Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File:                     7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier:          YeymIdqWmImAXI30hUduAKW/cLldrS0lv3g7pkcmZs8=
Subject key identifier:   DE:C9:F0:37:E8:8C:52:4B:8C:4F:55:B5:8D:0F:C5:7F:19:4B:16:47
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer:       /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial:       332F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number:          3C58
Signing time:             Sun 24 Aug 2025 15:20:54 +0000
Manifest this update:     Sun 24 Aug 2025 15:20:54 +0000
Manifest next update:     Sun 31 Aug 2025 15:20:54 +0000
Files and hashes:         1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: UEiQItTBQctTahnHph2nsJI3xTMJT6OZVVqAvLUZys4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
                          rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 15:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13103 (0x332f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
        Validity
            Not Before: Aug 24 15:20:54 2025 GMT
            Not After : Aug 31 15:20:54 2025 GMT
        Subject: CN=68ab2dd6-9eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:b9:62:bb:29:85:47:f8:04:30:9f:22:c8:
                    48:be:6e:b5:22:19:30:a1:5b:f9:27:af:b8:53:b4:
                    ab:36:7f:a3:69:90:07:85:bb:ba:17:de:b0:29:a8:
                    a7:fc:2d:91:f4:76:1e:38:1e:59:83:32:17:74:23:
                    a5:96:f5:0d:c1:cc:85:03:64:e4:fd:07:5f:20:37:
                    bc:2b:50:75:75:97:32:27:8b:95:e7:a7:a8:29:56:
                    bd:1e:7d:61:18:39:e9:88:e3:bf:d8:27:75:ee:52:
                    3d:c5:f9:9d:d5:8e:70:8c:e4:55:e4:c1:99:6f:22:
                    f0:fa:e9:ee:5a:91:19:1e:10:9b:a1:e8:7a:23:6a:
                    2f:7b:7b:3e:c2:4a:2f:c2:f2:f8:e9:8d:1e:2d:47:
                    02:25:5e:e0:2c:a0:e1:d1:d5:e1:92:3c:ac:29:6a:
                    03:59:ec:b2:8b:5a:1b:09:e5:c8:96:d5:01:8f:9e:
                    90:ec:49:e5:34:f3:66:9d:f1:ec:32:57:34:be:6e:
                    44:95:df:9e:b7:7c:e1:dd:61:87:ba:25:00:bb:19:
                    a2:4d:29:c7:98:75:9b:90:7f:f5:c4:20:db:70:00:
                    79:5b:6d:c5:ae:1a:07:6e:27:2a:52:10:e4:2d:c7:
                    25:bf:a2:9d:73:2e:b0:3f:07:37:50:f8:b6:91:e6:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:F0:37:E8:8C:52:4B:8C:4F:55:B5:8D:0F:C5:7F:19:4B:16:47
            X509v3 Authority Key Identifier:
                keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:f3:b3:24:5f:54:4f:fc:ad:c3:bf:74:9a:a9:2f:ea:51:
         c3:95:56:f3:3e:97:7e:64:bb:68:80:8e:98:f6:89:23:ff:21:
         eb:7f:9b:28:a1:19:9f:bd:e0:aa:64:db:cb:f8:e0:ef:c3:86:
         2a:e6:cd:b9:d1:7c:ff:86:c8:60:3c:a5:41:21:a9:6d:6b:26:
         69:fb:52:9a:1c:e9:35:6f:cc:d5:23:9c:d9:fc:88:7e:3e:bb:
         41:5c:93:ae:fe:0f:5e:69:29:ab:94:f6:0c:8d:34:e6:4b:df:
         90:e2:8c:0e:24:9c:8b:d7:f1:9d:24:38:b8:01:e5:dc:92:79:
         38:84:99:e3:3c:aa:62:e8:ee:10:24:75:bc:fc:24:ac:6f:f3:
         99:7a:f7:2a:97:55:59:42:40:f0:ff:5a:1a:84:6c:42:c3:d8:
         c9:dc:42:bc:13:1f:69:8b:e7:11:9e:c4:5f:83:89:15:41:e6:
         20:04:31:87:6a:53:c6:76:ad:03:c5:ea:ff:59:d2:c7:1e:df:
         07:08:80:96:8f:3d:44:01:a3:19:3f:db:c8:2e:d4:62:62:5a:
         40:9b:5d:76:77:5c:6a:b8:d3:13:5f:09:95:98:26:4d:f4:07:
         4c:c5:6a:0e:a5:f2:27:26:a1:71:e6:f7:5a:e0:11:bf:41:32:
         b4:f9:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:18:35 2025 by rpki-client