Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
File:                     Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json)
Hash identifier:          yIFgiaZXhD8cDTT8D3TfG7i1ZOVGhB4x4ZeNKHK9J0k=
Subject key identifier:   13:5E:12:E8:6A:02:E6:B4:BF:29:11:02:03:96:08:E7:3A:24:62:9D
Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1
Certificate issuer:       /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
Certificate serial:       0C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
Manifest number:          14BA
Signing time:             Sun 20 Jul 2025 18:26:11 +0000
Manifest this update:     Sun 20 Jul 2025 18:26:11 +0000
Manifest next update:     Sun 27 Jul 2025 18:26:11 +0000
Files and hashes:         1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: hn17JSK8eRYDqNWI1/RTpw3WkLnpV/L+TdbqHlUEEcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 18:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
        Validity
            Not Before: Jul 20 18:26:11 2025 GMT
            Not After : Jul 27 18:26:11 2025 GMT
        Subject: CN=687d34c3-6084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:9b:5f:4e:2e:c4:b6:b7:d9:4d:df:33:99:
                    9a:90:22:77:ba:35:64:78:d4:ae:20:91:65:08:91:
                    fa:d9:4a:c5:8f:29:b4:83:ae:4e:8e:36:08:8d:ad:
                    c9:83:9e:76:f4:35:c6:97:05:fe:33:6c:c0:42:42:
                    89:fc:9b:84:0a:f9:87:2d:33:e3:41:40:ea:50:09:
                    5b:89:36:80:5b:88:ef:b7:62:f2:05:58:73:c8:90:
                    d8:a2:06:2b:de:5d:85:a7:00:ce:25:d9:d4:cd:5a:
                    e2:6a:a9:fc:a9:85:98:27:cf:4c:4d:a1:61:74:e6:
                    8f:bf:b7:d5:ed:51:49:35:c7:36:64:24:c2:f3:c1:
                    e3:51:a7:4a:c5:0f:ff:f7:72:c2:20:cd:3f:25:ea:
                    5b:c3:82:9a:29:33:a3:0e:cd:4e:de:2a:e4:c4:07:
                    65:54:db:6f:87:47:f3:e9:ee:e4:5b:28:a2:77:44:
                    5d:b9:93:df:db:0f:57:28:4b:3c:2b:bf:01:ca:43:
                    cf:60:77:57:1f:c7:c1:3a:d9:86:3d:5f:f5:a4:c2:
                    7f:98:be:c7:58:01:84:33:57:01:d6:25:5e:b7:f6:
                    40:45:57:49:b4:3d:47:38:95:c7:4a:97:84:69:bc:
                    a1:5e:a8:03:92:9c:51:71:f4:1a:7d:5c:03:9a:09:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:12:E8:6A:02:E6:B4:BF:29:11:02:03:96:08:E7:3A:24:62:9D
            X509v3 Authority Key Identifier:
                keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:06:27:ac:46:f9:aa:4a:6b:fd:53:3e:7b:62:15:68:86:21:
         ac:e1:a1:b9:5b:f9:e8:d4:c8:09:2c:d4:e7:91:d3:65:e9:db:
         18:7c:30:d9:d3:8f:eb:c6:5f:da:3c:ca:c5:66:09:df:b9:59:
         1d:3b:14:3f:fb:82:e9:67:64:9d:6e:ca:15:bf:1e:eb:e3:32:
         ce:02:cc:75:91:7d:f5:ad:50:0d:dd:b7:5a:94:b6:30:c5:e8:
         1c:7a:0d:f4:f6:c4:1e:ef:8b:ea:8e:05:8a:fb:76:06:ff:04:
         bd:fa:4c:96:da:41:dc:fe:c5:49:8a:61:a0:24:25:4a:f9:a4:
         0c:97:72:e1:f8:5b:ee:dc:a6:2a:80:98:f6:c3:69:0f:9f:5a:
         da:56:39:b0:b4:60:61:9f:09:b0:c5:2e:3d:66:ba:7b:c2:65:
         71:a2:1b:31:ba:bf:a0:86:9a:f4:ad:21:8b:b5:8f:ed:32:8c:
         62:5e:7d:2a:3d:32:1c:d3:8b:ed:6e:dc:6d:34:06:37:95:06:
         bc:40:79:44:48:28:5d:c6:7c:c5:b5:fd:50:8b:5a:1d:22:7e:
         52:5e:9f:cc:15:a8:35:f9:20:ad:44:90:96:fb:1f:37:38:61:
         56:52:76:f4:94:f8:d9:6a:c9:fd:be:19:f6:f5:75:85:a2:d0:
         75:45:8e:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZGMDcxMTAvBgNVBAUTKDE2MkU5NTZGODhERDNFMDlBNkIwNDREOEIyQjQyREVC
MTBBODNEQTEwHhcNMjUwNzIwMTgyNjExWhcNMjUwNzI3MTgyNjExWjAYMRYwFAYD
VQQDEw02ODdkMzRjMy02MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1ObX04uxLa32U3fM5makCJ3ujVkeNSuIJFlCJH62UrFjym0g65OjjYIja3J
g5529DXGlwX+M2zAQkKJ/JuECvmHLTPjQUDqUAlbiTaAW4jvt2LyBVhzyJDYogYr
3l2FpwDOJdnUzVriaqn8qYWYJ89MTaFhdOaPv7fV7VFJNcc2ZCTC88HjUadKxQ//
93LCIM0/Jepbw4KaKTOjDs1O3irkxAdlVNtvh0fz6e7kWyiid0RduZPf2w9XKEs8
K78BykPPYHdXH8fBOtmGPV/1pMJ/mL7HWAGEM1cB1iVet/ZARVdJtD1HOJXHSpeE
abyhXqgDkpxRcfQafVwDmgnKaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNeEuhq
Aua0vykRAgOWCOc6JGKdMB8GA1UdIwQYMBaAFBYulW+I3T4JprBE2LK0LesQqD2h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1
MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBnbW1zRVRZc3JRdDZ4Q29Q
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZpNlZiNGpkUGdtbXNFVFlzclF0NnhDb1BhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9GaTZWYjRqZFBn
bW1zRVRZc3JRdDZ4Q29QYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQBiesRvmqSmv9Uz57YhVohiGs4aG5W/no1MgJLNTnkdNl6dsYfDDZ
04/rxl/aPMrFZgnfuVkdOxQ/+4LpZ2SdbsoVvx7r4zLOAsx1kX31rVAN3bdalLYw
xegceg309sQe74vqjgWK+3YG/wS9+kyW2kHc/sVJimGgJCVK+aQMl3Lh+Fvu3KYq
gJj2w2kPn1raVjmwtGBhnwmwxS49Zrp7wmVxohsxur+ghpr0rSGLtY/tMoxiXn0q
PTIc04vtbtxtNAY3lQa8QHlESChdxnzFtf1Qi1odIn5SXp/MFag1+SCtRJCW+x83
OGFWUnb0lPjZasn9vhn29XWFotB1RY4L
-----END CERTIFICATE-----
Generated at Mon Jul 21 06:03:20 2025 by rpki-client