Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File:                     72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier:          jZZJhzEog24FdVqOhjq4oPBSQj/nLybntsxrbz+K0Hc=
Subject key identifier:   A9:9B:60:90:E0:BC:F5:A5:D7:1D:0A:1B:F9:F9:0E:1B:48:3E:E5:7A
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer:       /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number:          0177
Signing time:             Thu 21 Aug 2025 03:51:43 +0000
Manifest this update:     Thu 21 Aug 2025 03:51:42 +0000
Manifest next update:     Thu 28 Aug 2025 03:51:42 +0000
Files and hashes:         1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: L7Kt2zvxQJ9KeQyseYXqBhstgTmSH0H8iSH+R/KkPmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 03:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
        Validity
            Not Before: Aug 21 03:51:42 2025 GMT
            Not After : Aug 28 03:51:42 2025 GMT
        Subject: CN=68a697ce-6c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:d9:a0:5b:3b:81:d4:24:a6:58:f8:ae:bf:
                    76:f2:38:45:b0:62:27:0e:da:10:85:e4:b3:a3:2e:
                    fa:8e:82:61:7a:16:c7:31:88:a2:5d:d2:ac:46:d9:
                    ca:88:6c:87:65:33:dc:af:51:b5:69:58:41:f7:d3:
                    7d:9a:82:0b:17:c1:88:fd:ee:cb:62:3a:31:e0:d9:
                    6b:21:1f:df:f6:14:ae:81:db:bd:ac:ec:ca:0f:9f:
                    79:d3:f1:ac:21:e2:a8:99:2a:5b:73:bc:7f:81:8b:
                    40:8b:b9:a4:e0:25:7d:42:0f:1a:05:50:a3:b5:ee:
                    96:e6:db:fc:f4:10:ad:ea:8f:2a:55:f8:31:68:1b:
                    01:dd:16:0b:a7:36:7a:de:61:c1:a0:ee:1a:3d:4c:
                    18:ca:a0:c7:fc:c0:20:0d:82:a8:d2:4a:b6:47:f6:
                    ce:91:1e:96:95:ad:58:d3:a2:dc:52:61:75:da:7f:
                    3a:dd:f6:6b:8d:ca:43:6c:5c:e8:d4:ed:25:f8:25:
                    9a:e3:fe:fb:42:be:c3:49:28:05:0e:fc:5a:e3:7f:
                    df:49:bf:b9:7b:35:0d:73:8a:c9:d1:7d:67:ed:c9:
                    e3:43:93:87:b8:39:68:8a:de:9b:be:27:3b:81:3d:
                    84:02:5d:bf:21:51:fe:91:2f:41:0f:a7:c0:e5:f6:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:60:90:E0:BC:F5:A5:D7:1D:0A:1B:F9:F9:0E:1B:48:3E:E5:7A
            X509v3 Authority Key Identifier:
                keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:e5:c2:d1:c9:99:ec:19:0f:fe:17:66:44:b2:b4:7c:72:
         2c:c0:52:7b:f7:af:f3:d3:7d:2e:c5:99:e8:dd:e8:37:ac:32:
         f6:6e:27:c0:40:ad:14:3b:88:08:10:ff:02:ad:ee:ea:a9:38:
         63:9f:71:f5:26:ad:8c:a2:2f:03:6d:f5:0f:02:eb:82:9d:fe:
         a9:50:3a:a7:c4:a5:cb:32:49:3a:10:53:26:b5:74:09:2f:95:
         a2:13:57:0b:a1:87:d2:1c:0d:b7:76:08:be:66:39:c7:25:6e:
         cd:cf:a6:ef:99:a3:70:6b:e8:0b:0d:65:ba:11:51:81:bc:02:
         3b:34:02:c4:ed:b0:66:06:ad:a8:8f:3c:01:7d:5f:31:80:96:
         f6:82:56:47:c3:2f:87:1c:e4:32:ca:50:19:0d:b5:7c:a3:63:
         50:f9:26:b8:70:0d:b9:21:1b:de:8b:a2:0d:0e:02:30:47:8a:
         16:dc:23:a6:3f:62:e4:16:8a:23:7d:4b:c2:23:e0:cb:6d:78:
         a4:e3:02:65:d7:ae:ce:76:84:c4:2e:9d:bd:da:29:71:a3:81:
         84:00:f6:32:54:21:f2:58:db:fa:52:fa:44:1c:5d:fb:7b:df:
         b6:f4:54:01:5b:f2:11:8b:83:58:aa:56:b0:3f:d8:c2:05:7f:
         a5:b5:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:12 2025 by rpki-client