Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          nHbkpA6cqlZL8Tsm4VMwRlUkYEW46j37IC6sfe0mEeQ=
Subject key identifier:   8B:19:AB:6D:25:65:18:B3:C5:7E:B6:1C:61:9E:58:CF:36:AC:AA:6F
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1A7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1A7E
Signing time:             Fri 08 Aug 2025 16:28:45 +0000
Manifest this update:     Fri 08 Aug 2025 16:28:44 +0000
Manifest next update:     Fri 15 Aug 2025 16:28:44 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: Kbfc2mQWKkLoBipSQnxdRXvBGsQrc1SrbAUyeE8OO6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6782 (0x1a7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Aug  8 16:28:44 2025 GMT
            Not After : Aug 15 16:28:44 2025 GMT
        Subject: CN=689625bc-a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:33:75:03:ef:e1:30:b8:23:97:32:5a:b4:
                    88:c4:e0:1f:49:4a:72:f1:0b:5e:25:b8:2e:63:f1:
                    c1:96:95:d9:9e:ff:b5:13:73:69:30:8d:e6:17:d3:
                    79:8f:fe:15:07:db:30:a3:8e:9a:5f:f3:21:da:b7:
                    54:ff:38:d8:75:02:c6:d5:12:a0:a3:8c:7a:59:4c:
                    11:9d:e9:df:8d:5c:f8:0d:ce:83:ad:d3:dc:37:35:
                    06:e1:b7:46:e4:6a:5d:1d:e3:cf:00:c1:13:65:4e:
                    4f:9b:dc:3c:32:71:4c:e2:a3:fe:f0:bc:c1:75:be:
                    28:55:b3:fd:cf:b0:5c:eb:cc:43:36:c2:de:d6:ed:
                    b8:6a:e2:50:ef:74:59:0e:34:57:8f:c1:97:14:c6:
                    b1:03:e7:33:88:f1:a6:34:96:9a:22:73:7a:55:c7:
                    cd:f9:a3:57:ba:ea:43:9f:57:73:2b:cf:43:3c:df:
                    10:aa:fa:d0:9d:80:f0:17:6d:a1:1c:c2:be:3e:c5:
                    58:9b:1c:36:0a:50:79:e6:ad:d5:9f:9c:d7:2e:53:
                    a2:1b:3e:05:4d:36:76:d1:81:0f:00:86:0f:dd:a3:
                    53:d7:5a:52:9d:39:23:92:e8:91:77:4e:ad:ac:e1:
                    82:db:53:e8:83:ae:e5:a3:e5:aa:97:34:6b:6a:b8:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:AB:6D:25:65:18:B3:C5:7E:B6:1C:61:9E:58:CF:36:AC:AA:6F
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:c6:d2:1d:77:1e:ac:7c:5d:4b:53:c9:3a:b6:34:37:5f:
         1c:9e:b3:30:cb:f0:dc:01:18:c7:40:0c:7b:61:5e:43:c7:6e:
         ee:20:64:3e:a5:17:95:58:1c:ea:50:5e:31:23:61:81:d6:e1:
         a6:6c:af:a7:5f:d0:34:19:21:a0:16:25:1d:2f:7b:41:9a:9b:
         b6:f7:e0:72:db:b8:ed:e5:d0:b3:23:e8:b4:99:e7:5e:82:f5:
         58:1e:38:17:80:c0:6d:aa:ac:e4:7c:4e:19:a4:b9:58:4d:ca:
         7f:7a:9a:3c:74:46:c6:69:d8:21:2a:74:c4:83:8f:ac:29:25:
         c8:f0:a4:0e:97:78:4c:a5:5c:e5:b7:d8:1c:67:2f:ca:33:e4:
         98:5f:d6:ed:12:ef:5e:af:e8:4e:23:6d:03:62:b0:e0:f9:a5:
         96:22:20:1e:6c:30:ac:0e:49:db:4d:1b:b5:52:8f:b2:71:d0:
         54:31:38:32:51:84:52:35:b1:02:ef:3d:a0:95:5c:6b:f0:43:
         91:3c:c1:09:e7:a0:7a:b1:bb:c8:aa:92:d0:7f:3b:9e:ec:b8:
         61:3f:05:7e:df:1a:e6:18:6e:5a:11:8e:ff:92:1f:29:85:f2:
         3b:e2:87:66:1f:22:74:f0:76:fa:4e:89:ce:31:30:54:72:f0:
         aa:6e:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:50 2025 by rpki-client