Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
File:                     81jWhVW6te9ipNz9TzJANe5gJLY.mft (raw, json)
Hash identifier:          sX/4Zs+B0LII06ksJP+mCiBwRv2Y7F3gDjwkx4IX/dE=
Subject key identifier:   BC:EF:AA:7C:19:AA:9B:67:4D:E5:CF:D8:7E:FF:92:9A:F7:CA:25:A2
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Certificate issuer:       /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
Manifest number:          7D
Signing time:             Mon 03 Nov 2025 06:50:54 +0000
Manifest this update:     Mon 03 Nov 2025 06:50:53 +0000
Manifest next update:     Mon 10 Nov 2025 06:50:53 +0000
Files and hashes:         1: 81jWhVW6te9ipNz9TzJANe5gJLY.crl (hash: EtXVQ+3lKZB9Bmm9p/EkpJArfyhOSHiqwjCAJjR48A4=)
                          2: 39E77242050B11F097AB4F3BC4F9AE02.roa (hash: 1iUGsBQDmoyV8aBLwNoBxo8N04u4p7UfM4+Zik0BKj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
                          rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
        Validity
            Not Before: Nov  3 06:50:53 2025 GMT
            Not After : Nov 10 06:50:53 2025 GMT
        Subject: CN=690850cd-e72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:f6:91:4a:a5:15:15:78:34:17:d6:23:55:
                    8d:42:36:7a:1a:4f:8c:f1:b4:7c:84:82:8c:e0:37:
                    19:c1:eb:d0:50:fd:b1:e0:01:21:24:1e:a0:d5:0a:
                    c8:85:12:0c:16:2d:34:34:7a:91:05:35:e4:f7:93:
                    31:91:46:16:08:75:3b:0b:8b:d0:ec:5e:53:e5:4b:
                    83:6d:a5:b7:d6:c7:7e:0a:a9:a8:47:c4:79:73:f3:
                    56:a2:78:fd:24:9d:40:ad:9b:15:b8:23:b9:76:53:
                    a5:f5:b1:53:80:5d:73:ba:8a:ab:75:b2:83:fe:8a:
                    40:ea:75:b8:02:7a:a4:c6:a8:4e:d6:00:ad:2e:80:
                    51:ea:a1:9e:2b:2c:65:1e:09:72:64:56:e1:b0:d4:
                    29:73:ab:66:d9:32:80:1d:13:b8:38:b3:7e:fd:f4:
                    7f:19:aa:f9:c4:30:63:cf:33:ed:60:10:2a:93:37:
                    1d:10:9d:df:21:36:85:29:a2:15:e4:5d:26:cc:da:
                    b9:58:07:5f:0a:0d:30:9f:c3:00:d2:56:92:ff:86:
                    50:a3:77:4e:22:85:e2:df:66:a9:6c:9c:17:04:7f:
                    d5:f6:a0:5b:e1:ac:80:01:79:3a:26:10:39:fa:7d:
                    5c:20:ad:80:e1:c0:da:a9:96:08:a8:07:d9:4e:fb:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EF:AA:7C:19:AA:9B:67:4D:E5:CF:D8:7E:FF:92:9A:F7:CA:25:A2
            X509v3 Authority Key Identifier:
                keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:1e:76:e4:ac:a8:b2:bd:87:58:75:8c:9b:45:e6:b7:27:
         f2:0c:81:05:73:ec:73:f5:b1:fa:d3:65:66:bf:5c:a8:f1:fb:
         31:9d:b7:c1:ce:4f:f5:51:34:6b:f9:7a:f2:31:92:1e:81:55:
         7b:ec:1f:c0:ee:55:a5:ef:0d:1d:e3:bc:8f:cc:08:f3:2f:14:
         40:b9:c8:ab:3a:16:e8:6f:a4:47:2f:11:a3:5a:f1:e8:d0:6b:
         93:78:cb:1b:bc:00:4d:28:5c:07:27:af:1f:ac:96:bc:17:f5:
         1a:ec:c3:ba:4c:4a:ab:61:3d:ce:3a:c1:9b:9b:1e:8c:99:05:
         ae:c4:4b:36:f0:90:ea:65:93:4a:fc:2c:63:47:85:ac:e3:c0:
         46:c5:89:ae:a8:b0:85:70:07:6b:a0:fd:39:bb:bc:af:3d:c3:
         b4:58:0e:2c:bf:69:77:34:eb:b4:a3:7f:b4:03:cb:90:26:b7:
         56:3d:70:9a:4f:a5:81:1f:23:8c:5e:91:29:3b:37:8a:40:ee:
         3d:03:d1:c5:30:ef:be:4e:c1:ee:52:54:ac:84:db:35:e5:0c:
         6e:13:b3:f8:04:23:ee:cf:66:46:1c:be:cb:04:21:82:05:a5:
         55:cb:69:9b:94:0a:32:55:37:a8:c3:6d:e8:ea:ff:37:de:34:
         3c:42:08:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2NEYxMTAvBgNVBAUTKEYzNThENjg1NTVCQUI1RUY2MkE0RENGRDRGMzI0MDM1
RUU2MDI0QjYwHhcNMjUxMTAzMDY1MDUzWhcNMjUxMTEwMDY1MDUzWjAYMRYwFAYD
VQQDEw02OTA4NTBjZC1lNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSP2kUqlFRV4NBfWI1WNQjZ6Gk+M8bR8hIKM4DcZwevQUP2x4AEhJB6g1QrI
hRIMFi00NHqRBTXk95MxkUYWCHU7C4vQ7F5T5UuDbaW31sd+CqmoR8R5c/NWonj9
JJ1ArZsVuCO5dlOl9bFTgF1zuoqrdbKD/opA6nW4AnqkxqhO1gCtLoBR6qGeKyxl
HglyZFbhsNQpc6tm2TKAHRO4OLN+/fR/Gar5xDBjzzPtYBAqkzcdEJ3fITaFKaIV
5F0mzNq5WAdfCg0wn8MA0laS/4ZQo3dOIoXi32apbJwXBH/V9qBb4ayAAXk6JhA5
+n1cIK2A4cDaqZYIqAfZTvuFGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzvqnwZ
qptnTeXP2H7/kpr3yiWiMB8GA1UdIwQYMBaAFPNY1oVVurXvYqTc/U8yQDXuYCS2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjY0Ri9BQkE2MTNEMDA1
MEExMUYwODdCNzY1M0FDNEY5QUUwMi84MWpXaFZXNnRlOWlwTno5VHpKQU5lNWdK
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxaldoVlc2dGU5aXBOejlUekpBTmU1Z0pMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjY0Ri9BQkE2MTNEMDA1MEExMUYwODdCNzY1M0FDNEY5QUUwMi84MWpXaFZXNnRl
OWlwTno5VHpKQU5lNWdKTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQdB525Kyosr2HWHWMm0XmtyfyDIEFc+xz9bH602Vmv1yo8fsxnbfB
zk/1UTRr+XryMZIegVV77B/A7lWl7w0d47yPzAjzLxRAucirOhbob6RHLxGjWvHo
0GuTeMsbvABNKFwHJ68frJa8F/Ua7MO6TEqrYT3OOsGbmx6MmQWuxEs28JDqZZNK
/CxjR4Ws48BGxYmuqLCFcAdroP05u7yvPcO0WA4sv2l3NOu0o3+0A8uQJrdWPXCa
T6WBHyOMXpEpOzeKQO49A9HFMO++TsHuUlSshNs15QxuE7P4BCPuz2ZGHL7LBCGC
BaVVy2mblAoyVTeow23o6v833jQ8Qgi4
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:25 2025 by rpki-client