Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          CqQJEJHVOnoCQu6szgIkBXj/ODypY2nGoo1NYzRMw0Y=
Subject key identifier:   AF:31:2F:2C:A9:C7:A9:FE:C0:8C:10:3C:AC:C3:98:63:B0:EB:07:A5
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       34A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9A86
Signing time:             Mon 04 Aug 2025 15:19:57 +0000
Manifest this update:     Mon 04 Aug 2025 15:19:57 +0000
Manifest next update:     Mon 11 Aug 2025 15:19:57 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: vbzAkdPNQ8xBS6qMiryIsRfM+0cXO1eCqEayPUljU4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13475 (0x34a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Aug  4 15:19:57 2025 GMT
            Not After : Aug 11 15:19:57 2025 GMT
        Subject: CN=6890cf9d-cf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:34:f3:a4:a4:42:e0:b8:3f:1f:77:1c:6d:
                    24:a4:be:b8:a0:18:01:b5:cb:29:96:31:7f:9b:dd:
                    d6:a9:f1:e1:75:3c:fe:54:6d:5b:14:05:df:52:52:
                    da:10:da:6e:c4:40:74:d9:e3:2f:0c:81:15:f4:75:
                    f2:c1:70:7f:76:ca:bf:82:6a:fb:6f:12:a7:5f:8b:
                    ea:ec:6b:f6:27:e4:8e:d0:80:0a:da:52:d4:e3:73:
                    05:07:a1:b4:26:03:c9:19:a9:f8:a2:44:db:3f:9e:
                    fc:a2:bd:45:ef:17:71:eb:9c:3a:f5:24:53:31:87:
                    8c:a4:89:e8:f0:ef:f4:a4:9d:dd:95:b5:a0:6a:26:
                    4c:7d:96:6d:69:9a:ed:4d:06:ee:9c:10:bb:fc:bf:
                    6a:30:fb:40:ef:18:c4:f6:32:ff:12:71:b5:5d:1e:
                    a9:13:b4:08:d5:2a:91:29:66:b5:39:64:33:87:93:
                    82:1a:e5:cf:5d:28:02:0a:63:a3:8d:ec:bc:a6:d0:
                    c7:92:7a:bd:5c:22:0e:38:c6:6e:c6:ec:77:e0:bd:
                    17:de:1c:8b:bc:66:a7:26:11:11:54:7a:b4:aa:89:
                    d3:c8:e3:46:c2:4a:2f:3c:5f:90:7a:2d:98:f2:eb:
                    ae:0f:fb:52:fe:f2:da:59:b7:1a:05:f0:19:cf:3e:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:2F:2C:A9:C7:A9:FE:C0:8C:10:3C:AC:C3:98:63:B0:EB:07:A5
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:52:45:39:ef:d2:17:6f:41:69:04:3c:b2:e1:86:30:98:80:
         31:18:5c:72:87:a8:09:55:30:7d:4e:ee:08:03:6d:fb:16:9c:
         69:2a:cb:58:d4:e5:9a:2d:20:f8:9e:06:b2:a6:bb:fc:bb:97:
         c6:9b:55:87:4a:f5:91:af:fb:a5:5c:65:0c:b7:d5:92:12:68:
         71:29:a1:7b:1d:ac:6d:65:45:08:5f:75:80:37:6f:8d:2d:e6:
         fa:88:7c:3f:46:2a:5c:ea:63:ee:f9:50:e2:19:c1:64:f5:db:
         55:96:68:fd:a5:20:84:50:1c:d5:41:8d:e4:46:e4:ba:0a:12:
         0e:94:61:66:1a:15:51:ae:d8:9b:a2:a6:7a:15:6b:11:7f:b4:
         e9:42:8f:70:92:5e:ea:03:65:fc:6b:42:b2:97:16:84:5a:af:
         20:33:59:f0:05:f9:02:b2:c6:c8:6c:0b:c4:90:2b:d7:61:bc:
         52:37:0f:f0:ca:56:99:15:0b:58:4b:19:78:98:9c:3b:90:d1:
         59:bf:39:f9:18:47:82:f4:7d:64:ea:a8:f2:40:ad:6d:54:13:
         f7:21:3b:7d:7f:0a:a1:b0:ae:3a:ee:8a:2f:84:b5:b0:1d:d4:
         4e:10:0a:fe:9d:5b:e7:ac:6f:af:03:46:4f:24:87:79:35:05:
         bc:b3:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:34 2025 by rpki-client