Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File:                     aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier:          01Qvwaq1Xta04EwE3TBxPqkMFFfDn5EP4JEviO/v5QU=
Subject key identifier:   FA:97:EE:FB:0A:32:67:C1:56:0C:EF:6F:99:2A:5B:2D:7D:84:CB:68
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       22A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number:          22A6
Signing time:             Sun 10 Aug 2025 14:38:28 +0000
Manifest this update:     Sun 10 Aug 2025 14:38:28 +0000
Manifest next update:     Sun 17 Aug 2025 14:38:28 +0000
Files and hashes:         1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: I8gc41yLb7dvc63Pb2X39UX48kmbtaDTbhCvlE0a6Ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8870 (0x22a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Aug 10 14:38:28 2025 GMT
            Not After : Aug 17 14:38:28 2025 GMT
        Subject: CN=6898aee4-884c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:d9:f8:e9:f1:b7:4b:b9:d8:fb:52:aa:18:
                    2d:f3:0f:77:93:d2:e5:f6:43:a3:c0:cf:59:14:c6:
                    88:8d:02:9a:ea:00:fe:88:e7:0d:71:e9:9b:d8:2e:
                    9c:4e:62:ef:e6:bf:19:5b:48:e2:ac:5f:93:b0:4f:
                    63:3a:ef:55:12:d1:49:70:b3:9d:74:f3:85:62:ed:
                    f6:b5:3d:b3:6c:a3:64:db:d6:ee:f4:76:08:7e:de:
                    43:bf:9e:50:95:ab:14:3f:0c:e1:a6:5c:38:75:aa:
                    e1:02:28:97:93:71:26:f6:ce:6d:97:72:d7:03:58:
                    bb:b0:90:97:75:6f:d3:ea:b1:02:be:62:e4:d9:80:
                    e9:73:77:d3:67:bc:60:83:35:a3:93:a7:79:36:47:
                    3e:a9:f7:f2:46:5b:04:01:97:96:49:24:9a:cc:69:
                    aa:7d:64:dd:36:75:71:16:9b:e9:27:46:51:4d:ea:
                    3f:c4:d5:02:41:c6:2a:73:1e:d4:a4:91:76:00:bf:
                    e9:0e:08:51:b9:d2:cb:5b:bf:36:63:61:2e:e2:ce:
                    4d:9e:22:92:c2:75:b6:f6:14:25:d4:ca:ee:64:06:
                    2f:21:38:ff:65:b7:c3:91:3f:3a:3e:0d:f2:2e:7f:
                    54:72:8b:74:8a:da:79:31:9a:bd:bc:6f:f0:6b:c6:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:EE:FB:0A:32:67:C1:56:0C:EF:6F:99:2A:5B:2D:7D:84:CB:68
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d9:47:3b:0e:e5:3d:bd:fa:29:4d:e0:1f:e0:f8:ef:4e:3d:
         5e:ac:46:36:f8:df:f4:31:e9:fc:d8:e8:cd:03:e4:b0:4f:be:
         c4:d3:42:a5:f8:90:10:bc:d3:94:ea:26:18:fb:23:b4:4f:f5:
         5d:11:bb:b3:49:ea:09:3e:6d:0e:4d:d8:0c:3e:c8:25:49:66:
         df:f9:b5:c4:75:37:87:56:c9:78:1f:71:b5:0e:6a:cd:a1:f9:
         72:d8:9d:e6:2b:43:ce:ce:bf:2d:99:4c:68:d8:8a:8a:88:3b:
         a1:7b:8b:d3:17:ea:b8:74:05:68:39:6f:e7:eb:48:0f:bd:1e:
         7d:f2:27:bb:8f:3d:b4:45:73:0d:bd:97:be:cd:57:fb:8a:6f:
         b0:b6:7d:f8:95:bd:df:28:df:82:75:c6:95:64:fb:cf:83:7d:
         a6:fb:84:c7:da:5d:ee:cf:97:46:bb:5e:83:be:76:55:1d:0c:
         7e:8b:19:b2:ba:9f:9d:f5:f1:2b:39:4f:f7:ef:50:b9:75:55:
         74:52:9e:08:fb:61:81:5c:6e:93:15:6c:06:a5:c1:aa:4a:27:
         86:87:92:07:4e:9f:39:ab:f5:6c:74:42:fd:f8:7b:db:38:a4:
         59:3a:71:94:8c:ec:3a:99:7c:e7:55:38:60:3a:4f:91:e6:4e:
         0a:17:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:54 2025 by rpki-client