Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          TtJe5C79brh81OLsYYouiSQziNGBqKbTUtrhtaQuBAM=
Subject key identifier:   AA:C0:E0:73:FB:38:51:4C:05:0A:F5:FB:64:AF:20:9B:11:48:3E:79
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          014D
Signing time:             Thu 31 Jul 2025 04:37:52 +0000
Manifest this update:     Thu 31 Jul 2025 04:37:51 +0000
Manifest next update:     Thu 07 Aug 2025 04:37:51 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: sWQlO5ww2jzNFYCDUAE8nH5pOx73UVxK06m/kbq9plw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 04:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Jul 31 04:37:51 2025 GMT
            Not After : Aug  7 04:37:51 2025 GMT
        Subject: CN=688af320-ac2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:44:ff:32:e7:c0:02:62:bf:63:ef:24:6b:
                    ee:3a:2b:b6:21:ef:c9:7b:d2:d7:56:c5:7f:5d:88:
                    94:a7:5d:87:e8:61:51:4f:b3:3b:a5:42:44:fb:5c:
                    0f:5e:8f:9b:a1:64:ec:9f:5a:f8:47:9e:77:7a:77:
                    4d:51:1b:75:df:93:41:6b:5f:58:4c:ac:86:e0:29:
                    da:db:05:07:57:03:2d:b9:47:e1:ea:11:c0:25:8c:
                    80:93:af:e7:d7:e2:2e:7f:47:fc:44:e8:87:4f:35:
                    25:57:1f:64:7f:1b:b4:e1:66:c8:6c:2b:2a:58:e0:
                    be:ee:04:e3:fd:51:90:75:02:3d:63:79:be:87:7e:
                    9b:67:4c:e1:ba:fc:f0:a2:1d:64:02:9a:81:f2:53:
                    e9:4f:3f:12:3f:a2:64:e4:f6:3d:90:cd:0b:b2:9c:
                    ea:9b:84:48:8e:b3:7a:77:7e:33:0d:2e:5f:ea:9e:
                    0e:84:22:bb:31:bb:b5:d7:54:b1:68:b2:58:45:84:
                    4b:ae:37:7d:9b:77:0d:c4:a9:e7:93:53:76:9f:16:
                    42:55:27:2c:98:c6:a8:91:63:34:dd:f5:9a:07:7f:
                    10:8c:b0:5c:e3:99:5f:5a:86:73:55:79:1d:e3:e8:
                    8d:16:c8:fe:28:e4:7e:4d:53:e6:e8:7f:4a:01:c6:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:E0:73:FB:38:51:4C:05:0A:F5:FB:64:AF:20:9B:11:48:3E:79
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:c8:7c:38:c1:7a:e7:8f:70:ab:71:36:a5:0f:ec:a9:71:
         5b:ea:56:28:5d:2e:d1:33:a4:82:60:d2:a4:ec:6d:6e:c9:c8:
         c6:68:c3:c6:50:4e:cb:7e:57:b1:26:a2:f1:98:fd:7f:28:2f:
         b0:77:d7:96:a6:c7:be:ec:9a:10:33:21:bb:61:34:d1:7b:bb:
         c0:5c:76:84:ce:f6:c0:1f:25:1e:31:33:10:fb:38:8b:b6:31:
         cd:b8:fd:24:90:94:9f:fe:a7:4f:8e:31:20:3f:a2:f0:3e:6a:
         4e:30:8b:d6:1e:ed:4b:75:d0:d2:45:7e:29:c7:d7:82:2a:94:
         9a:50:98:62:28:d8:d0:28:9f:3f:8c:69:a3:4c:1a:da:95:ce:
         16:4a:35:8e:e7:c8:08:fb:11:3b:b8:46:cb:77:bb:d3:c3:c7:
         43:1e:92:1c:db:51:6a:a4:33:bb:bd:7f:22:6b:1b:01:3a:ab:
         e0:70:f6:de:7a:a6:77:be:a0:6b:fe:13:aa:89:0f:65:0f:5f:
         3a:7b:b1:33:3b:aa:da:87:c1:6d:9e:af:15:a2:fa:c0:25:9c:
         d1:02:31:42:9e:7a:bb:1f:d7:e6:41:76:93:46:04:c4:73:64:
         6b:36:ed:26:78:58:e8:b0:83:c6:86:1c:64:09:68:25:87:8d:
         f6:37:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:22:38 2025 by rpki-client