Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          3I7jUt6ltxoNuP2/nv95I36WzHgp20xmtXHiw6/y2HY=
Subject key identifier:   7E:8B:D1:7A:34:DC:4C:DC:17:8A:35:F2:5E:4B:65:FA:0C:B4:BA:15
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          B2
Signing time:             Fri 05 Sep 2025 06:28:25 +0000
Manifest this update:     Fri 05 Sep 2025 06:28:25 +0000
Manifest next update:     Fri 12 Sep 2025 06:28:25 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: flQHTXH/n5dswZZ7MvreFd+cPOPZR8CGKjn3dKNm7QM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
        Validity
            Not Before: Sep  5 06:28:25 2025 GMT
            Not After : Sep 12 06:28:25 2025 GMT
        Subject: CN=68ba8309-b53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:51:a4:e3:0a:e3:fe:bb:9e:a9:50:c4:1d:
                    52:ba:7d:72:e2:27:7e:01:a5:d6:99:88:b9:f6:78:
                    d4:48:ee:50:2c:ee:68:5b:10:74:e8:83:50:66:5e:
                    2e:58:6f:6d:ac:43:f2:a9:47:29:4e:91:8e:4c:20:
                    a8:62:1e:37:27:ca:d5:e5:3d:34:81:c1:e3:56:b3:
                    50:1a:6b:0d:5e:54:38:e2:92:fe:16:3c:7c:7b:e1:
                    55:0b:75:e3:0e:f0:ff:ad:67:52:cc:04:c9:bf:8e:
                    f8:b7:eb:76:be:ca:a9:ba:cb:30:d5:ed:d4:28:2b:
                    16:07:41:a4:9e:d0:f6:c5:74:66:45:a7:15:19:5c:
                    54:61:91:40:14:ef:ed:ac:8f:17:1a:0b:a3:b4:fc:
                    4a:e3:1d:63:82:3a:49:6e:34:b2:76:67:3c:d6:74:
                    42:94:31:48:80:42:d9:6d:71:f4:34:98:c7:83:1b:
                    87:f6:bb:a9:19:4e:bd:bc:a6:18:fb:9b:67:b9:ff:
                    cb:6b:42:a6:71:19:a1:3d:68:0e:a5:3f:14:62:9b:
                    54:10:8c:ca:bf:71:11:6f:40:f5:80:fd:b8:9f:c1:
                    7c:98:57:a6:99:a7:80:87:88:e0:08:a1:93:11:8e:
                    ab:93:a9:1a:d1:18:36:88:08:8d:12:5c:94:78:ff:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:D1:7A:34:DC:4C:DC:17:8A:35:F2:5E:4B:65:FA:0C:B4:BA:15
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:b9:7b:cd:1b:d8:e8:b1:ab:5b:3c:c9:be:c5:ac:59:f2:
         79:84:1c:23:1a:df:74:5c:4c:34:64:29:2c:53:a3:da:64:e0:
         b8:c9:18:b5:4e:a8:49:a5:05:f5:22:96:cd:0b:9f:04:90:16:
         37:82:ad:11:3c:39:38:81:08:77:c2:94:26:fd:8d:70:95:3c:
         e2:63:cb:98:81:b0:b9:d6:c2:91:96:45:b7:2d:3b:4b:d6:69:
         a9:a4:1c:8e:6d:1a:ff:76:58:c3:76:34:c0:aa:1e:82:a6:6d:
         8c:64:6e:2a:71:bb:71:64:99:0e:ff:b2:0e:58:4e:8d:a1:3f:
         ab:9f:1b:82:d7:f3:d1:65:eb:97:1e:e9:8d:77:94:28:cd:e8:
         16:17:ea:c2:32:80:74:0f:0c:5e:74:ee:02:76:b1:04:df:8e:
         b7:87:c1:99:92:77:89:e5:09:7c:a9:24:03:ee:cf:2c:3a:f1:
         ae:75:8a:c5:1d:65:f1:ad:45:fb:fe:9b:ee:c7:1a:73:3d:ad:
         d7:d8:ea:18:1b:c2:25:59:c0:c1:43:1b:54:d6:1a:cd:76:4e:
         ad:9c:91:ed:42:1c:f7:ba:9e:a0:d6:51:1a:4e:c7:88:2c:4d:
         ff:dd:83:12:e2:2a:14:0c:93:94:a4:63:0b:65:3f:20:a5:41:
         75:c1:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:05:09 2025 by rpki-client