Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
File:                     lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json)
Hash identifier:          Y9dA/vi7ZahPyUSXhjRRN4K+tSOogE14LayI5E9z0a0=
Subject key identifier:   10:D6:E2:3F:F5:99:C5:FF:CD:E5:A6:8D:A2:49:3E:26:DC:B5:9E:5F
Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
Certificate issuer:       /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
Manifest number:          1695
Signing time:             Fri 08 Aug 2025 16:51:32 +0000
Manifest this update:     Fri 08 Aug 2025 16:51:32 +0000
Manifest next update:     Fri 15 Aug 2025 16:51:32 +0000
Files and hashes:         1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: cX+JCJKlgWj1M6hckIvPaSW2TqsBAqOeiTHCXv6lkFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
        Validity
            Not Before: Aug  8 16:51:32 2025 GMT
            Not After : Aug 15 16:51:32 2025 GMT
        Subject: CN=68962b14-f5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:7f:92:dc:6b:0e:7d:cb:f9:cb:53:f9:b2:
                    65:24:a7:ee:98:f6:8b:c6:d4:c9:8f:be:32:cc:39:
                    9f:a8:e7:20:eb:76:93:fe:1f:2f:3b:06:21:e4:a6:
                    4f:8c:ae:33:df:a6:8e:f6:2a:5a:17:6f:9c:87:92:
                    97:cf:27:f9:8b:61:53:83:8c:c2:57:bc:30:ae:7a:
                    f1:f5:ce:b3:32:e1:e4:c1:c3:44:56:33:13:4d:59:
                    f4:d8:da:61:1f:0b:bf:45:31:e6:d7:d3:88:5e:2e:
                    d3:a7:e8:d6:4a:9e:6a:33:85:34:ae:26:79:bd:6e:
                    a9:74:d5:77:69:01:1a:a4:42:45:64:82:a1:39:40:
                    b4:29:4b:50:ab:f2:2b:c7:3a:f1:49:ed:48:32:96:
                    c6:65:a4:02:2b:62:24:14:b8:5c:35:b7:29:03:23:
                    5b:b4:7b:7b:e5:34:cc:df:cb:c5:cb:65:c8:f1:40:
                    b3:85:d7:83:01:9a:a6:28:b3:a4:2c:90:d0:e0:98:
                    fa:9f:40:b5:b5:fe:74:42:ee:88:ea:5f:90:11:2d:
                    ec:b6:fc:91:56:6c:69:4f:94:c5:bc:64:2e:26:94:
                    16:43:b5:46:54:e8:ad:63:aa:d1:0d:eb:88:c4:37:
                    60:56:de:08:93:10:0e:52:f5:97:59:cc:9d:00:2d:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D6:E2:3F:F5:99:C5:FF:CD:E5:A6:8D:A2:49:3E:26:DC:B5:9E:5F
            X509v3 Authority Key Identifier:
                keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:69:e3:87:8e:8d:38:ce:34:a4:16:b0:07:50:c9:4e:7f:
         82:46:c2:8f:a9:c3:02:a6:d2:81:38:09:45:9c:6b:be:9f:ed:
         51:c7:6d:fd:15:9a:9b:0f:bc:a0:3a:19:a8:7d:b4:26:60:de:
         ec:0e:f5:76:86:2d:c2:be:65:d2:88:31:bd:cc:d9:9b:a8:b0:
         88:e0:58:cd:1b:2b:8f:b4:06:6e:2a:53:f8:aa:5a:86:7d:57:
         50:09:6b:86:2a:f3:aa:ec:fc:d7:73:ed:5a:0b:1f:1d:2e:ad:
         7d:28:27:2a:a7:1f:26:ac:73:07:d6:1e:02:9f:ad:e3:dc:54:
         99:a4:46:47:a0:ea:1f:7d:bf:ce:59:77:97:db:0e:02:94:69:
         47:a0:1e:3c:20:c9:c4:58:49:89:c8:52:82:ac:7a:9a:31:b1:
         a4:b9:90:f3:df:4f:cd:04:3a:80:a4:54:24:3d:ab:c2:fc:7c:
         79:1c:cd:26:d4:bc:da:b9:86:12:3c:9d:22:9b:94:68:7f:2c:
         e1:02:87:8a:02:48:96:bf:59:6c:ee:c5:63:c6:fd:a9:b5:f8:
         70:50:03:90:53:11:31:54:b1:90:a6:ac:7c:ba:08:33:d2:17:
         47:cc:61:f4:a3:4f:0d:1f:05:64:45:8e:41:70:79:e4:db:13:
         be:f1:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:14 2025 by rpki-client