Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          tfI+OStqj+QRjYXcnV11sgw3UDP9oiSiA2Fr3tLykOg=
Subject key identifier:   7D:5E:0C:C3:5F:6D:1D:84:7C:B0:47:6D:EA:44:12:1A:0D:35:81:95
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          BF
Signing time:             Sat 23 Aug 2025 06:04:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:04:46 +0000
Manifest next update:     Sat 30 Aug 2025 06:04:46 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: yTvb2MckEPEflb3yMwtWXnW8w/7Uu7TD4cwiS2Bh7c8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Aug 23 06:04:46 2025 GMT
            Not After : Aug 30 06:04:46 2025 GMT
        Subject: CN=68a959ff-a27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:ac:92:4e:41:88:64:c4:60:80:39:73:b0:
                    34:52:d0:af:49:d9:29:4e:cd:f4:7a:df:ee:3a:ba:
                    bf:8b:dd:b9:b5:37:94:b3:55:82:64:ed:7c:10:e8:
                    83:44:5f:53:cd:a1:c7:5f:92:31:92:8d:c8:24:67:
                    0c:36:dd:81:8b:8b:b7:c3:81:9b:1c:3b:bd:f1:07:
                    38:2f:b5:48:e8:f7:03:0e:7a:50:ad:96:4a:35:4a:
                    0f:a3:04:e6:b1:b9:9b:c8:ab:21:d9:97:fd:8e:57:
                    35:2a:39:39:23:23:cf:61:84:cc:c3:20:3c:53:14:
                    2d:60:70:3d:40:fb:0f:af:15:26:21:df:0c:28:73:
                    a7:4a:b0:f4:4e:7c:c0:b5:9c:de:92:4c:29:eb:ec:
                    de:3d:d7:b4:0e:b2:e9:04:51:c8:3f:74:3e:b0:47:
                    7e:84:34:51:c5:17:24:3b:ea:b4:2d:e8:f9:57:e3:
                    25:62:20:d1:63:33:b4:d6:b4:4e:7b:92:d6:a0:ab:
                    b3:64:eb:c0:57:cc:08:5a:78:69:70:62:50:03:c8:
                    9c:a3:9c:06:60:c4:bc:d2:cd:cf:66:86:3f:e6:fd:
                    d1:51:06:c7:0c:f5:cb:6f:ef:76:5c:95:07:f0:4e:
                    81:c9:1f:3c:4b:b6:c0:58:4b:ed:4d:87:1b:f2:ea:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5E:0C:C3:5F:6D:1D:84:7C:B0:47:6D:EA:44:12:1A:0D:35:81:95
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:02:9d:87:d4:90:0d:74:ff:69:47:86:08:7b:5e:32:9f:
         f3:42:1e:ab:cb:8e:07:51:0e:46:0e:f4:63:b3:e2:be:85:db:
         0a:aa:91:ba:85:2d:5f:5b:3a:d5:39:d7:74:38:33:f3:01:ee:
         4b:5c:2b:fb:17:49:ac:96:9a:7c:d5:0d:1b:a0:0c:76:ed:b3:
         0b:73:b7:93:65:ae:6d:6a:0b:2c:96:cc:99:3b:0d:f3:50:93:
         bb:b3:e5:0f:38:4c:5c:f3:c9:16:75:cc:d8:16:71:31:ee:65:
         13:76:86:83:3a:6a:e4:38:32:a2:6a:95:9d:2c:d7:10:ef:18:
         81:c7:e4:ca:31:2e:6b:bc:25:79:e9:37:ee:cf:3d:a7:07:5e:
         da:42:70:8d:1c:b3:03:99:70:09:9b:25:e4:65:3e:74:17:a4:
         90:12:65:97:da:c1:8f:60:88:de:e1:06:ae:79:2f:ed:45:ff:
         60:3d:c3:dc:4c:ab:fd:73:a0:db:36:bf:86:ee:ab:53:06:50:
         f0:88:3f:75:5c:18:75:e5:7f:b4:7a:8b:1c:34:f6:70:f4:c7:
         53:d9:8b:a1:e6:99:d9:a3:e0:a0:a7:96:d3:a1:53:11:ca:82:
         45:52:1e:8f:88:9e:9a:32:52:80:82:23:e8:e2:db:8e:2d:2d:
         27:07:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:50:07 2025 by rpki-client