Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
File:                     RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json)
Hash identifier:          T2Pxo76GfQQJs6ZQiPle91B253awAcvgamZk0K6BVPc=
Subject key identifier:   A8:09:63:11:BC:48:03:44:07:30:27:A6:B7:2D:F1:06:2F:99:5D:8D
Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
Certificate issuer:       /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
Manifest number:          0100
Signing time:             Mon 11 Aug 2025 05:17:24 +0000
Manifest this update:     Mon 11 Aug 2025 05:17:24 +0000
Manifest next update:     Mon 18 Aug 2025 05:17:24 +0000
Files and hashes:         1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: HgiltPyl8mOWjk6tb0d4BRW9SeCZ88cciAnCMy/oYGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl
                          rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 05:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
        Validity
            Not Before: Aug 11 05:17:24 2025 GMT
            Not After : Aug 18 05:17:24 2025 GMT
        Subject: CN=68997ce4-27b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:73:e7:f0:e1:61:2f:24:04:ec:ed:94:6a:
                    13:e7:7f:1f:59:21:56:26:60:b8:5b:e0:0c:93:c3:
                    b7:45:83:c4:57:00:02:29:9b:f4:b3:67:45:69:3e:
                    de:17:97:c7:64:83:30:5d:2d:07:8e:8e:b7:1b:d0:
                    17:b8:4e:dc:80:98:a1:2b:f6:30:6c:b7:f0:de:c8:
                    39:c3:4a:99:71:a3:6e:05:21:0d:68:39:22:41:2a:
                    88:bd:f1:41:d6:12:3a:c2:41:d6:79:b3:cb:b0:99:
                    1e:42:68:78:a2:d7:ae:0b:c0:9e:4b:83:9f:29:66:
                    48:a6:d2:33:79:07:bd:20:d6:4b:00:f7:03:a7:e1:
                    63:90:28:ff:27:62:d4:23:07:f6:fd:53:90:69:0f:
                    ec:ab:61:0a:2a:d9:15:5f:1f:90:70:14:ff:e4:be:
                    51:40:0f:5e:9b:aa:fc:18:a3:fa:dd:2c:13:e2:41:
                    14:ec:67:29:00:a3:76:99:7a:f1:fd:6b:63:22:e0:
                    32:69:22:10:7c:21:40:f2:da:1d:6e:77:70:3a:b7:
                    e2:7c:80:f2:79:0d:54:12:99:9f:4a:44:87:95:b2:
                    71:5b:2b:5a:a0:8c:f1:d5:0c:9e:6d:6c:c8:76:fe:
                    63:c1:81:77:3a:66:7c:e8:28:6f:f9:20:7c:4f:0f:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:63:11:BC:48:03:44:07:30:27:A6:B7:2D:F1:06:2F:99:5D:8D
            X509v3 Authority Key Identifier:
                keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:34:8a:e1:a7:9e:c3:6c:56:ff:7d:24:31:ae:11:52:11:
         75:67:7a:1a:61:b7:d0:6d:2a:a0:24:2b:20:e1:47:16:50:60:
         4a:a4:a1:01:2f:c8:45:32:bb:a8:74:6d:bc:81:ce:18:ac:bd:
         36:03:0f:65:3a:8d:33:72:5a:47:c1:bb:f4:5e:db:a2:1d:80:
         59:b5:fb:ea:82:93:2f:d0:7b:ae:66:a7:e5:6b:46:09:1b:f3:
         b1:6f:d3:a3:0f:bf:c3:9b:92:78:fa:cf:cd:4b:db:c2:ff:f4:
         6f:f5:b2:97:1c:50:d5:b3:7e:9b:d5:9c:66:be:ed:b0:97:83:
         49:d7:dd:27:4d:23:f9:e4:af:66:68:28:29:ab:0d:88:fa:e7:
         91:f1:af:30:22:f0:3e:b1:0a:04:7d:95:78:d3:3f:b7:eb:75:
         89:81:6b:bd:be:aa:50:cc:76:f7:ba:c3:68:78:26:2e:60:29:
         71:df:2f:45:ab:5c:13:52:f0:21:77:cb:5b:9a:30:78:76:c3:
         16:21:ff:44:a4:56:09:ee:61:58:af:ad:3d:d6:f0:98:21:1e:
         8a:3f:65:35:d2:a5:00:c0:13:18:8b:50:2a:94:92:ce:ad:b9:
         5a:7f:b8:aa:36:4b:1a:27:59:bc:7c:67:93:af:24:da:99:84:
         4f:6e:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:51:54 2025 by rpki-client