Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
File:                     sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json)
Hash identifier:          5NLGbe95DRUZY3gJOtl8ANb7EdrzoulZHxxQFZz6J1I=
Subject key identifier:   D6:D7:E0:32:49:D2:65:D3:4F:BB:EA:17:F1:1B:34:A7:6A:B1:36:65
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Certificate issuer:       /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
Manifest number:          0286
Signing time:             Mon 11 Aug 2025 01:55:00 +0000
Manifest this update:     Mon 11 Aug 2025 01:55:00 +0000
Manifest next update:     Mon 18 Aug 2025 01:55:00 +0000
Files and hashes:         1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: P8pxJgei5NLR748RuzSRyHM4onPC/5x8qipTYQqm5iA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
                          rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 01:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9327, serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
        Validity
            Not Before: Aug 11 01:55:00 2025 GMT
            Not After : Aug 18 01:55:00 2025 GMT
        Subject: CN=68994d74-380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:7a:bd:55:80:78:ab:43:a2:de:61:a2:a9:
                    a6:d2:b4:ee:12:2b:f7:cc:56:1f:0b:38:12:93:34:
                    de:b6:32:9f:40:3e:54:f2:d4:31:67:43:28:0c:cf:
                    d8:ba:e9:b7:e2:28:e1:60:c6:0a:26:d0:5a:f4:f5:
                    95:60:17:bf:c5:46:31:44:fd:11:a9:6b:31:ce:49:
                    a1:64:a0:01:99:81:f7:93:b4:1d:31:fd:24:59:d3:
                    6b:d2:30:34:63:9f:61:26:59:00:fb:9e:08:8b:04:
                    c5:5d:49:ba:37:a1:74:d2:0f:73:e0:94:89:31:4d:
                    7b:4d:2b:8c:c5:dd:23:7a:d0:3c:1c:3c:e7:63:07:
                    76:b5:0a:b5:c5:86:88:8f:34:1c:7a:a9:9a:0b:de:
                    82:5f:59:0a:22:70:b5:ec:75:d4:e1:60:6b:61:38:
                    e8:35:d9:45:56:4d:15:d2:2b:da:66:47:5a:37:4e:
                    ac:e2:af:8c:60:28:2b:8e:0f:a3:97:9c:04:61:14:
                    4f:05:49:6e:f7:bd:10:ac:5f:03:75:b6:76:b9:9b:
                    fa:72:c5:b9:30:06:6c:9e:e7:35:3f:ab:b2:09:d0:
                    a8:25:e8:fb:58:f3:37:89:a6:3c:38:b7:d9:97:7c:
                    13:ac:62:72:20:1a:55:f4:ae:f3:84:79:df:36:f1:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D7:E0:32:49:D2:65:D3:4F:BB:EA:17:F1:1B:34:A7:6A:B1:36:65
            X509v3 Authority Key Identifier:
                keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:49:98:44:6f:c2:75:ec:ef:bf:fb:46:56:ed:47:2a:6d:
         43:f7:7d:3c:42:3f:a3:b4:05:0c:2c:c4:0a:7e:d0:bd:bc:15:
         11:14:da:01:68:28:b3:72:f7:dc:3c:9b:34:10:19:af:03:c9:
         f8:e8:f3:74:bb:f7:54:d1:31:49:71:aa:f7:9f:e3:e9:e4:ab:
         96:c4:bc:1e:fb:10:94:d0:39:0f:f5:84:ed:53:7b:fd:2f:57:
         6b:a0:d3:a5:29:fb:b8:ca:7a:e5:eb:94:a5:04:b6:c1:9f:69:
         3f:f4:25:0b:9a:42:d2:66:c3:11:80:94:ce:5a:64:f4:36:2b:
         24:d1:93:17:78:54:aa:cd:79:75:b1:1a:b1:e6:90:1d:62:78:
         9c:c3:81:5c:90:ae:bb:cb:45:67:32:8c:0e:29:fe:c5:11:4d:
         84:65:d0:eb:07:55:ae:30:c0:2c:22:3e:c6:6f:0a:4e:2b:27:
         16:8a:54:08:a2:ab:0a:69:77:91:45:c8:f8:ab:1b:f9:28:82:
         06:66:ed:ed:bf:04:4f:86:98:b4:94:2a:ec:36:ab:06:72:e6:
         27:a7:b4:16:bd:d6:49:17:2f:cf:1b:83:07:16:7f:ea:05:66:
         b9:75:5d:ee:bb:cc:94:a7:b6:90:8c:f7:89:ea:a0:4a:15:d2:
         25:33:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:30:21 2025 by rpki-client