Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
File:                     mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json)
Hash identifier:          5V83S1TtO+x4uRGqmlWbDO+pJxc2GgVpMYC7Z/XrnvY=
Subject key identifier:   4D:61:AA:BD:B8:18:5D:8A:89:F2:45:82:31:48:92:D1:CC:52:B8:0E
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Certificate issuer:       /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
Manifest number:          6D
Signing time:             Tue 05 Aug 2025 07:28:45 +0000
Manifest this update:     Tue 05 Aug 2025 07:28:44 +0000
Manifest next update:     Tue 12 Aug 2025 07:28:44 +0000
Files and hashes:         1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: YR/2hWK5Ro+tDml8P3pqtEZ7xU2xF26tvFsJtMfWwPg=)
                          2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: GSX0pyaiwOS5Abzctg8JuUZl0TI6LV3O2e6/wEsG5kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
        Validity
            Not Before: Aug  5 07:28:44 2025 GMT
            Not After : Aug 12 07:28:44 2025 GMT
        Subject: CN=6891b2ac-f258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:02:9b:ac:b1:c8:a6:32:99:83:88:44:60:
                    00:4e:70:8d:5a:b9:7c:dd:8a:65:7b:92:c3:27:6c:
                    30:8a:6c:2c:6b:4d:d3:76:eb:b5:af:96:e0:db:7a:
                    9f:c5:20:f2:77:4c:65:8a:f0:9e:a6:e9:ad:6c:e8:
                    b6:c2:c8:00:38:1f:a9:e1:45:e2:ab:4f:5d:ac:1e:
                    6b:e8:2c:54:c1:a1:da:21:13:fa:61:02:09:8a:91:
                    f0:e5:8b:3b:82:34:05:5e:ec:b7:97:e7:f6:10:3a:
                    b1:1b:d0:0b:5b:6f:63:77:94:59:ae:37:d7:7d:2f:
                    34:e5:fe:14:28:eb:ca:5a:eb:06:50:fe:ae:34:b4:
                    4b:d3:d8:56:8b:c0:c0:08:74:28:08:41:1f:cc:2e:
                    d1:b9:cd:93:e0:d5:a8:6b:87:ae:d1:1f:4c:4f:14:
                    03:1a:dc:f2:25:82:3c:82:83:68:02:c3:e2:8f:c5:
                    b7:cf:71:5c:19:0b:0f:49:71:16:5f:a9:ef:fd:18:
                    bc:3d:e5:87:4e:a5:16:c5:aa:07:a6:9b:3c:04:62:
                    ae:f1:80:08:a2:b2:da:98:b0:83:d4:15:f7:e7:52:
                    f5:cc:f2:e6:96:4c:48:a9:41:55:c1:fb:4c:a4:e7:
                    32:fd:cc:7e:53:19:05:48:70:a1:6a:70:c2:55:d8:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:61:AA:BD:B8:18:5D:8A:89:F2:45:82:31:48:92:D1:CC:52:B8:0E
            X509v3 Authority Key Identifier:
                keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:4c:4b:72:ff:2c:1b:1d:d3:14:ee:98:44:21:a9:a4:1e:
         eb:14:64:cd:85:db:8a:ae:dc:bb:d2:55:84:42:ae:31:73:ef:
         39:66:b2:4e:70:84:d2:12:7a:2a:3e:69:4b:40:34:08:35:97:
         77:fb:5b:e5:25:64:4d:fd:9e:87:23:7b:f3:34:95:0b:45:2b:
         b2:35:20:ad:bf:1d:d1:54:a9:bb:c1:65:d2:d3:3e:f8:02:27:
         8c:7d:ad:b8:bf:cf:fe:9b:7d:f9:be:f9:94:18:03:b6:35:4d:
         5f:79:8b:1c:c6:c2:ea:e2:d5:ce:b2:84:57:39:7f:1a:4d:73:
         f1:76:36:07:2d:fd:1b:d1:62:82:d9:34:97:44:c9:12:3f:08:
         40:25:f6:41:c8:a4:09:ed:20:be:13:84:cc:5c:17:53:1b:bb:
         b3:b0:60:de:f5:38:b9:03:c3:4e:83:5b:75:3c:84:a8:36:ff:
         14:b4:de:60:8e:26:38:e7:70:67:e8:94:f3:cf:c3:9b:bd:37:
         b0:67:8b:d1:13:77:ef:12:5f:7c:91:01:2a:11:f3:34:26:e5:
         96:33:9a:2a:3d:ee:15:f3:64:b3:d4:ab:06:59:9c:80:ec:65:
         15:28:c9:c1:13:e4:20:0c:6d:7a:88:a3:f2:c2:89:05:ad:f4:
         0e:92:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:53 2025 by rpki-client