Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          iSzHAnDbto5b7ucKu1KZKcNiEAXVpTxRe60GGzbP1Jc=
Subject key identifier:   DC:79:32:E0:12:30:88:68:94:95:FA:09:A0:E2:0B:F6:6F:AD:2E:7B
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          BD
Signing time:             Thu 21 Aug 2025 06:05:16 +0000
Manifest this update:     Thu 21 Aug 2025 06:05:15 +0000
Manifest next update:     Thu 28 Aug 2025 06:05:15 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: VnTw7kkko88UosVFWQOrfmmE4oEEdy48geDaYXct10s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 06:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Aug 21 06:05:15 2025 GMT
            Not After : Aug 28 06:05:15 2025 GMT
        Subject: CN=68a6b71c-6ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:3d:ff:b1:6d:20:3c:47:e6:8a:7d:cc:d7:
                    28:79:96:d4:67:b7:43:4e:bd:db:2f:4d:dd:45:bb:
                    5a:f4:10:22:56:8c:35:74:52:09:62:84:22:f9:ee:
                    b8:6f:a2:53:c1:76:1c:d0:fa:f4:77:7c:ae:53:eb:
                    6e:c1:2b:f0:e9:6a:a0:05:12:34:90:b3:73:bb:c0:
                    1e:e6:fb:da:8b:51:50:ad:ab:c9:03:b9:92:ef:61:
                    ca:41:fb:47:df:a2:8c:10:97:29:87:ac:ed:75:da:
                    9f:a6:5f:9e:0a:b5:5c:41:bc:61:78:a7:d8:89:c9:
                    3e:3f:a9:23:48:37:3d:17:d6:e0:81:d9:c0:2e:b9:
                    9f:74:12:02:2c:75:27:7e:94:20:da:cb:73:af:cd:
                    a5:c0:71:a0:b8:97:86:56:b2:66:98:e9:1e:c9:46:
                    bd:74:5f:89:47:01:e1:c4:59:81:04:14:d4:09:7f:
                    fd:a7:86:d2:58:aa:4c:d1:70:6c:6b:ed:09:ce:b3:
                    11:18:e3:5c:1b:ab:85:67:a8:75:64:31:61:7b:d0:
                    ba:86:17:3f:75:b0:95:70:5b:fa:5f:8b:f6:c8:e8:
                    eb:d7:dd:ee:c8:b0:2d:a1:32:33:ee:c4:f7:05:0d:
                    a1:9b:1e:fd:84:99:f1:91:33:53:2a:74:ff:62:82:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:32:E0:12:30:88:68:94:95:FA:09:A0:E2:0B:F6:6F:AD:2E:7B
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:dd:76:d9:39:42:2d:b0:10:a1:c3:9b:a8:a4:46:40:d5:
         b7:32:7a:22:1d:d8:b3:8b:22:44:ac:bb:3b:1a:a9:52:e6:16:
         4c:56:ee:2c:93:e5:8a:a7:6f:4b:27:15:d2:7e:04:ac:7b:86:
         3e:a0:5d:10:e0:ff:52:b1:1c:f4:1e:86:f3:d5:d7:1a:20:5b:
         bf:23:2c:6d:d3:71:71:7f:b7:5d:24:43:94:63:66:2d:e6:b1:
         5a:47:79:71:a2:c5:8d:f2:9b:14:27:1e:40:56:ba:5d:1c:84:
         60:ff:21:65:08:59:d4:84:8c:4a:48:6c:49:4d:27:5e:a2:05:
         34:ca:32:86:ad:c4:b5:8a:eb:32:43:07:6f:4f:8b:c9:db:8f:
         49:41:cc:cb:79:e6:7d:e8:77:63:28:c6:b7:aa:36:5e:61:7a:
         e3:56:0d:f1:1c:03:96:a3:00:10:d3:b7:b2:17:28:78:9a:42:
         67:05:08:ca:38:0e:92:b6:65:7a:64:5c:04:55:09:a1:88:a5:
         95:0e:bc:76:b0:ad:26:4a:2e:90:e0:fc:d5:0e:4d:1b:4c:13:
         41:4e:e3:50:d1:4c:ef:8f:15:34:f6:2d:60:2d:e6:e6:25:9c:
         fc:f4:08:2a:a1:24:68:45:e9:42:41:7d:d5:24:82:3f:6c:ab:
         48:d7:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:35:12 2025 by rpki-client