Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          QAdFzxKIh1g49r1HrZdH1AmfGUriel5owyVgvZ2TkTo=
Subject key identifier:   D4:A1:E1:98:4A:70:53:56:6B:C3:8B:89:17:61:9D:4C:CD:93:DE:0A
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       34B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          34B2
Signing time:             Sun 24 Aug 2025 14:54:54 +0000
Manifest this update:     Sun 24 Aug 2025 14:54:53 +0000
Manifest next update:     Sun 31 Aug 2025 14:54:53 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: AhuFF9PPgavEfKaC1v0MsO9y0G/9WjJvgKbv5LnFPj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 14:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13490 (0x34b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: Aug 24 14:54:53 2025 GMT
            Not After : Aug 31 14:54:53 2025 GMT
        Subject: CN=68ab27bd-391f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:60:85:65:3d:5e:8b:90:90:6e:68:99:d7:
                    90:10:bd:69:01:10:20:a5:78:5d:21:b4:50:3e:66:
                    d3:1f:61:e2:92:5b:0e:ea:c1:12:ae:cf:2a:e5:56:
                    88:f3:de:c0:96:b0:77:9f:a6:23:7e:ce:83:d4:52:
                    4a:59:ab:e6:48:e4:57:b8:9f:1c:e2:48:85:a2:ab:
                    8c:d9:04:72:64:d1:28:ee:06:b8:d1:91:20:ab:a2:
                    c4:1d:b4:28:4a:f2:d5:98:84:1c:36:a4:51:5f:17:
                    ee:35:44:35:5e:f6:0b:f0:2f:ec:26:e9:cb:9a:7b:
                    9b:b2:45:ff:3e:46:6b:ca:6b:9c:34:b8:7c:6b:38:
                    58:6d:d4:79:e0:9d:68:40:43:a9:49:5b:12:db:e7:
                    f4:77:8f:e3:09:40:93:b8:c3:32:2f:2a:de:d3:f4:
                    11:8f:21:df:91:08:39:7a:7b:91:a8:c9:e2:1b:e0:
                    ef:f3:55:4c:e5:b5:00:c0:24:04:72:57:1b:58:18:
                    0a:f1:3e:e8:20:02:ee:d9:8e:30:c4:53:77:08:c1:
                    23:71:c4:da:3d:b5:38:a2:f4:19:fd:be:f4:87:e9:
                    8a:a5:be:56:9c:c9:04:d9:37:a1:30:07:fd:73:53:
                    82:7f:3d:f2:03:d0:18:87:d1:60:44:87:5b:8f:9e:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A1:E1:98:4A:70:53:56:6B:C3:8B:89:17:61:9D:4C:CD:93:DE:0A
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:09:59:a1:42:3d:7b:75:94:43:2b:8a:83:d9:0b:c8:15:
         ac:52:8f:26:99:fe:01:2b:84:e7:e8:93:5f:9f:a9:97:bb:50:
         5b:01:b3:6f:3c:e2:81:a5:89:87:08:b3:0f:5d:dd:be:29:18:
         bd:d0:b3:68:1d:b7:33:a7:45:67:47:7a:1f:d4:d3:27:c4:e1:
         62:64:81:eb:18:8b:9e:99:63:ee:21:9b:37:dc:05:b8:18:31:
         c6:45:ac:ff:24:f8:d2:c5:5c:b5:3d:ad:1d:42:3c:fd:71:0d:
         8d:72:19:7b:85:57:1c:20:8a:c1:c6:2b:f0:51:6f:2f:e0:d5:
         fb:28:0e:50:8e:05:d6:12:84:be:a9:80:ff:db:fb:36:ee:e5:
         04:b5:53:74:45:9a:a9:35:c7:e3:06:d5:eb:4b:ac:43:4e:e0:
         d5:c8:1d:7a:0a:cf:c2:59:28:56:64:58:a9:fd:81:aa:84:1c:
         16:40:f5:94:95:b4:60:04:4e:f5:55:39:e9:a6:2f:98:06:04:
         b0:0d:e0:32:6b:76:b4:c9:4a:68:7e:37:43:fc:40:be:e6:ff:
         ef:83:6a:dc:29:22:39:03:54:4d:a2:34:78:81:f5:5a:bd:dd:
         6d:50:09:c8:16:5f:26:11:ed:c2:70:67:97:d5:a2:ce:d1:bd:
         bc:7b:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:58:25 2025 by rpki-client