Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
File:                     Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json)
Hash identifier:          K9nNglbuGwYA+XmQSyE6C24tUmtebW4KgMdsYfK6eRo=
Subject key identifier:   88:F3:B2:A3:99:FB:61:88:7E:A5:32:E7:13:48:73:7C:09:18:A4:34
Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F
Certificate issuer:       /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
Certificate serial:       34AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
Manifest number:          34AC
Signing time:             Sun 20 Jul 2025 15:19:47 +0000
Manifest this update:     Sun 20 Jul 2025 15:19:47 +0000
Manifest next update:     Sun 27 Jul 2025 15:19:47 +0000
Files and hashes:         1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: p7IKlnl/jR2dJYhwnh6uweJI3l4K3VuR+ZbnlYGwnFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13484 (0x34ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
        Validity
            Not Before: Jul 20 15:19:47 2025 GMT
            Not After : Jul 27 15:19:47 2025 GMT
        Subject: CN=687d0913-7af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2e:ee:51:c9:ce:2e:3c:ac:4b:34:b9:47:31:
                    d1:ce:1b:f8:a5:60:1d:eb:bb:23:92:6a:1a:9f:e9:
                    77:d8:bd:47:83:c6:04:d7:f9:a9:46:eb:4c:91:d9:
                    fb:01:8f:44:29:0a:e7:4a:3d:f7:30:ad:6b:e2:43:
                    2f:72:46:00:0f:f5:71:54:59:1d:61:87:b6:ce:e8:
                    6c:25:00:ad:8d:11:89:d5:e1:50:49:3d:db:d3:fc:
                    b8:48:67:28:2d:76:a3:39:b7:c2:2e:02:8b:d8:64:
                    d2:26:39:3d:40:02:85:e9:e0:0d:eb:0e:09:4b:2b:
                    18:b1:bb:17:e6:33:f5:87:6a:93:8c:ba:54:83:2a:
                    ad:1f:76:e0:bd:3d:dc:cf:f1:49:1c:db:c7:36:cc:
                    90:81:44:d2:ba:60:4f:96:5a:37:ad:52:82:ed:f2:
                    c5:e8:7a:a9:9e:3f:79:63:29:65:07:c8:55:4e:d4:
                    0b:48:0b:12:1d:ff:68:ff:98:b8:3b:db:2b:04:54:
                    08:ff:fc:6e:96:7a:2e:24:50:21:de:f0:4d:68:e9:
                    2e:d8:b3:c3:dc:7a:42:31:28:c1:f7:8b:95:4e:31:
                    26:a5:f0:e2:68:46:60:2d:2e:1b:61:e8:96:58:c2:
                    88:79:38:b3:d8:ce:58:95:97:7e:c8:f0:6a:c0:6d:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:B2:A3:99:FB:61:88:7E:A5:32:E7:13:48:73:7C:09:18:A4:34
            X509v3 Authority Key Identifier:
                keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:54:cc:21:5e:98:28:d9:57:fc:9d:22:f8:f0:81:c7:76:
         3f:8d:43:ee:2e:d8:b1:c3:e2:c7:a9:e3:4d:a6:bf:26:ed:e5:
         f1:37:02:db:3f:e9:e9:d8:42:12:29:37:b0:ba:7b:a8:6d:5b:
         8c:93:64:4c:48:75:0d:10:38:0e:75:73:b9:81:d2:30:98:9b:
         62:08:87:e2:f7:c2:67:9f:19:6f:f8:15:06:67:ca:05:04:76:
         45:f2:0f:1d:42:15:8c:c5:9b:d2:88:c8:39:98:27:12:0e:f1:
         82:a6:75:9a:c7:db:a4:27:43:1d:db:4a:c1:3d:17:e5:fd:67:
         25:4c:95:15:80:6b:96:ef:ef:61:79:f2:0a:8e:90:90:5a:4b:
         17:4f:b2:8d:c7:8b:4c:d0:f1:13:46:ae:4e:33:f8:d7:fb:4a:
         db:ed:c2:20:cd:4c:73:43:e5:c9:16:62:95:23:22:54:45:8f:
         9a:26:ec:b0:95:9f:81:a8:74:7f:ca:8e:e2:0f:ab:47:bb:12:
         14:42:1b:a8:2a:86:24:c1:38:91:d8:e4:13:ca:a4:3f:b3:5e:
         d9:30:9c:09:85:4b:b3:87:6f:e6:c5:5c:19:60:9f:9c:d4:38:
         51:98:d8:87:75:ed:78:ab:b1:da:ae:ac:96:ef:06:7d:36:7f:
         52:e1:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:43:37 2025 by rpki-client