Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File:                     hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier:          76mskYEd0UOxoROLPWJRRo35Vx+w5jGKdT5jj+TxVmE=
Subject key identifier:   87:41:39:D0:CD:C7:27:91:B4:42:C7:C7:80:82:CA:BA:FC:EB:09:F2
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer:       /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number:          69
Signing time:             Sat 09 Aug 2025 07:27:38 +0000
Manifest this update:     Sat 09 Aug 2025 07:27:38 +0000
Manifest next update:     Sat 16 Aug 2025 07:27:38 +0000
Files and hashes:         1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: ox6bUc+zuRAoRD9a+KHPx1C7xu35Ge5N8LODRWG9HfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
        Validity
            Not Before: Aug  9 07:27:38 2025 GMT
            Not After : Aug 16 07:27:38 2025 GMT
        Subject: CN=6896f86a-c79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:05:ec:77:9b:2c:0b:74:96:14:af:9d:32:
                    7f:f9:5a:60:a5:2f:1f:99:03:38:d6:3e:f8:43:1f:
                    ea:0e:39:e6:ef:02:78:bf:b1:e8:92:a0:fc:18:88:
                    02:90:95:ef:36:b8:13:55:d3:58:4d:b7:d9:9e:23:
                    30:bd:7d:64:70:58:65:5b:56:a6:a8:73:86:54:e3:
                    05:a1:ef:93:0e:f1:08:da:04:2a:c7:70:5d:8a:73:
                    52:46:b8:66:83:3a:9c:cc:ac:07:25:d6:8e:0f:37:
                    ae:bf:dc:79:54:d1:19:1c:45:61:a0:cd:a3:02:fc:
                    4b:d7:21:34:04:77:90:a7:20:1d:41:71:a0:f0:06:
                    e9:cf:06:fa:b6:10:ca:5f:1a:fc:1d:40:b3:00:13:
                    d4:77:91:20:c2:b4:e3:ec:4c:8f:22:13:70:93:b0:
                    33:f6:54:5e:de:76:05:86:7d:cf:d1:2e:96:37:3a:
                    27:9d:42:8b:9b:24:0e:c8:a9:ba:7b:7e:80:9f:0f:
                    ba:3c:f0:de:00:68:68:51:ca:ba:54:e6:7f:84:99:
                    47:13:e8:8f:cc:b6:b0:5f:18:58:57:33:dc:94:55:
                    29:b0:d8:2e:a9:9a:e0:00:88:66:d9:86:9c:ed:af:
                    45:7c:bd:3e:79:a9:87:04:50:0a:ab:1c:1f:8f:af:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:41:39:D0:CD:C7:27:91:B4:42:C7:C7:80:82:CA:BA:FC:EB:09:F2
            X509v3 Authority Key Identifier:
                keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:b7:87:91:95:3c:b0:57:41:b4:01:7f:25:09:40:7b:4c:
         c5:f5:d9:66:47:bc:cd:83:2d:2f:6e:63:de:42:d0:94:07:c7:
         fc:bd:fe:85:89:dc:73:e3:02:ad:2f:28:98:ec:5c:2f:49:c0:
         21:12:b7:75:dc:e2:b0:32:c0:a2:ce:d5:84:45:f6:2c:34:78:
         01:b8:b5:4c:cd:18:b7:e4:46:6a:e3:37:95:69:8a:50:c5:a6:
         14:4d:f7:4a:af:b6:89:ac:06:39:25:db:7d:d1:aa:c2:5d:86:
         1f:77:ff:b1:31:5b:3c:5c:9b:9b:38:cc:d7:3f:87:cb:ed:77:
         85:b1:84:73:bd:8c:fe:b5:37:bc:44:ad:a4:39:d2:a6:dd:a0:
         0b:62:a4:f7:5b:b1:8c:8a:a4:e2:42:33:b7:c4:a0:95:11:d4:
         cd:55:59:57:f5:07:e9:44:10:34:e4:f0:27:bd:00:eb:29:87:
         c0:a6:c5:ee:4b:89:be:9f:14:bf:cf:e0:c0:7a:6d:11:40:b7:
         58:ca:44:99:6c:d1:ab:bf:37:64:aa:7f:4c:e8:c7:54:27:70:
         09:ce:5b:6a:c4:47:e1:01:24:92:3f:7b:09:c9:18:39:c0:ad:
         0a:eb:9f:ec:a8:23:c2:87:f4:70:de:05:1f:d6:81:c5:b2:36:
         fa:89:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:49 2025 by rpki-client