Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
File:                     mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json)
Hash identifier:          z6ADsZwFqbgvifzZRHDS3V2/rVPSfs8Um6XOxS1qthw=
Subject key identifier:   E7:77:4D:A5:73:F0:53:F8:6D:30:E9:02:8E:E5:96:7A:7C:37:59:9E
Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38
Certificate issuer:       /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
Manifest number:          0E42
Signing time:             Tue 22 Jul 2025 18:17:01 +0000
Manifest this update:     Tue 22 Jul 2025 18:17:01 +0000
Manifest next update:     Tue 29 Jul 2025 18:17:01 +0000
Files and hashes:         1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: EgtHFr3dt9vkOFtyMCQhLBbtO0IVAAzNSUDEcLXtLDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl
                          rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 18:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438
        Validity
            Not Before: Jul 22 18:17:01 2025 GMT
            Not After : Jul 29 18:17:01 2025 GMT
        Subject: CN=687fd59d-77aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:83:4d:2e:2e:f2:82:c7:45:1e:7f:8e:a4:
                    26:f1:bb:d4:ef:05:44:e2:3c:68:ac:22:1c:66:02:
                    03:f4:6a:66:ec:32:b3:f3:86:63:63:cd:cc:76:17:
                    50:e8:6d:76:b8:09:46:8f:3d:f8:44:e5:99:ee:ed:
                    3a:cf:86:57:43:05:d8:4a:79:a2:59:72:e0:0c:9f:
                    ec:7f:16:d0:14:4c:34:59:ba:a7:73:16:ba:34:ae:
                    25:ed:1c:1b:b0:4a:36:61:43:74:9d:c8:0f:80:19:
                    b2:0a:43:17:ec:cc:98:21:1e:3a:9a:88:ef:e2:50:
                    67:74:48:45:06:e9:f5:26:2d:ab:81:78:81:29:8e:
                    6b:8e:f5:53:26:77:0a:32:f4:21:ac:d5:00:29:fa:
                    f6:48:e5:19:71:7e:e3:8a:4f:0e:ce:fc:51:0d:77:
                    20:92:04:1e:f5:89:00:1f:41:ef:89:2e:33:ef:4e:
                    49:bc:7a:71:fd:85:25:22:9b:ce:f7:24:eb:be:27:
                    7e:0f:c2:da:f1:26:ec:57:74:14:78:b0:d4:3f:12:
                    3e:9f:c2:fe:a1:0d:d5:ab:b9:e5:ea:8b:7e:ff:7b:
                    fb:be:34:d1:4f:61:f3:1b:9b:e5:43:01:cd:cf:1d:
                    bf:4a:25:08:d6:65:5e:87:d2:e7:8c:5d:45:23:d8:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:4D:A5:73:F0:53:F8:6D:30:E9:02:8E:E5:96:7A:7C:37:59:9E
            X509v3 Authority Key Identifier:
                keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:5c:d1:96:db:96:90:69:ad:67:d9:34:ac:a4:97:44:cb:
         0d:fe:84:a7:0f:f8:be:1a:b8:7d:08:5f:18:fd:5d:fb:95:9c:
         ee:cf:8c:0c:a5:61:40:60:02:a4:9b:6b:85:3a:a5:ae:77:fd:
         07:2c:2a:a0:01:0a:6b:eb:6b:dc:3e:8e:2d:bd:de:74:b3:53:
         48:df:61:8a:55:0e:8d:04:71:7c:3e:51:89:03:91:4c:5b:ac:
         9f:18:fa:ab:ae:3f:02:9a:7d:43:6e:1d:54:c8:c2:bb:47:d8:
         3b:14:2b:51:92:7a:87:98:bf:74:5a:0f:a7:ea:3d:1a:0c:fc:
         97:78:78:ed:93:6a:78:a2:3f:59:0e:08:8b:bd:7b:43:7f:19:
         34:15:2b:95:fb:39:0e:5c:98:ad:bc:f4:8c:61:ad:f7:57:76:
         a6:3d:53:1a:4f:66:2b:c0:0b:25:d4:03:77:9f:df:90:f1:f8:
         ad:85:7d:10:8a:00:33:53:4e:31:3c:e3:47:d4:c0:65:55:74:
         0c:ea:a8:05:9b:f9:e4:0b:0b:d4:20:71:59:e3:2b:a5:d6:80:
         8c:af:7e:9c:46:51:1f:9f:a9:3b:dc:bf:2b:72:9a:b2:03:83:
         db:7f:9b:d4:7e:d8:d5:23:c7:46:e2:fe:bd:0b:da:4a:f4:28:
         ff:b2:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:30:20 2025 by rpki-client