Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          uJrshZ5K4QjrN6Ybl0b/x2dxevj0g3eERPQxxqXxwwA=
Subject key identifier:   34:36:AE:B2:68:C2:0C:50:E5:02:D1:E4:CD:A9:F9:2F:5A:C3:BC:71
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          C9
Signing time:             Wed 13 Aug 2025 06:21:49 +0000
Manifest this update:     Wed 13 Aug 2025 06:21:48 +0000
Manifest next update:     Wed 20 Aug 2025 06:21:48 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: aM2BYYyV525375+tcMsaJSCzChasqZG3cytPAAwBN4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Aug 13 06:21:48 2025 GMT
            Not After : Aug 20 06:21:48 2025 GMT
        Subject: CN=689c2efc-53a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:2f:b9:18:c0:c7:e5:f0:de:bc:9e:96:cc:
                    06:a1:c0:e7:f4:85:bf:a8:ca:06:c2:7b:86:79:34:
                    73:6c:8f:8d:43:09:ae:33:c0:55:61:ea:e5:76:29:
                    3b:e9:7f:95:a4:87:bb:01:a9:64:b6:f6:6b:ad:51:
                    32:b8:04:71:3b:64:53:58:a8:9f:2a:3c:dd:63:f0:
                    8e:f2:d3:b4:50:cf:18:39:80:f3:c5:b5:d6:f1:b9:
                    cd:c0:fe:30:6a:76:1a:a5:0d:de:e8:79:77:df:ac:
                    fa:42:b9:4a:2b:a2:4a:6a:de:1d:0b:7d:5b:0f:37:
                    95:4e:48:97:5b:9f:30:0d:a0:cb:a7:ca:a7:81:7d:
                    fe:7e:ed:53:6d:22:68:13:63:dc:01:76:c0:9b:53:
                    5e:0f:aa:01:9a:1d:bf:1c:14:8b:92:37:b3:16:d6:
                    59:f8:63:32:11:b9:71:13:92:22:0b:9f:23:74:b2:
                    7b:a6:f2:cb:cd:51:c3:60:0a:63:76:e9:76:77:f0:
                    e6:96:99:d0:da:85:3d:3a:64:e6:d3:c9:80:b2:03:
                    ca:69:42:04:84:df:21:77:62:51:28:49:18:a1:96:
                    21:56:90:98:fe:d4:77:e2:41:1a:1c:46:00:b9:01:
                    00:e6:58:87:7e:3a:04:11:fb:09:e8:62:73:20:db:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:AE:B2:68:C2:0C:50:E5:02:D1:E4:CD:A9:F9:2F:5A:C3:BC:71
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:ab:61:28:0d:4e:c1:e5:0a:50:b1:24:e3:0d:2b:19:f0:
         53:d0:86:41:f4:80:9f:cf:b3:c9:84:7d:bf:91:3a:4c:fd:19:
         17:cd:0a:29:7a:54:e9:dd:5c:cb:b3:29:6e:4e:21:1f:02:25:
         c2:24:24:e6:9f:7a:36:df:f7:4e:bd:6e:1d:4b:fc:61:3e:26:
         25:f0:d9:27:f7:29:0d:ec:6e:7a:97:28:41:17:c0:13:8b:9d:
         5a:07:94:e7:35:35:c9:6c:ef:1e:55:a8:b4:68:eb:ee:52:c9:
         ed:a3:bd:a1:3d:dd:54:47:2b:da:63:28:b6:f8:41:da:fd:12:
         a1:1b:6a:3b:1a:de:b4:1d:a5:f8:d8:3d:60:ef:67:bb:62:d9:
         c6:8d:94:f8:ba:25:a1:84:34:11:b6:40:fd:68:f6:0b:f9:e0:
         01:a1:34:06:c4:87:47:8e:16:c5:79:8c:07:d2:f7:5a:62:5c:
         d1:d5:12:4d:ba:3e:1c:a9:64:ed:8e:a8:94:79:ff:20:19:1e:
         e0:2a:de:c0:4c:50:c8:79:03:42:8f:1c:de:47:7d:01:26:63:
         7f:ec:c8:03:1e:7d:bd:bd:12:3c:34:08:51:6e:01:4c:4a:8b:
         c5:9a:de:eb:7a:1f:43:72:1d:2b:cd:05:9f:f0:fb:74:b2:59:
         ad:95:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:34 2025 by rpki-client