Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          fLA/nNmGVVLYf5+DlVbT9Q8DLdX5RkD33H39KAhEzj0=
Subject key identifier:   6B:2C:10:25:BC:AE:92:50:6B:99:15:03:CF:58:D4:69:FF:71:CC:E6
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          0750
Signing time:             Fri 18 Jul 2025 21:57:47 +0000
Manifest this update:     Fri 18 Jul 2025 21:57:47 +0000
Manifest next update:     Fri 25 Jul 2025 21:57:47 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: UXziWQpbgrdbmqajsvNDArKi47N63s3YuCc8J/V/XHU=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=)
                          4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Jul 18 21:57:47 2025 GMT
            Not After : Jul 25 21:57:47 2025 GMT
        Subject: CN=687ac35b-4371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:35:65:bb:d2:5c:5c:1f:5f:7c:56:7d:f6:
                    85:0e:b3:ec:84:f1:00:2f:9f:45:5a:51:4e:b1:eb:
                    c5:a8:27:e6:dd:ad:fb:0f:bf:e0:f6:49:98:9e:0a:
                    8d:45:6a:53:05:c8:43:91:12:6e:c8:c8:3e:f1:2b:
                    a7:04:6a:21:f2:2b:8a:95:f3:bf:82:3b:6d:05:ab:
                    68:d7:47:cd:10:c6:fd:4a:75:f1:4c:a2:1c:0d:0e:
                    59:ca:01:94:b6:96:58:99:50:2c:2f:be:05:c2:b6:
                    8c:07:00:4d:72:3f:74:0a:cf:f7:e2:60:84:1b:26:
                    ea:dc:31:c0:c2:f9:3c:4f:6a:e3:c6:e3:d6:61:bf:
                    34:6b:24:9a:50:1a:3f:0d:c5:fb:3e:bc:e4:92:3e:
                    ce:c9:94:69:2b:78:f5:4e:f8:86:ba:d2:be:01:f9:
                    f1:e7:79:71:21:ac:ca:c2:22:5f:68:63:bb:24:00:
                    21:6e:f5:70:ff:a6:ba:d9:a5:ea:d3:09:e3:b5:01:
                    e1:33:f3:39:e4:81:30:c5:38:3f:42:57:8e:06:76:
                    7e:2c:60:1c:73:36:ad:08:49:c1:6d:f0:fa:e6:91:
                    d2:14:a6:5e:22:6f:ed:26:c0:1b:43:b6:50:70:5c:
                    af:c4:c3:68:97:c3:97:7d:0d:9e:fa:7b:b7:16:e0:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2C:10:25:BC:AE:92:50:6B:99:15:03:CF:58:D4:69:FF:71:CC:E6
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:d4:96:ac:a6:f1:cc:69:e8:1d:65:03:15:8d:78:03:30:
         4e:df:df:b0:ee:83:76:89:f0:89:c5:ce:2b:d5:14:04:7a:45:
         41:31:0c:5e:1f:b4:c0:98:b0:c5:58:31:a3:cf:66:98:ee:5a:
         3d:c6:3d:02:76:ee:a5:17:d2:81:a1:b4:ff:43:b2:a9:81:84:
         7e:3f:16:af:71:48:47:a2:c4:3f:6b:7f:3f:b4:f3:58:21:55:
         50:04:d9:98:71:22:19:0d:da:16:5a:13:c9:05:b4:4f:bc:61:
         06:94:0f:0d:2e:f3:57:cb:9e:48:d4:3e:74:88:c2:7a:60:a2:
         c3:ca:8a:ad:83:dc:a1:5c:3d:90:8c:c6:36:ab:ec:c2:44:27:
         10:e8:48:1d:4c:a0:7e:71:a7:9a:d6:aa:29:29:94:4f:1a:37:
         04:aa:e1:5c:c2:95:5e:81:49:14:23:21:65:ff:fe:58:25:09:
         f5:22:f9:b0:87:67:ee:df:7c:ec:00:43:c4:cd:5b:38:16:9f:
         73:6e:44:ea:a5:f5:ea:4b:6f:a6:3e:d9:73:18:22:89:65:b7:
         8e:9a:8a:89:c3:46:b6:8a:00:63:18:f5:4c:5e:4a:23:3f:bc:
         96:82:b8:08:e8:05:63:22:28:cc:45:9c:51:4a:3c:fa:5e:30:
         85:b0:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:45:36 2025 by rpki-client