Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
File:                     9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json)
Hash identifier:          c7p3iRK9tJZDbMgVc3WphLRFrlG3hUnwvBHv0CVhBYA=
Subject key identifier:   59:41:C3:DF:78:27:22:66:33:B3:03:43:34:B6:9B:4E:05:61:AD:B8
Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F
Certificate issuer:       /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
Manifest number:          01DD
Signing time:             Wed 13 Aug 2025 03:12:25 +0000
Manifest this update:     Wed 13 Aug 2025 03:12:25 +0000
Manifest next update:     Wed 20 Aug 2025 03:12:25 +0000
Files and hashes:         1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: PAChFsXVkJg5igx2sR0SYCn0ZMrh1un1Ps6D8UirUL0=)
                          2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 03:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
        Validity
            Not Before: Aug 13 03:12:25 2025 GMT
            Not After : Aug 20 03:12:25 2025 GMT
        Subject: CN=689c0299-1d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:f1:42:d5:c3:83:71:00:c0:7d:ee:45:ac:
                    78:94:e7:31:6d:44:e4:85:e8:19:29:23:d8:51:28:
                    2b:00:bd:04:8d:53:fc:b8:78:3b:cc:3d:a4:54:3e:
                    84:38:5a:c7:e4:10:61:f5:a9:80:16:60:65:16:f8:
                    e9:17:da:9b:05:a7:64:d1:d6:83:c2:b2:67:67:f9:
                    d7:e7:dd:98:a2:6e:7a:17:15:18:af:19:b5:c9:6d:
                    ff:e8:0b:c5:1c:e2:44:29:87:80:66:24:f7:a1:85:
                    81:79:3c:f8:4d:17:70:67:ab:ec:80:ab:ec:91:a3:
                    65:98:19:d8:a6:d6:c6:fd:71:3e:c9:49:7f:c9:30:
                    e7:69:f7:8e:02:86:e7:e2:be:86:5a:ff:ad:14:89:
                    db:23:8e:a9:2b:59:72:62:ae:90:57:71:27:04:c2:
                    7c:32:d1:b9:75:4c:fb:bb:24:ac:56:5c:03:39:55:
                    25:e6:c3:2b:34:0b:11:03:57:82:47:fb:26:fb:d4:
                    c0:05:80:eb:74:d7:93:2d:56:5b:75:40:8c:98:65:
                    5b:b0:9e:69:ec:b4:1e:81:dc:23:ae:14:80:ff:da:
                    b4:dd:e3:8e:e9:84:28:f1:f8:1c:a5:9d:d0:d2:2d:
                    9b:e0:24:35:37:bd:be:fa:a2:20:5b:7d:0c:28:a5:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:41:C3:DF:78:27:22:66:33:B3:03:43:34:B6:9B:4E:05:61:AD:B8
            X509v3 Authority Key Identifier:
                keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:39:d3:24:ad:2f:81:7d:28:b6:9e:9f:e1:b3:82:d8:ef:
         1b:fb:4f:89:94:5e:16:bc:7c:e5:9e:df:3d:df:4b:7e:22:76:
         7b:8b:8d:50:e3:3e:a9:83:65:8e:cb:95:82:8b:ee:83:7c:9b:
         64:2a:ce:c2:e6:a5:73:ec:c7:35:8e:46:52:96:32:4e:3e:16:
         60:42:a8:b6:2f:84:a9:14:0a:30:9a:1f:2c:3c:c4:2a:10:26:
         3a:57:89:ec:b8:0f:92:90:86:6e:f1:ba:ce:16:dc:07:1f:48:
         99:c1:4f:d8:67:b9:1c:16:b3:73:c5:95:2f:6f:77:6e:16:c8:
         fc:a8:e8:74:4e:42:4b:37:bb:ca:2c:4e:89:37:71:f0:a0:67:
         98:12:27:9f:79:b3:44:ac:65:4a:59:ed:9f:aa:3b:a9:34:54:
         5f:87:5f:fd:4c:b7:b5:60:be:08:57:40:ce:48:36:71:81:07:
         7a:5f:19:95:51:cd:37:3b:72:a3:25:89:f9:da:e2:fa:28:e2:
         b2:ec:e6:77:60:49:b5:96:83:46:d2:e8:c0:46:68:0b:c7:30:
         b2:ad:41:85:aa:d7:3d:52:e8:e5:4d:09:d1:e1:f0:fe:d6:1c:
         e9:75:e9:4a:0d:60:51:56:82:89:60:1d:ff:3c:d5:0d:9d:a9:
         c7:2d:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:40:48 2025 by rpki-client