Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          JOAe1W1Tr8QGdgWHyTHjjvRbrq5StvU7hLuFRhTASlM=
Subject key identifier:   51:3E:3F:E2:98:7A:F6:64:12:62:F1:74:68:DD:09:52:60:2B:0C:67
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          77
Signing time:             Fri 19 Sep 2025 07:30:54 +0000
Manifest this update:     Fri 19 Sep 2025 07:30:54 +0000
Manifest next update:     Fri 26 Sep 2025 07:30:54 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: Fb+/si4ggSWVS51e4LpXEPS8xr5RTHVvdz2pg/KMxTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Sep 19 07:30:54 2025 GMT
            Not After : Sep 26 07:30:54 2025 GMT
        Subject: CN=68cd06ae-e1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:b9:b6:fd:4a:f6:f6:a4:f2:41:04:67:44:
                    85:ae:e1:38:ed:a0:d1:34:02:7c:9a:61:e8:e5:e4:
                    61:c7:c4:86:6f:c8:dc:90:0b:00:11:9b:33:62:56:
                    2b:b0:63:b2:6a:6b:bb:ef:aa:3e:7e:9b:ea:f7:81:
                    bf:8c:97:38:53:56:c2:99:3b:19:65:2a:46:fe:5c:
                    67:20:0e:4c:04:9c:d7:0b:e0:09:77:11:35:12:46:
                    1b:55:b3:0d:04:c0:a6:25:0a:90:7c:c7:59:b3:c2:
                    b6:08:db:f1:ea:79:3e:b0:11:ed:3d:b6:bd:0b:68:
                    d7:60:f1:a5:43:0d:b5:d4:66:d8:f6:e2:dc:ce:d8:
                    d4:37:0f:ca:16:ec:b8:52:fc:2c:2c:d9:f4:d8:31:
                    82:1d:4b:13:bf:7c:6c:c6:5b:56:26:ae:35:0e:2e:
                    4e:55:38:f9:c2:7e:f1:75:95:ec:32:b8:30:e3:2e:
                    10:3f:3b:42:b0:35:c4:ce:05:c3:0c:05:ae:9e:70:
                    c2:c2:15:3c:2a:c8:0d:6c:95:21:6c:cc:b9:2e:6c:
                    a8:b8:be:2c:e6:c8:71:bf:e1:d6:38:2c:c0:db:b8:
                    f4:88:59:74:ff:10:ac:6e:21:cb:f0:9e:d1:09:94:
                    03:3a:02:10:c6:2a:a0:eb:16:8e:63:62:81:c6:9a:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3E:3F:E2:98:7A:F6:64:12:62:F1:74:68:DD:09:52:60:2B:0C:67
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:21:92:29:45:6e:e8:93:6c:04:4f:5c:df:d2:27:91:b5:
         e2:0e:18:c2:65:20:c5:10:5b:6a:42:8e:59:be:fc:c1:2d:8b:
         28:be:5f:b9:ae:8d:e0:b3:21:b1:1d:96:91:66:45:ef:d2:e4:
         9e:f3:fa:8b:9b:48:3d:7c:b3:b8:68:84:5c:df:ac:26:ed:22:
         21:6b:9c:f3:98:8c:01:6b:4b:b0:97:32:51:0e:6c:29:bb:1f:
         86:8a:00:f3:e1:f0:51:44:90:ff:34:82:c2:ef:21:5d:c6:bd:
         b5:9d:c9:41:2d:33:5f:cf:45:e4:df:cb:fd:7b:91:23:13:e5:
         fb:41:32:42:62:bb:77:a4:44:f6:ea:6e:65:4d:bf:d0:c1:12:
         d3:7f:ad:55:c7:3f:40:49:18:80:e3:55:68:64:91:f7:6c:44:
         f4:1d:62:cc:a8:26:da:4b:d4:f9:03:30:70:de:bf:9d:31:78:
         5c:f7:c0:32:2c:6b:b0:8a:e7:67:91:e1:6e:d6:3f:7c:b4:6e:
         8f:7d:20:70:4f:1c:1e:0f:75:8e:23:e5:c6:7f:6f:9e:9a:b2:
         03:d4:dd:c3:ab:70:d3:44:5d:72:96:c1:ba:5c:e5:3b:9a:b4:
         62:9b:08:86:34:1d:72:12:35:9e:97:f2:86:3e:a3:83:9b:ae:
         7b:55:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:15:19 2025 by rpki-client