Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          sF7GDM55pJ2DmQksuFznccNl5K5JI+vXV9vTUsQ+pGI=
Subject key identifier:   80:5F:C8:49:BB:B3:12:23:C9:42:75:4F:70:52:DC:95:97:A6:64:B7
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       34E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          34D1
Signing time:             Fri 08 Aug 2025 14:23:43 +0000
Manifest this update:     Fri 08 Aug 2025 14:23:42 +0000
Manifest next update:     Fri 15 Aug 2025 14:23:42 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: wL+JliqJLihDzg8B0dNgNp+sdGZyGlJ0PhW5FciAC1Y=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13538 (0x34e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Aug  8 14:23:42 2025 GMT
            Not After : Aug 15 14:23:42 2025 GMT
        Subject: CN=6896086e-a1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:6c:28:47:1f:1d:68:38:cb:1c:57:0a:b1:
                    fe:b0:08:86:89:7d:64:01:88:26:68:65:d1:9a:7e:
                    d5:80:6e:b5:a1:17:1d:63:5a:39:e0:4e:96:0a:35:
                    f3:ce:04:55:67:54:53:c7:42:07:d5:e2:2b:19:77:
                    90:91:d1:73:27:9a:59:5c:68:7c:5e:bc:83:40:62:
                    5d:5d:b9:9d:82:37:02:5f:52:ea:c1:1a:d7:57:90:
                    36:db:db:d3:01:6b:8c:9e:54:96:7a:f7:b1:c5:df:
                    61:4a:33:c0:ef:c2:2b:0c:c7:66:fb:a6:8e:b9:15:
                    47:2a:81:c1:24:2d:da:85:ad:fa:f5:58:a0:d4:41:
                    30:d7:2d:b9:3b:d3:7e:3d:22:ff:f8:ad:1f:93:e6:
                    e5:a0:1f:98:e7:2b:7b:5d:a0:ae:68:7b:55:48:16:
                    4a:32:f3:9c:66:14:48:eb:17:3e:45:44:62:ed:d5:
                    48:0f:e9:c8:85:8f:d7:07:f0:52:98:35:42:58:4a:
                    7b:de:07:3b:ef:37:55:1b:bd:55:8f:72:0d:44:d7:
                    4d:7e:cd:be:71:4d:2b:97:a1:2c:a8:cf:06:ae:e7:
                    35:97:8c:e7:2f:86:70:cf:56:05:a0:ec:4f:d8:5f:
                    fa:49:2a:d6:67:ed:70:6f:e1:b0:fc:52:e8:61:85:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:C8:49:BB:B3:12:23:C9:42:75:4F:70:52:DC:95:97:A6:64:B7
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:d7:56:98:24:ee:21:f7:8b:f2:b5:bd:2c:d7:a9:f5:00:
         2d:5f:38:dd:97:e3:ce:71:3a:b1:6d:4f:49:49:a6:96:e1:9a:
         05:8c:02:78:15:82:9c:af:73:bc:27:34:00:54:3a:1f:40:1b:
         7d:f6:43:91:a1:93:ee:f6:b5:e4:21:7c:f3:2c:6a:d4:82:74:
         f9:c9:8c:f1:46:a3:29:ed:71:e6:bb:fa:8f:65:b5:23:06:54:
         fa:90:7f:04:3a:94:4d:26:f1:09:06:fc:f4:a6:85:a2:49:9e:
         69:5c:30:28:29:e2:54:99:81:64:e8:26:32:5b:df:41:c4:ae:
         d2:d7:20:79:56:62:3b:b5:fd:af:6b:e4:79:5d:3c:c4:76:fd:
         03:3b:1b:82:43:ab:77:e3:08:7e:ed:26:8d:dd:9b:65:f7:16:
         32:73:88:06:20:a5:f2:75:8c:5a:ff:79:d6:a7:a6:0c:29:14:
         c1:70:63:66:2d:be:e0:bc:5f:18:8a:c2:92:18:d1:e2:8a:06:
         c6:a6:73:ec:a1:17:f3:37:78:97:41:dd:86:3e:d1:62:b6:66:
         3f:d1:99:66:a8:1a:17:62:5e:07:23:10:7a:c1:28:95:16:ca:
         48:e5:84:04:a4:a5:66:24:03:08:63:84:bc:50:a9:65:6e:7a:
         57:7d:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:36 2025 by rpki-client