Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File:                     cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier:          XH+X+dUxYywo2o6dCwD8K45BmvrnXubHb8LYVU0FYIw=
Subject key identifier:   57:2A:7E:D9:BF:BD:D0:64:B7:B1:E8:99:C1:50:04:98:BB:7B:49:6F
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer:       /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number:          1FEA
Signing time:             Tue 04 Nov 2025 16:09:41 +0000
Manifest this update:     Tue 04 Nov 2025 16:09:40 +0000
Manifest next update:     Tue 11 Nov 2025 16:09:40 +0000
Files and hashes:         1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: bSv6LBguuJ+pyJ2ZC6EUniB0bijFsDFOqA2jRyGG0lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
                          rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
        Validity
            Not Before: Nov  4 16:09:40 2025 GMT
            Not After : Nov 11 16:09:40 2025 GMT
        Subject: CN=690a2544-fe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:53:dc:28:f3:ef:db:6b:cc:28:51:50:6c:
                    ac:bb:cf:42:86:95:fe:11:a2:8d:0e:5f:ee:ee:9d:
                    d6:d5:a0:8a:5b:b5:77:7c:01:e5:b8:d4:a1:af:6a:
                    54:38:5c:68:95:4f:1c:87:8d:07:31:ec:a9:b6:c8:
                    5d:68:db:17:f1:23:1e:dd:55:71:aa:1a:11:de:88:
                    c3:e6:82:6a:19:f6:e9:0c:56:55:10:58:86:bd:0b:
                    a2:7e:2f:69:aa:08:73:ca:bd:69:a2:fc:0a:39:34:
                    fb:9d:79:51:2d:36:c6:c3:67:53:d2:3a:d7:5f:be:
                    bd:a5:65:5e:df:d6:32:04:87:22:0d:e8:72:c1:1d:
                    bc:5e:f2:4c:32:0e:ed:8b:4f:f9:99:ee:9f:ff:2a:
                    fc:56:89:82:cd:ff:ca:26:b4:96:7a:e5:f0:8c:e7:
                    1a:eb:9f:f3:24:36:35:b0:cd:ed:19:0b:0b:ca:b6:
                    f2:bb:5a:7f:de:38:db:e9:b0:62:c6:80:79:ad:e5:
                    a9:0f:dc:68:72:11:7a:2e:76:fb:b1:f0:31:6d:b5:
                    0f:a9:fd:c9:02:2b:3f:18:9d:c0:6a:47:be:67:63:
                    58:3a:e3:8d:09:47:5e:4f:ba:df:db:1c:60:a8:89:
                    22:35:f6:3c:7b:2d:45:e7:44:be:32:ac:2e:3b:01:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:7E:D9:BF:BD:D0:64:B7:B1:E8:99:C1:50:04:98:BB:7B:49:6F
            X509v3 Authority Key Identifier:
                keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:1d:3a:25:b9:c3:0e:1f:0a:5e:31:3b:f2:50:4e:06:61:64:
         bf:ae:f4:32:f2:eb:44:c4:d4:41:9f:2d:44:3a:c7:16:3a:a9:
         5a:ca:ee:11:9e:5f:df:bd:c0:66:37:06:6a:b9:80:5e:af:15:
         a2:13:4d:ae:f5:57:cd:58:ff:d4:5a:f3:0f:34:c5:16:98:90:
         27:2f:d0:ac:d8:a3:70:1f:05:df:1f:ec:6c:1f:e8:4e:c8:28:
         6d:6a:37:84:62:09:c4:98:f3:76:f0:b3:36:bd:74:b7:69:b7:
         6f:85:8c:6b:30:44:a3:7d:8f:bf:be:1f:73:00:28:fa:af:b5:
         b1:dc:de:7e:1e:d2:b4:6d:89:da:a5:41:74:5d:70:55:32:37:
         ed:ba:3d:9e:89:dd:bb:ac:fd:8d:b4:ee:a2:d5:9d:1e:47:d2:
         ab:78:09:92:15:b9:e2:93:b5:3a:9c:f5:7c:a3:ca:3d:c1:38:
         37:c6:1f:1a:4e:35:f7:cb:5a:ba:fb:d0:8a:2b:ea:ac:15:c4:
         c9:5b:0b:ef:b9:1a:b1:11:14:ee:2f:70:a2:3e:5b:4c:ec:6e:
         d1:f4:70:d4:2e:76:05:18:f2:eb:33:b8:c0:65:49:b4:3e:e4:
         29:b1:fd:25:14:4a:44:54:de:f7:99:31:d0:b3:a3:a1:5b:b3:
         75:c2:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:00 2025 by rpki-client