:04:
         02:54:a4:79:69:7e:d2:4e:b9:50:ff:b0:22:d5:5b:6e:f2:b0:
         a7:8b:d7:9a:80:83:91:c9:f2:22:d0:54:39:98:64:f8:9d:36:
         73:8a:ed:53:38:07:d6:17:74:16:03:6e:5b:7b:f7:43:6f:ea:
         2f:b9:44:de:44:3f:d0:cb:37:1e:e5:81:44:ba:01:f1:d3:e8:
         d5:75:73:b2:18:ec:26:f8:75:bb:40:b6:6c:33:4e:1e:4e:e8:
         47:c5:19:be:61:92:0d:8e:ac:d8:cf:93:75:1c:69:92:fa:77:
         8e:d2:f3:28:52:dd:ca:26:71:f6:d6:03:ba:55:aa:c2:35:77:
         24:fc:9f:e0:50:14:50:6a:cf:b7:11:0a:e6:d3:fc:f1:fb:78:
         53:e2:c5:35:b7:93:ea:2b:50:ac:2d:8c:60:e3:b3:2e:da:d7:
         a4:42:8c:bd:ef:4a:37:55:0f:95:32:4f:37:61:f1:05:51:76:
         9a:97:20:03:87:71:9d:35:ee:f1:1f:f8:42:da:f3:16:7b:89:
         49:92:e0:a8:cc:ca:1b:31:af:56:77:2a:e7:37:ae:a4:db:a2:
         7c:3f:0a:c5:f7:d6:1c:cc:3e:f6:8a:26:85:5e:80:4b:74:93:
         7e:76:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:26 2025 by rpki-client