Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
File:                     T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json)
Hash identifier:          gQRQJivJsET42y5B7SqpXyfcmdZv2F55FTFZnvSfrbE=
Subject key identifier:   7A:08:F3:3D:2C:66:E0:77:63:39:1E:6B:EB:B8:25:B8:CD:8A:9F:ED
Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3
Certificate issuer:       /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
Manifest number:          031F
Signing time:             Wed 17 Sep 2025 01:36:57 +0000
Manifest this update:     Wed 17 Sep 2025 01:36:56 +0000
Manifest next update:     Wed 24 Sep 2025 01:36:56 +0000
Files and hashes:         1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: PJiZ9minBVvsC7QFjX4ih2khOur/l0liwwTLxfectBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 01:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
        Validity
            Not Before: Sep 17 01:36:56 2025 GMT
            Not After : Sep 24 01:36:56 2025 GMT
        Subject: CN=68ca10b9-95de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:d3:9e:6f:ea:be:b5:aa:cb:bb:2b:86:1a:
                    8b:51:2c:06:9c:07:72:11:e0:f3:69:c7:4e:7b:6f:
                    ae:cb:16:2a:97:8a:5e:e9:c3:bf:99:ce:7d:30:b5:
                    68:72:2c:7d:04:ea:10:8f:d4:ee:11:90:59:6c:e6:
                    40:ac:ce:fd:0e:31:86:b3:b5:c0:bb:16:62:f0:56:
                    f4:b4:00:ee:89:36:2e:24:66:88:5f:e0:9d:9d:d1:
                    7f:82:74:5d:ac:41:a0:49:46:33:f2:54:de:9d:fd:
                    bc:21:83:f3:cf:c4:ac:b7:c9:92:c2:cb:34:c8:a3:
                    17:9c:cc:45:d3:ab:5f:16:cb:53:e7:39:4e:71:b7:
                    67:55:0f:a0:2c:20:10:fe:a7:c3:b7:98:51:6a:d9:
                    85:1e:11:7b:bc:0e:97:a6:2d:90:4f:e5:59:f9:b3:
                    3b:b3:f2:d0:8e:81:3c:40:a9:75:66:f4:31:21:ef:
                    f4:09:4f:14:65:62:3b:31:6a:a4:3c:27:ec:4a:11:
                    9f:23:50:b2:0d:a8:6e:e4:a7:78:cc:75:16:66:5c:
                    f8:f9:60:7c:a1:21:86:38:51:bd:a3:20:20:9c:cc:
                    07:8b:fc:2b:4d:fc:da:7a:2c:03:11:aa:d2:0b:a6:
                    c9:35:52:10:83:fa:82:ec:b2:0a:54:5b:27:04:a4:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:F3:3D:2C:66:E0:77:63:39:1E:6B:EB:B8:25:B8:CD:8A:9F:ED
            X509v3 Authority Key Identifier:
                keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:af:85:36:f9:c2:46:70:a5:c9:fc:3e:69:da:0a:d6:3f:
         68:f5:c3:b9:5e:43:c5:4d:15:8d:95:2d:f4:51:87:0e:47:53:
         76:c8:e7:f8:d4:28:00:e3:2a:dd:86:48:8a:ba:f7:18:14:46:
         8a:4d:80:8c:06:2d:68:5e:91:b6:9f:da:ee:73:a4:5b:ea:15:
         85:a8:b7:95:06:d7:c8:fb:ca:36:8e:fc:e3:94:fe:d0:06:69:
         38:f3:fc:32:d1:36:19:e6:6e:58:c9:32:5b:ca:cc:df:9f:a7:
         4b:1d:2f:6b:6d:d5:74:47:e2:64:5b:4d:23:78:ce:44:27:c8:
         60:e3:8d:2c:57:34:87:d5:8a:71:6d:3a:96:55:3a:4f:35:9a:
         9e:a5:ef:f4:17:5a:ca:7d:8a:28:15:4e:5c:e5:9e:c7:90:e7:
         1e:2b:d3:91:85:5c:3b:b9:3f:42:de:24:2f:db:87:27:86:5a:
         21:c1:71:9c:7e:43:dd:3f:3a:5d:ea:c5:91:55:16:a6:5d:71:
         05:39:34:0c:dd:32:a6:9d:0e:14:2d:6f:8d:fa:eb:45:ff:a3:
         91:b5:cd:38:cd:de:68:90:90:70:76:d1:21:ea:1f:6d:d6:cb:
         f1:7f:40:ad:c1:75:a9:5d:85:7f:eb:73:bf:26:a9:16:b1:c8:
         ee:ed:89:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG
OTM5NDQ0QTMwHhcNMjUwOTE3MDEzNjU2WhcNMjUwOTI0MDEzNjU2WjAYMRYwFAYD
VQQDEw02OGNhMTBiOS05NWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA00XTnm/qvrWqy7srhhqLUSwGnAdyEeDzacdOe2+uyxYql4pe6cO/mc59MLVo
cix9BOoQj9TuEZBZbOZArM79DjGGs7XAuxZi8Fb0tADuiTYuJGaIX+CdndF/gnRd
rEGgSUYz8lTenf28IYPzz8Sst8mSwss0yKMXnMxF06tfFstT5zlOcbdnVQ+gLCAQ
/qfDt5hRatmFHhF7vA6Xpi2QT+VZ+bM7s/LQjoE8QKl1ZvQxIe/0CU8UZWI7MWqk
PCfsShGfI1CyDahu5Kd4zHUWZlz4+WB8oSGGOFG9oyAgnMwHi/wrTfzaeiwDEarS
C6bJNVIQg/qC7LIKVFsnBKSQPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoI8z0s
ZuB3Yzkea+u4JbjNip/tMB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw
REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt
V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+V6+FNvnCRnClyfw+adoK1j9o9cO5XkPFTRWNlS30UYcOR1N2yOf4
1CgA4yrdhkiKuvcYFEaKTYCMBi1oXpG2n9ruc6Rb6hWFqLeVBtfI+8o2jvzjlP7Q
Bmk48/wy0TYZ5m5YyTJbyszfn6dLHS9rbdV0R+JkW00jeM5EJ8hg440sVzSH1Ypx
bTqWVTpPNZqepe/0F1rKfYooFU5c5Z7HkOceK9ORhVw7uT9C3iQv24cnhlohwXGc
fkPdPzpd6sWRVRamXXEFOTQM3TKmnQ4ULW+N+utF/6ORtc04zd5okJBwdtEh6h9t
1svxf0CtwXWpXYV/63O/JqkWscju7Ym0
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:19:04 2025 by rpki-client