Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File:                     KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier:          H0LJD70Q++obkGkmsIee1fE9rSc4j531UHLr9roWelI=
Subject key identifier:   5E:1B:51:6D:4B:BD:23:B1:5E:CE:56:3B:59:57:0C:CF:F3:0B:42:41
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer:       /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number:          011F
Signing time:             Wed 23 Jul 2025 04:57:46 +0000
Manifest this update:     Wed 23 Jul 2025 04:57:45 +0000
Manifest next update:     Wed 30 Jul 2025 04:57:45 +0000
Files and hashes:         1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: 7BnijJFAWMRXBTzqJm96O5BlC0lUxupobaoShiVXyvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
        Validity
            Not Before: Jul 23 04:57:45 2025 GMT
            Not After : Jul 30 04:57:45 2025 GMT
        Subject: CN=68806bc9-0275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:cb:9e:eb:41:21:fc:66:a4:91:8c:b6:48:
                    80:bd:dd:45:6b:6e:82:dc:29:05:53:23:15:1a:e8:
                    86:5c:3a:61:84:90:fd:6e:4d:02:c7:74:b7:9c:37:
                    27:4c:a8:c5:b6:73:48:0b:b9:33:f5:1d:cd:fd:4f:
                    b1:c7:05:64:02:75:8e:20:c0:5c:a1:d9:1c:54:df:
                    05:65:c9:51:b1:1b:e8:22:45:70:3f:a9:b4:37:d2:
                    65:61:bc:3c:92:1c:a9:0b:37:4b:13:10:8b:1b:01:
                    4a:b4:e2:9b:49:44:95:0c:dc:4e:8b:11:33:fe:3b:
                    fb:80:78:9a:e3:22:1f:80:6b:4e:18:79:3e:3b:3c:
                    56:f0:a6:72:35:76:ad:e0:6f:03:55:f7:68:f1:ed:
                    2b:17:c6:c7:ce:55:5e:9d:93:63:b7:26:da:6e:c6:
                    b2:9a:e3:a3:c4:7b:0e:5b:6a:2f:c7:17:37:c7:b3:
                    6a:26:bb:4d:4c:2e:83:b3:ec:e4:a5:32:61:cb:17:
                    97:51:37:31:12:38:e1:96:e3:77:05:3e:3e:18:76:
                    9a:8c:c1:c8:64:fa:30:37:f7:9e:5e:10:89:b7:99:
                    b1:4c:e7:0d:da:db:02:0b:a8:f6:66:38:fc:64:be:
                    74:5a:eb:65:53:32:d8:69:c3:63:10:3a:45:82:98:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:51:6D:4B:BD:23:B1:5E:CE:56:3B:59:57:0C:CF:F3:0B:42:41
            X509v3 Authority Key Identifier:
                keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:27:bd:d3:51:db:5e:86:20:bc:0b:6d:46:82:2d:d3:2a:
         0d:34:94:5c:77:49:25:d6:ea:5e:45:a1:64:1b:a1:ff:76:b9:
         e8:d8:67:3e:bf:f6:65:37:b4:2e:89:11:45:6d:67:29:dc:d7:
         de:c5:48:fa:c5:9e:d4:70:29:58:6e:b2:4f:05:9f:9c:67:d0:
         2c:e0:34:71:43:2b:9e:25:63:90:ce:99:9b:ff:7e:7f:f8:cd:
         ec:04:5e:f8:d2:91:94:1f:84:10:70:a6:f4:87:fd:9c:7e:2e:
         a4:e3:8d:cb:dd:10:29:64:9e:0a:14:ff:f7:94:7b:ef:b4:ab:
         0b:b3:36:fa:8c:80:37:eb:25:bd:08:78:f9:e4:c5:b6:aa:77:
         1b:4a:49:9a:ff:69:bb:1f:70:78:cd:f5:f0:0b:d9:4d:82:57:
         7c:41:51:d4:cc:67:9a:b8:77:b2:09:2b:92:ed:45:39:e5:b0:
         d3:f4:d6:83:ae:f3:ae:3c:ee:0e:25:7c:37:1e:78:80:14:dc:
         62:31:23:2a:8c:ba:c1:0c:6f:fb:28:15:1c:88:d3:fb:4c:b2:
         d1:cc:5d:81:bd:de:23:f8:08:59:f1:ff:79:fc:35:01:bd:58:
         db:16:5c:8c:01:24:2a:37:78:9a:58:04:8d:af:5f:51:60:90:
         d4:50:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:45:15 2025 by rpki-client