Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
File:                     MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json)
Hash identifier:          1zp/b+hpHd+TJmO6gPN3AVxosN+KETT74RfcW58DsGM=
Subject key identifier:   0A:6A:25:2B:C5:03:88:30:90:4E:CD:5A:8D:48:03:48:FC:3D:7E:C6
Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC
Certificate issuer:       /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
Manifest number:          5D
Signing time:             Mon 21 Jul 2025 07:19:05 +0000
Manifest this update:     Mon 21 Jul 2025 07:19:05 +0000
Manifest next update:     Mon 28 Jul 2025 07:19:05 +0000
Files and hashes:         1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: Ne22n8nAQKxexxzwFaJTgfBVeoovSyIWTaIdVpCSH48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl
                          rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC
        Validity
            Not Before: Jul 21 07:19:05 2025 GMT
            Not After : Jul 28 07:19:05 2025 GMT
        Subject: CN=687de9e9-1f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:ce:67:51:2e:50:02:ea:3d:6e:f9:4a:a5:
                    30:9d:7c:b7:b6:db:c0:da:f1:a9:ad:be:ae:cc:8b:
                    2d:5b:32:15:95:97:72:f9:26:0d:a2:dd:80:aa:33:
                    2b:db:f4:57:16:b7:35:e3:31:38:d0:9e:ac:2e:32:
                    02:86:20:da:75:66:f6:1f:b7:13:85:cf:6f:3f:73:
                    b4:c6:cd:33:6b:f4:81:43:4f:be:a8:d5:94:f4:42:
                    f0:3e:77:da:0f:14:86:fd:57:3c:3c:24:a1:ad:ff:
                    ed:08:fb:21:0b:de:46:f9:ee:73:63:a7:00:d6:af:
                    99:24:a2:b0:31:3f:8b:91:eb:a2:fc:90:cb:d7:eb:
                    79:a9:e2:d9:0e:b1:7b:ce:2b:bc:33:73:0e:ad:b6:
                    37:d1:62:f6:af:64:1f:a5:a1:c6:43:70:aa:e3:61:
                    3b:b1:02:9e:8a:a1:81:96:65:7b:08:0e:a1:b2:07:
                    e2:77:ae:44:53:5d:0b:36:73:a3:40:6b:cf:6b:13:
                    43:ba:3b:91:90:b4:32:27:05:81:de:41:55:91:12:
                    cb:64:e9:b3:51:13:9f:e7:74:e5:82:c1:a3:a6:4e:
                    e4:6f:28:fe:bc:f8:44:ea:4a:93:93:81:0a:2c:13:
                    90:e2:1e:80:97:eb:17:db:62:16:e4:cb:36:1c:ca:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6A:25:2B:C5:03:88:30:90:4E:CD:5A:8D:48:03:48:FC:3D:7E:C6
            X509v3 Authority Key Identifier:
                keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:27:56:3d:88:cf:e9:50:eb:fd:b6:af:69:7f:2e:48:a8:
         1c:a7:2d:5a:b1:0a:96:a7:f5:69:83:3b:82:0c:fa:e7:6e:fe:
         87:0f:6f:bc:6f:5a:31:8f:88:43:a5:23:00:30:38:32:7e:8e:
         01:bd:dc:90:1c:18:2f:42:61:ca:83:2c:78:b6:71:fa:38:d8:
         ac:c9:86:93:aa:37:09:af:dd:ee:52:bc:e5:f6:d9:81:10:d2:
         ec:30:f4:cf:ec:11:a0:49:4e:d0:4e:4e:f5:ef:ca:ca:5a:16:
         08:50:34:9b:19:f5:7e:4d:1b:d8:37:3d:29:db:f7:7b:37:6f:
         86:9e:21:90:6a:a6:c2:80:a0:2e:d4:e2:fb:11:76:87:63:31:
         5a:ca:d1:83:15:02:88:ec:3e:f7:0f:d3:a4:53:14:11:ed:7f:
         59:97:2c:cb:14:eb:ed:28:d3:b3:ff:da:9a:5f:21:a5:ef:96:
         75:8e:87:1d:f2:80:36:0a:72:ca:8d:68:a8:63:b5:2b:82:be:
         39:49:7f:a3:15:72:01:9d:00:53:84:6d:73:d4:77:db:5b:9c:
         ee:49:14:63:4e:d9:24:42:19:26:e9:ac:6e:88:3d:d9:6b:aa:
         6f:04:a1:fd:e9:ec:dd:ad:56:e8:f3:11:9b:02:ea:9f:b7:bb:
         e9:ac:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:32:46 2025 by rpki-client