Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          eFSWaqZDwHjGTpIfCTjLLjUZT/vPkyAclcXqVMUir2U=
Subject key identifier:   32:FE:C4:D3:8B:64:06:8F:CF:76:00:F1:D2:9D:37:AF:9D:F0:9E:D0
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          57
Signing time:             Sat 19 Jul 2025 07:25:48 +0000
Manifest this update:     Sat 19 Jul 2025 07:25:47 +0000
Manifest next update:     Sat 26 Jul 2025 07:25:47 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: 4750RjhGF4Gvg6aZuBPTHZICXF+vCjpr5V3vVp28K2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Jul 19 07:25:47 2025 GMT
            Not After : Jul 26 07:25:47 2025 GMT
        Subject: CN=687b487c-4de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:2e:3d:1e:59:7a:e7:16:23:3d:16:b7:13:
                    93:4d:76:b9:27:bf:65:ac:1b:e1:ce:77:46:e6:21:
                    06:35:ed:ab:be:5d:e1:7e:77:0b:82:2e:6b:9f:bf:
                    83:48:2c:18:fd:2a:16:1a:06:7b:ed:5b:8e:b7:68:
                    7a:5e:18:9f:24:8b:f7:5a:18:d2:1f:b3:ea:2f:b6:
                    c9:44:b1:3a:a5:8a:89:71:9d:44:d9:d4:55:48:f3:
                    86:06:49:25:e5:91:4a:59:4d:09:50:bf:41:0a:64:
                    7e:88:3f:b7:26:1e:0e:71:9e:22:b9:1c:58:fd:1e:
                    01:ac:30:da:42:52:08:2d:b7:f6:a7:c2:ba:2b:f3:
                    1e:ef:73:d2:80:d0:70:3d:ec:0f:ff:7a:a9:94:18:
                    67:c7:0a:f2:77:67:97:3f:63:d2:43:52:4e:dd:32:
                    00:7b:8f:81:80:23:ca:59:58:11:6d:88:53:6f:56:
                    7d:d1:4e:c4:e9:c1:e3:ea:a6:c3:dc:b6:28:65:b8:
                    da:3f:aa:8e:3c:63:7b:f9:f9:a8:22:42:e0:a6:22:
                    d5:a1:47:f7:91:81:3d:39:5c:cc:33:af:ff:01:ca:
                    b8:3b:33:a4:81:3f:51:56:2b:a2:22:3e:f7:63:f8:
                    ee:a6:82:07:8d:95:8c:0a:e7:9f:a3:bb:0d:d8:bf:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:C4:D3:8B:64:06:8F:CF:76:00:F1:D2:9D:37:AF:9D:F0:9E:D0
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:55:61:6c:2f:7a:f6:f5:10:dd:4b:37:07:62:c7:a8:58:
         e7:ce:57:9c:69:f1:f5:77:b2:51:4a:2a:e4:c2:1d:a6:67:78:
         c7:af:b9:83:a5:6b:e3:d4:f3:24:02:61:b1:07:9e:2b:22:90:
         78:41:cd:93:fc:8d:e1:aa:06:1f:e0:8f:3f:ad:2b:31:87:cc:
         29:76:2a:41:aa:a3:5c:2b:a3:ec:af:62:d4:0b:23:18:5f:80:
         7e:ec:81:21:e8:28:d7:d4:23:c9:9c:6b:da:b4:11:a7:29:4e:
         4a:06:63:da:ed:00:de:89:ed:ce:c4:d6:88:6a:43:c1:e0:9b:
         92:40:4a:ce:85:f0:a7:cd:d3:fd:6d:ea:b1:a5:be:4f:8b:58:
         5a:5a:bd:27:b9:67:28:8b:03:f1:32:6f:ab:3d:a5:49:55:21:
         ec:19:08:49:50:42:04:da:47:63:c7:ce:d0:94:4d:da:ce:17:
         33:64:99:cb:10:f6:f1:02:bb:7d:19:ce:51:a5:b6:f4:03:17:
         d5:86:29:26:6a:d5:df:28:02:a6:f8:16:be:86:9f:2c:46:f9:
         bd:61:51:21:01:44:2d:fa:6e:6b:8b:17:ec:ca:b4:09:8c:5f:
         dc:34:f1:cd:f5:74:19:8c:ef:c5:52:65:df:92:b5:e8:07:a3:
         1f:09:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:47:20 2025 by rpki-client