Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File:                     95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier:          5vHJb9I2CcpANF+QCID0tGBB6NpJVYhQm6cluBOi/Ws=
Subject key identifier:   F8:C8:8C:29:7D:30:C6:FD:76:FE:00:61:2B:B5:74:3A:5C:4D:DB:CB
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer:       /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial:       0406
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number:          043C
Signing time:             Fri 19 Sep 2025 00:51:24 +0000
Manifest this update:     Fri 19 Sep 2025 00:51:24 +0000
Manifest next update:     Fri 26 Sep 2025 00:51:24 +0000
Files and hashes:         1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: o++InvE3KnfM8BjIuTr/r90vbPx82G6mVIizhSLVNWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
                          rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 00:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
        Validity
            Not Before: Sep 19 00:51:24 2025 GMT
            Not After : Sep 26 00:51:24 2025 GMT
        Subject: CN=68cca90c-b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:40:d0:84:13:63:08:ed:f0:97:96:4a:84:
                    58:00:76:31:8b:4b:8c:62:3c:c6:5f:79:10:3d:0a:
                    68:5a:31:55:dd:ff:ee:79:24:1c:44:87:61:9f:78:
                    1c:84:13:e8:c2:65:5f:4a:eb:b0:dc:d7:12:96:42:
                    87:5f:1a:f6:34:fd:5a:13:f2:4d:a4:82:ac:51:fd:
                    73:b3:ba:b2:7a:79:06:2a:4e:3f:33:3b:a7:03:ae:
                    2b:ac:0e:a6:64:8d:cf:8a:68:79:21:d4:59:af:e1:
                    2d:e2:da:41:68:fc:9b:70:82:1d:66:e2:b1:cd:a3:
                    6d:6c:1e:be:41:4d:e7:66:71:d4:3e:76:37:45:b1:
                    7c:2b:3e:b8:9a:7c:58:58:d4:54:68:60:0c:23:1f:
                    0d:8f:c2:d8:82:db:e9:34:3c:ed:9c:37:3b:ca:65:
                    02:e5:21:d1:ff:76:32:14:c0:99:cb:e8:41:ca:4b:
                    65:94:4e:2e:63:ab:80:86:db:6b:8f:02:87:6d:66:
                    85:d4:8a:2b:7b:51:92:05:cb:87:9c:54:d1:00:72:
                    5b:d0:3b:7f:c7:d0:8a:40:a1:42:90:f4:8f:f0:09:
                    d6:fa:ca:13:86:7b:30:77:84:70:b6:46:1e:1e:89:
                    17:6d:3b:66:22:cb:ee:19:12:97:0f:d5:60:68:e0:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C8:8C:29:7D:30:C6:FD:76:FE:00:61:2B:B5:74:3A:5C:4D:DB:CB
            X509v3 Authority Key Identifier:
                keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7c:ec:84:7e:e9:4e:ec:ea:dc:21:46:65:f6:f9:91:5a:93:
         23:7b:dc:80:ba:55:ad:56:8f:39:15:b7:b0:64:09:d6:38:68:
         1e:da:39:0e:c8:28:a5:79:d5:47:f6:da:ad:a9:8f:88:29:f5:
         f7:6d:8d:d5:eb:0e:e4:93:24:8a:25:f6:75:5e:cb:fe:4f:8c:
         ca:64:ab:2a:4d:80:ca:7f:dc:5a:6d:14:7c:74:ed:90:2b:40:
         60:6c:85:4a:3d:e8:da:21:6b:e0:a9:08:b1:62:73:90:88:6c:
         9c:65:ed:d2:54:47:45:cd:30:1f:61:9f:e2:d8:49:17:5f:14:
         06:d7:3f:a7:4e:39:3f:25:8c:8c:5d:ae:68:17:d9:e5:45:92:
         aa:f1:42:6d:9c:a1:96:ea:37:4d:0a:5e:4f:62:47:62:7b:82:
         9f:47:79:9a:26:92:9d:63:92:5b:b2:ab:84:b0:33:e9:bf:50:
         b0:39:a9:4c:6e:c8:a1:c2:d8:4e:f0:8e:40:59:31:7c:d3:86:
         37:18:eb:77:8c:51:c9:92:c7:e5:0d:cd:2f:dc:79:ce:38:c9:
         21:20:8c:65:02:56:4a:5e:e7:5a:65:d7:a0:4a:5f:00:59:5c:
         d3:81:fc:66:c7:f9:a7:18:61:90:ea:9e:d6:c5:d4:be:0b:62:
         5f:ac:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:31:22 2025 by rpki-client