Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File:                     7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier:          yXVUCrgCjnXy4Twqx2dQScrUPRlF5+Huwm7rGa9+gAI=
Subject key identifier:   6E:4B:F7:00:47:2A:CD:77:4D:C4:93:DB:26:DC:8F:D9:0E:CD:9E:D5
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer:       /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number:          01BE
Signing time:             Thu 04 Sep 2025 23:26:53 +0000
Manifest this update:     Thu 04 Sep 2025 23:26:52 +0000
Manifest next update:     Thu 11 Sep 2025 23:26:52 +0000
Files and hashes:         1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: zV8W9t5zQE/Xn4V8SxLDTHaOFXdrcaISxgDwz05cS8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
        Validity
            Not Before: Sep  4 23:26:52 2025 GMT
            Not After : Sep 11 23:26:52 2025 GMT
        Subject: CN=68ba203c-ad2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:31:75:e2:a6:7f:88:81:df:09:18:2f:57:
                    1a:a9:ab:75:2f:c7:56:98:a8:99:e9:15:a1:10:04:
                    1b:66:ab:7d:ae:fb:4b:8c:1c:54:97:a7:2f:71:93:
                    bb:82:cd:5a:fb:b0:fd:7e:de:e1:17:46:6d:e8:65:
                    21:06:49:9c:11:78:17:64:71:45:7d:75:9e:ca:b1:
                    c6:d2:b5:08:f1:76:83:aa:c0:1c:23:e2:27:00:88:
                    ca:d9:ab:dd:6d:af:b0:ce:53:41:f1:88:f2:93:d1:
                    d7:fb:22:cd:a9:f7:28:91:94:bb:bd:39:a5:a1:1a:
                    fb:15:27:76:f5:90:22:1e:a4:8b:7b:7c:6e:a5:32:
                    1c:97:74:8e:08:0e:41:ac:9f:c1:2c:fc:8a:97:09:
                    41:fa:bc:74:4b:01:6d:3f:fc:ba:1f:4f:43:68:3c:
                    a7:f4:bf:d1:7d:5e:5e:e2:b3:1d:df:be:f9:8e:0f:
                    c0:9e:46:04:e5:f8:72:07:88:ee:37:a1:2d:84:0f:
                    e1:14:8b:7d:42:b0:ef:b5:f7:19:1a:5c:91:41:0d:
                    f2:dc:40:fe:03:15:0b:14:bc:cb:39:58:4b:92:ee:
                    d4:b8:de:9e:83:a7:99:64:c1:29:f4:be:23:1d:44:
                    33:31:6c:30:34:6e:82:39:0e:00:ae:2e:f0:3e:71:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:F7:00:47:2A:CD:77:4D:C4:93:DB:26:DC:8F:D9:0E:CD:9E:D5
            X509v3 Authority Key Identifier:
                keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:66:eb:94:bb:55:ec:46:a7:c1:2f:91:bd:49:0d:84:7b:f0:
         6a:8b:ef:4d:bc:fc:ef:e7:83:0c:fc:f5:5d:fe:2b:3a:a1:f0:
         2e:b8:16:a8:5f:a5:2a:c7:7c:63:ff:15:cc:c2:fa:70:38:2f:
         d2:ee:1f:01:6a:98:1a:55:75:0f:c4:fd:6b:e0:3b:b9:3f:50:
         7b:58:bc:d6:35:a8:f7:52:9a:09:52:6f:6a:03:02:e6:65:87:
         dd:65:e4:11:78:d1:e9:67:05:ea:45:e7:3c:18:40:b3:29:d0:
         b0:fc:c5:76:15:09:48:69:0e:a1:c3:78:49:ec:dc:e7:f2:d4:
         48:14:45:09:54:19:9f:e8:af:e2:70:8f:5d:dc:0e:11:a8:c1:
         be:27:8f:f9:8e:47:4d:0a:e1:b5:e3:c6:13:c3:f1:45:f2:c4:
         bc:7e:0e:03:be:8c:59:32:dc:d9:9d:0c:f7:e2:35:ec:1e:f6:
         b4:79:dc:b6:dc:66:7f:7c:9b:19:a1:58:11:60:43:3b:0e:57:
         c9:c9:53:e8:5e:35:65:0f:ad:8f:2e:44:b6:fe:5e:97:00:47:
         0a:df:40:e5:7c:82:b2:df:d9:c0:5b:52:20:2e:54:11:18:b0:
         77:d5:59:0b:9f:43:5e:0d:c2:6b:57:2c:e7:0e:91:96:19:35:
         3f:79:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:11:00 2025 by rpki-client