Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          pkZVly1hBOjZEO2S11VuKS45TtjFmDTE58qiJLY81Fc=
Subject key identifier:   7C:52:D7:59:A4:B1:B5:4D:67:4E:43:47:53:0E:BE:1C:7F:51:F9:4B
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       067A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          0673
Signing time:             Tue 22 Jul 2025 22:46:52 +0000
Manifest this update:     Tue 22 Jul 2025 22:46:52 +0000
Manifest next update:     Tue 29 Jul 2025 22:46:52 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: Z6VbgWpLwu8YMu8PZd+54dIGmBD2saRRXJyI/Bv2JCI=)
                          2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 22:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: Jul 22 22:46:52 2025 GMT
            Not After : Jul 29 22:46:52 2025 GMT
        Subject: CN=688014dc-2f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:ce:11:ae:ac:ce:9b:f5:b1:53:10:e0:4f:
                    f3:19:5c:fd:6b:ba:3a:42:f1:07:78:b4:c9:15:89:
                    f2:ec:86:cb:eb:b6:d2:e5:ea:6b:5f:69:95:39:82:
                    b9:83:7d:14:07:a5:1c:94:9a:5d:7d:e3:71:5f:8d:
                    1e:fb:59:12:69:a6:75:e0:aa:3b:3b:70:f3:d2:b6:
                    08:fd:d6:fb:bd:76:1e:35:c0:d5:d8:a9:d5:a1:4d:
                    d5:0d:2c:a9:8f:d0:da:81:00:ac:31:c2:7e:87:96:
                    e5:a9:2e:94:b3:b0:d1:b0:6b:7f:a5:63:01:b5:67:
                    84:07:91:b6:05:ef:34:c9:43:bd:7e:e7:ba:1c:a1:
                    83:c9:59:d4:c6:a9:65:58:46:f8:28:2e:db:a3:7b:
                    0c:6f:8a:d5:d1:ac:c9:59:85:28:d3:93:0f:d6:2e:
                    40:c7:33:4f:43:85:e4:54:03:7b:b3:97:05:11:b2:
                    61:d3:44:1e:7e:77:75:20:b2:de:44:7d:ac:b0:10:
                    da:2b:9b:f3:5a:63:63:06:29:24:1f:6c:38:47:ed:
                    87:8f:80:9f:6e:e2:44:f9:92:69:ea:4e:0d:8d:a8:
                    ee:16:24:d6:0d:33:9b:98:bc:27:cb:19:90:d2:fd:
                    f4:92:ab:b4:32:3b:34:32:70:c5:7e:fa:5f:85:f2:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:D7:59:A4:B1:B5:4D:67:4E:43:47:53:0E:BE:1C:7F:51:F9:4B
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:aa:51:df:ca:46:e2:6a:8a:87:c0:1f:32:e2:91:9f:a9:dc:
         f8:3b:c8:96:8a:a4:9d:32:a4:e0:4d:f5:6a:71:ed:94:83:e6:
         ab:30:8a:fd:6e:91:d3:02:18:13:c5:99:48:f7:72:7a:89:98:
         2c:6e:53:19:4f:4f:94:2c:7d:6d:fb:19:ad:2a:0f:86:46:7a:
         04:42:01:3f:5f:4c:ff:b4:67:a8:4c:4a:bf:27:70:b3:40:6a:
         24:8a:3f:2a:2c:e1:39:9f:8e:f3:86:e5:f3:e7:6c:d8:2d:81:
         09:80:f3:bc:23:3f:fc:67:5e:d6:35:09:1e:11:37:9a:22:1a:
         08:70:8f:aa:72:6a:bd:3c:d2:e5:68:0c:56:f6:c6:80:4d:60:
         ea:8d:af:eb:45:0b:4b:77:80:db:a4:17:a3:c4:87:a6:b3:12:
         b0:5b:5f:7c:bd:bd:04:f3:22:f1:9b:80:ea:72:ab:00:10:62:
         0c:53:50:75:b9:73:1d:f4:b3:3e:ad:e8:60:04:01:e6:43:2f:
         cf:04:5e:75:31:6f:80:16:70:d5:f2:50:89:a2:6c:cb:70:7b:
         ea:a7:74:70:ab:ea:7c:f2:03:7a:37:bc:e5:cf:77:43:4c:87:
         2f:92:44:32:33:dc:2e:09:85:15:5c:40:c7:b0:03:20:8b:22:
         e7:1c:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:26:21 2025 by rpki-client