Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File:                     7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier:          i0Sp2smAPgtZIFFNDCJ7KwhwtYL+NR5+54r47GpyzUU=
Subject key identifier:   B6:0D:7E:95:7A:A8:BA:AC:5C:2F:C3:CB:3B:D9:AF:65:6A:8F:65:C3
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer:       /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number:          CA
Signing time:             Sat 09 Aug 2025 06:07:44 +0000
Manifest this update:     Sat 09 Aug 2025 06:07:43 +0000
Manifest next update:     Sat 16 Aug 2025 06:07:43 +0000
Files and hashes:         1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: e/g+ztaWdHzvyynhVn3bOP3QMloU3GoDguLnU8SuNX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
        Validity
            Not Before: Aug  9 06:07:43 2025 GMT
            Not After : Aug 16 06:07:43 2025 GMT
        Subject: CN=6896e5b0-1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:41:44:7e:e7:dd:7a:46:61:e2:6f:ee:d5:
                    56:73:a1:f1:57:e5:1a:00:fb:2a:fe:4e:5f:11:d6:
                    73:fb:0f:c5:22:85:4e:ee:c1:77:16:ce:df:d8:98:
                    e0:4f:67:e8:f9:49:bd:86:9c:f0:04:37:07:73:48:
                    01:0f:42:23:b8:8a:c8:0f:a0:f5:cf:d0:95:75:7e:
                    71:2c:a4:47:d5:9c:2f:82:1a:73:fb:e8:7f:47:4d:
                    cf:34:d0:cd:2f:3b:df:2d:bd:ad:f9:6b:9c:ed:8e:
                    83:cb:fa:d6:ad:fc:6e:66:80:e7:be:cb:be:70:7e:
                    e9:fb:18:d2:f4:05:37:9f:67:53:39:f4:a0:ca:40:
                    03:3c:a2:4b:fe:ee:33:40:3d:b4:84:22:51:b4:e1:
                    06:6b:90:44:fc:4d:53:17:19:13:61:27:86:b5:8a:
                    c0:b9:6e:16:d7:cf:bc:56:2c:66:06:d1:45:25:aa:
                    b2:71:bb:2b:f4:59:b5:57:fc:c5:88:fe:9f:0f:c4:
                    63:b6:03:e9:d8:ce:45:1c:c3:c3:a6:0e:26:b6:d5:
                    d4:35:48:e2:48:16:d6:16:91:03:fe:c2:ff:4c:77:
                    78:06:32:3a:f3:8f:df:ce:dc:5a:e5:e6:0f:c8:e6:
                    22:bf:ee:21:dd:d8:1d:c5:48:82:ef:e2:0c:a5:a8:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:7E:95:7A:A8:BA:AC:5C:2F:C3:CB:3B:D9:AF:65:6A:8F:65:C3
            X509v3 Authority Key Identifier:
                keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:39:67:72:c5:0a:3d:6c:40:8e:35:fc:27:ca:11:62:02:
         50:8a:77:97:cc:7b:fc:83:f2:b6:cb:b4:cd:e8:bd:bf:f1:fa:
         99:11:89:2b:0c:18:38:f5:00:dd:3f:61:b7:bb:41:da:bb:51:
         b0:11:4f:67:11:16:51:c0:32:a7:e3:8c:4b:7f:21:32:2d:e0:
         10:26:67:3a:88:5e:b9:81:ea:a4:3b:a7:64:aa:93:5f:dd:0c:
         16:3f:1f:8b:cc:e7:01:11:2f:08:e0:1e:7d:3b:70:b4:65:b8:
         69:51:a8:c6:84:f0:9c:b2:de:42:f6:f3:97:74:86:23:55:31:
         ec:90:5f:66:56:73:f4:27:9b:38:f6:00:c9:22:da:17:c2:78:
         fa:e6:e2:4a:91:ff:63:c6:75:c5:2e:b7:78:b8:d7:84:fc:de:
         fe:f6:6f:1a:f5:80:3a:80:53:db:39:48:6e:54:48:00:ba:69:
         f7:8b:db:f2:ae:72:43:7d:b8:f4:63:35:9f:10:d1:f9:70:3b:
         0c:dc:6b:af:f1:f0:49:03:79:aa:22:e6:7b:7c:47:a6:0c:6a:
         b0:cb:32:d7:50:b6:b3:06:ce:5a:31:33:1e:c9:11:8b:77:ae:
         bc:8b:96:d8:23:c8:59:14:7e:47:57:47:7b:1e:98:52:37:d8:
         39:40:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:10 2025 by rpki-client