Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File:                     aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier:          MurfUNNIJbzFZww97WhvTfly+j5EeUtDQuEQ8bM7fQc=
Subject key identifier:   01:AC:59:26:CF:C9:16:6F:B3:6C:E3:46:7B:2C:7C:FD:61:0F:E9:1D
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       229B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number:          229B
Signing time:             Sun 20 Jul 2025 14:40:48 +0000
Manifest this update:     Sun 20 Jul 2025 14:40:48 +0000
Manifest next update:     Sun 27 Jul 2025 14:40:48 +0000
Files and hashes:         1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: ThnyxbZCgiWjSLl7ts9aFeJk4XVWPxbU5AVWuFepeUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8859 (0x229b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Jul 20 14:40:48 2025 GMT
            Not After : Jul 27 14:40:48 2025 GMT
        Subject: CN=687cfff0-b601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:86:23:a2:02:d4:eb:d2:33:b7:4a:65:f3:85:
                    38:d4:5d:a0:3c:a3:08:66:8d:9a:71:20:4f:7b:69:
                    5b:bf:84:bc:a2:cf:cd:50:71:d5:aa:60:59:ac:31:
                    28:a5:a5:31:f6:c8:49:06:2c:05:8a:96:87:d1:9f:
                    f9:42:b9:a5:43:f3:09:ad:08:5d:0e:bb:6c:6f:20:
                    3c:5a:11:3a:4e:1d:01:b4:cc:60:05:1c:3a:95:07:
                    77:18:f2:70:ab:f7:3e:d2:21:f2:23:d3:d3:c9:c4:
                    dc:fb:62:06:f9:e4:74:a9:23:01:e9:96:32:9c:d4:
                    41:64:f1:92:bf:1f:99:ba:93:45:59:0a:a0:d0:b4:
                    3b:87:82:e0:80:50:4a:f9:1a:a7:73:6b:d9:e4:92:
                    96:4a:36:fd:e5:c2:85:6f:8d:f6:cf:46:dd:82:d4:
                    95:c9:fb:79:16:8f:98:de:da:c1:df:23:d9:e8:f0:
                    c7:66:5e:fd:6b:64:cb:1b:4e:cc:2e:96:e1:14:4c:
                    82:57:d1:84:b6:f9:cc:e8:25:a6:dd:14:e2:50:94:
                    22:95:d2:c1:ff:61:b4:79:8d:98:d0:34:12:6c:2b:
                    45:d2:4a:44:a1:60:1a:62:4e:d9:a8:27:1e:3b:b2:
                    3b:45:cb:bc:be:cb:e2:ef:ed:08:b6:15:d5:db:28:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:59:26:CF:C9:16:6F:B3:6C:E3:46:7B:2C:7C:FD:61:0F:E9:1D
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:69:63:28:b4:df:7b:0c:0e:bc:9d:81:52:8c:69:dc:8e:
         40:9e:b4:7a:f4:2f:b7:b7:b1:98:91:21:30:b1:01:07:3c:22:
         5a:3f:06:a0:a1:e7:f8:02:e5:fc:5d:13:c4:58:33:d8:32:4d:
         2a:39:d8:04:0b:ce:52:b8:f5:a8:bc:68:ff:b6:dd:6b:78:a7:
         26:73:76:2d:0c:9c:83:b6:9f:9b:37:05:62:d4:b3:a5:00:df:
         d3:ef:fb:50:61:1b:53:0a:0a:2a:f5:d8:22:83:c1:3d:d1:1a:
         0d:e4:9b:3f:cb:60:b4:19:24:8a:7a:aa:1b:fd:2b:e9:00:ef:
         e8:4c:23:ac:60:88:ce:57:9d:44:b6:8f:08:29:ff:f8:b6:a4:
         bb:92:5b:40:e5:18:1c:a1:73:c1:33:be:49:e9:2a:a2:a9:ad:
         50:bb:57:47:3b:10:bf:17:c7:8b:b2:fc:f9:ca:b4:66:10:56:
         16:4e:56:6a:0c:e1:20:fd:97:30:3f:78:01:a7:4f:e3:1c:ae:
         69:b1:42:d6:95:5c:db:1c:9b:7e:bf:16:42:bb:5d:d7:bb:27:
         9f:dd:23:ed:dc:1c:89:51:e0:28:45:55:74:8b:40:65:28:2f:
         dc:04:98:94:c7:bf:00:a8:c4:3d:2a:6b:54:1f:be:86:e2:f7:
         8c:c2:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:15:01 2025 by rpki-client