Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
File:                     ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json)
Hash identifier:          64eKMvUBPYtv/CkdKyMp6oC9QauNo60Ld0Sxa0IYAt0=
Subject key identifier:   57:83:F7:43:7A:D6:E4:E9:68:C6:64:73:CC:32:29:2D:F6:06:D7:E6
Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1
Certificate issuer:       /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1
Certificate serial:       092B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
Manifest number:          0924
Signing time:             Sun 24 Aug 2025 20:16:31 +0000
Manifest this update:     Sun 24 Aug 2025 20:16:30 +0000
Manifest next update:     Sun 31 Aug 2025 20:16:30 +0000
Files and hashes:         1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: mhVYJ/CVYbWzCHLnxReK5+Ji5orDMdi/+fS5/Ha7DRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl
                          rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6721, serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1
        Validity
            Not Before: Aug 24 20:16:30 2025 GMT
            Not After : Aug 31 20:16:30 2025 GMT
        Subject: CN=68ab731f-d3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:1a:5c:cd:90:f0:3c:29:dd:06:83:0e:df:
                    a0:69:89:70:35:34:2a:4b:37:55:b7:8c:21:ef:b3:
                    6a:e2:e6:45:cb:d6:54:e1:6f:38:7a:f6:d7:0b:e7:
                    2b:95:d4:e0:72:e3:a7:5d:ac:4e:48:9f:13:b9:50:
                    6e:9e:c3:90:62:8b:2c:6a:8a:af:df:b4:ed:82:5b:
                    ff:c8:0f:54:ed:8c:f0:11:b0:7c:6d:ee:e6:a9:4b:
                    a6:35:61:0c:38:13:1a:2d:9a:72:48:14:a7:d9:1b:
                    4c:a8:ae:4b:4a:be:7d:5d:a3:fa:40:18:26:5f:70:
                    a4:ad:f6:a0:49:4d:35:22:52:01:ce:b3:89:fa:d7:
                    37:f8:3b:bd:38:48:b1:b6:17:83:44:66:bf:2d:a2:
                    90:45:6c:df:9b:bc:b2:38:78:03:95:94:64:29:2b:
                    95:66:1f:5d:aa:b8:72:23:bd:46:13:83:83:68:e5:
                    32:99:04:34:21:c1:ed:97:3b:21:fb:de:f7:39:c6:
                    e9:5c:95:2f:3a:43:3c:8e:60:df:a6:fb:e2:f8:64:
                    99:0f:3b:0a:21:f8:d6:58:a2:90:46:c0:04:1c:e6:
                    96:0c:b3:7f:36:dd:33:b0:f1:bf:ab:98:ac:8c:e8:
                    2f:04:d8:6b:37:8e:be:6b:34:fa:c4:58:a2:4d:0b:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:F7:43:7A:D6:E4:E9:68:C6:64:73:CC:32:29:2D:F6:06:D7:E6
            X509v3 Authority Key Identifier:
                keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:64:29:67:e8:34:a7:e8:90:1e:88:40:16:ee:7a:2d:f6:
         80:20:98:d9:5b:29:17:e1:f1:05:dc:5f:de:3c:b9:db:84:ce:
         3a:93:b7:6c:62:77:b2:15:3d:70:45:83:49:f2:c0:be:06:e4:
         38:29:f6:9b:06:a4:6f:44:57:a0:67:d3:cd:46:f9:8a:a2:88:
         61:3d:2b:91:df:25:cc:5f:bc:46:04:7e:d2:10:f1:98:41:8d:
         8c:8a:ca:6f:af:5a:f5:93:6d:38:0a:16:c0:34:82:66:88:37:
         49:d3:e0:42:bf:3d:82:f2:01:ee:d2:04:ed:c2:c6:63:a1:a8:
         79:e7:c9:e5:42:26:e8:72:26:1a:c8:2f:f6:45:0a:bc:b3:79:
         e4:47:91:61:3b:54:e7:e5:1e:db:fd:3f:d7:85:ec:ea:3e:20:
         98:23:65:7a:c8:8d:86:57:52:f0:1f:6f:fd:69:33:d5:d8:f7:
         de:8c:bb:81:68:04:5a:a6:a1:c1:d9:85:21:71:65:99:68:72:
         82:f8:36:a0:72:b0:59:80:3e:d1:e7:63:01:9c:4d:0c:df:b6:
         da:ef:7f:eb:b0:f1:f4:37:0d:de:8a:38:fd:0d:98:76:52:15:
         37:f6:57:9f:99:1a:9c:ec:4a:39:bd:e6:38:5b:00:0a:5c:d6:
         d5:92:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:16:07 2025 by rpki-client