Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          mteWXMJJcSRVD2cDQSDXyTT4Ih5Y10iIE3aHbedad+M=
Subject key identifier:   F3:99:1E:C5:F5:55:76:65:11:CB:9F:AD:87:6C:29:E7:C6:88:22:3D
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          0157
Signing time:             Tue 05 Aug 2025 04:31:46 +0000
Manifest this update:     Tue 05 Aug 2025 04:31:46 +0000
Manifest next update:     Tue 12 Aug 2025 04:31:46 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: 8I6UkOG9ITie9IvCjnAapcy6ePvdZLRgWTraXT5+E+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Aug  5 04:31:46 2025 GMT
            Not After : Aug 12 04:31:46 2025 GMT
        Subject: CN=68918932-fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:05:31:8c:f1:f7:33:0e:8a:df:fc:35:9e:
                    42:af:5a:d3:6e:ea:2d:9e:02:ab:36:9f:ca:d5:41:
                    53:cb:c7:36:ea:4d:59:57:82:d5:03:d3:05:6c:53:
                    bf:b2:32:2a:6a:8d:3d:e6:8f:fc:88:83:57:9d:ba:
                    e3:23:c9:01:d8:0a:a9:34:f3:e5:5c:89:8f:6f:0f:
                    68:02:36:74:f9:6b:93:49:57:1d:df:ef:59:97:ca:
                    a6:65:cb:cf:45:69:ea:42:02:bb:d8:47:18:6b:3b:
                    a3:e9:75:9b:19:b6:aa:39:d9:11:a0:0e:61:da:f5:
                    e7:3b:39:b8:29:4c:57:44:0c:a9:17:34:00:6d:40:
                    78:33:b8:b9:ea:e5:c5:6f:ec:1a:de:38:72:d3:f7:
                    2b:00:c6:93:22:0c:90:85:a8:b5:4a:1c:12:73:15:
                    41:79:02:d2:5b:18:e5:a2:1b:58:3a:cb:4f:02:73:
                    ac:a8:42:27:b8:02:3f:b0:bf:25:85:c7:74:21:46:
                    bb:ea:f3:27:ae:3b:0e:9b:08:5f:e6:42:55:c8:ae:
                    53:27:eb:e0:9e:e8:7a:b5:2c:30:d5:25:07:90:df:
                    72:46:f7:c0:fb:f9:76:d3:fc:ce:8e:d8:d1:61:a8:
                    1f:23:d9:2c:1b:91:0a:3d:3e:99:d5:ba:87:31:ad:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:99:1E:C5:F5:55:76:65:11:CB:9F:AD:87:6C:29:E7:C6:88:22:3D
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:08:e8:88:a5:50:5e:a6:51:26:19:71:b2:58:ef:a9:b6:16:
         13:1b:c2:4f:fc:06:50:ec:4b:47:6e:b5:3e:5c:79:54:34:e7:
         ab:86:b4:e5:56:ed:ab:76:21:09:ac:36:65:f0:02:9b:28:43:
         e3:de:21:1a:f6:1c:bf:24:8c:17:f7:87:b1:ce:33:74:43:f4:
         4b:30:1e:fc:e0:85:75:26:73:aa:80:bb:b4:7e:59:0c:ef:8b:
         f0:de:60:2d:5b:a8:c9:e6:9c:3b:62:69:30:b3:63:e0:e9:1e:
         ea:02:e3:b7:8c:e4:06:f3:d5:9a:aa:c6:65:1b:4a:24:ff:6c:
         60:a2:71:7a:30:9c:67:33:cc:88:b8:2f:3c:94:e6:10:52:0a:
         28:2d:60:05:b5:51:12:1a:05:97:aa:b9:ef:6f:53:1b:9c:d5:
         b2:3c:e4:dd:e2:55:83:0d:7e:24:4b:32:30:01:bd:61:b1:96:
         1d:65:fa:3b:8e:fb:f9:73:a1:91:10:05:ad:65:43:6f:5c:a5:
         23:ad:82:52:cd:af:e5:60:3d:9f:46:05:f8:01:f3:a1:d1:87:
         c2:c4:37:97:65:e6:c4:0e:0a:60:f7:ca:70:7e:3e:90:3c:32:
         41:f1:6a:6f:ed:c3:b1:d1:1d:02:fb:29:9a:93:81:41:74:39:
         82:db:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:29 2025 by rpki-client