Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
File:                     8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json)
Hash identifier:          CofjmJ0L2mrSfKvqDzg5FxMhNrV78rC6feMfAcCtPkw=
Subject key identifier:   8B:B7:68:7A:66:AB:58:4B:99:F6:D0:D4:42:BF:F1:3D:87:B9:D1:2B
Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59
Certificate issuer:       /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
Manifest number:          80
Signing time:             Wed 17 Sep 2025 07:23:39 +0000
Manifest this update:     Wed 17 Sep 2025 07:23:39 +0000
Manifest next update:     Wed 24 Sep 2025 07:23:39 +0000
Files and hashes:         1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: TFt9IuPegoAAbt5F0+iHMfO+onH+9Z32BDrS3jYLb2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl
                          rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59
        Validity
            Not Before: Sep 17 07:23:39 2025 GMT
            Not After : Sep 24 07:23:39 2025 GMT
        Subject: CN=68ca61fb-933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:6b:8f:6e:32:aa:7e:c3:63:24:c5:ae:51:
                    8a:24:05:8e:6e:a0:c3:0b:cf:84:ec:55:13:64:18:
                    71:06:30:09:b8:b8:df:a1:51:17:57:3e:f2:49:a0:
                    f7:0c:34:70:3b:3d:63:09:97:42:cb:e2:90:84:22:
                    10:5d:c2:c9:12:9e:67:07:64:61:df:d5:0f:99:b9:
                    b4:57:cf:da:f0:5f:70:72:ea:bb:b6:6d:bb:a7:05:
                    54:86:76:cb:4a:9d:94:2b:37:f8:50:9c:b4:7e:a0:
                    04:2a:31:e0:2d:43:ff:f1:4e:6d:9d:cc:57:46:2f:
                    37:10:61:3e:ae:86:be:27:10:aa:a9:aa:8e:90:eb:
                    eb:17:48:ec:d0:06:af:1d:8f:74:65:ec:c2:0f:e4:
                    e7:62:fa:e3:01:1b:40:20:aa:b7:ab:f6:92:24:a3:
                    8b:02:c0:90:d7:9a:2e:32:22:48:5c:42:a5:b1:c9:
                    f8:c3:48:e3:6a:37:2b:b9:c5:1e:f0:d0:68:c3:27:
                    0d:94:e2:b8:ce:8f:10:3b:77:93:3a:8c:35:7f:ce:
                    8a:14:12:8e:fc:d3:aa:84:1b:32:9d:44:49:46:03:
                    ec:4d:e4:66:d0:bb:dc:ac:d8:54:93:61:22:66:6c:
                    95:c6:52:00:8d:2b:d8:72:ad:fc:1c:cb:e7:8c:94:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B7:68:7A:66:AB:58:4B:99:F6:D0:D4:42:BF:F1:3D:87:B9:D1:2B
            X509v3 Authority Key Identifier:
                keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:a4:c1:c9:88:db:f4:cd:1a:dc:ce:65:71:d8:f7:dd:f6:
         35:76:f6:6b:5d:ff:d0:a6:2a:e5:e6:df:6f:a5:c7:df:77:51:
         26:00:fb:fa:9a:f0:ba:8e:c0:5c:37:94:39:02:c3:99:ba:11:
         eb:1d:f1:f2:00:c2:ea:4a:8b:6d:36:70:f7:06:75:67:a6:7c:
         da:83:7d:5a:c5:fc:c1:2f:3b:c1:be:b1:b3:e6:4e:a0:60:b4:
         46:33:4b:15:78:eb:e4:3c:d6:c4:18:51:93:bb:0a:89:4f:f0:
         0b:3f:a9:0b:6c:e3:a8:53:6a:02:f2:ba:03:35:cd:4b:70:4e:
         cb:e9:85:b7:b3:f2:ae:54:9d:85:58:01:4f:eb:27:e2:91:39:
         85:b3:5d:aa:92:24:19:7a:38:27:d3:a4:74:3e:f2:9d:8e:c6:
         24:b1:77:21:d9:b0:f1:4a:71:74:60:32:f0:64:98:9b:4e:a2:
         3f:f4:09:5c:0c:6e:95:3a:77:8b:07:e9:1b:99:70:82:23:3c:
         2a:d5:72:bf:8b:10:8d:d2:c6:d0:e4:6d:42:f6:57:73:89:6c:
         df:95:7e:eb:1b:e5:ad:54:43:6a:34:35:03:f6:66:8a:be:09:
         c5:cd:86:67:4d:61:b7:74:44:61:28:81:51:86:10:da:fc:f1:
         b8:9b:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:20 2025 by rpki-client