Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File:                     a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier:          lKauaqV9sEvWj5zxmbkOjkBeMKFu0Vyz8KuC1wEdBbQ=
Subject key identifier:   95:D1:CF:08:1E:54:7D:7D:D9:00:8F:27:2A:5C:CB:0D:01:10:69:93
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number:          0716
Signing time:             Thu 18 Sep 2025 22:05:53 +0000
Manifest this update:     Thu 18 Sep 2025 22:05:52 +0000
Manifest next update:     Thu 25 Sep 2025 22:05:52 +0000
Files and hashes:         1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: kHyAQu3OpKZxo982upPY7fIdkuyplT3v23mhMCNB4A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Sep 18 22:05:52 2025 GMT
            Not After : Sep 25 22:05:52 2025 GMT
        Subject: CN=68cc8241-706b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:e3:0d:b2:89:c9:10:4d:7a:87:65:0f:85:
                    70:12:fa:f0:66:3c:a4:b5:b4:7c:2a:d1:ec:6a:73:
                    5c:41:4c:0e:dd:94:2a:3e:05:84:44:b9:8f:a5:01:
                    24:64:52:18:51:22:08:dc:a2:60:d7:2c:9f:06:40:
                    19:ce:e5:5d:52:3d:72:6d:be:34:04:79:44:8b:52:
                    af:98:52:21:6d:50:1e:c1:a1:30:ca:ee:34:61:a4:
                    ed:14:9e:04:14:2b:7a:32:28:9a:20:c3:39:52:06:
                    18:97:b7:66:c1:60:92:b9:fc:b0:98:12:c8:9d:e0:
                    dc:9c:61:14:48:e3:a5:8d:f0:f3:ee:c0:ca:fc:e9:
                    95:05:25:4a:3b:d7:70:f7:95:ba:af:ca:c5:5c:f8:
                    77:ff:d3:9d:0f:40:a4:36:7c:6d:23:31:bf:56:74:
                    0d:7f:08:aa:26:7f:51:a6:95:ca:01:d2:90:45:e9:
                    d7:80:b9:ec:c4:cd:7f:61:6f:48:f9:6f:fd:35:1b:
                    41:0b:ba:ce:f8:8f:39:da:82:37:80:11:9a:03:be:
                    cc:99:c7:11:f6:fb:8d:e4:88:af:4d:a1:64:78:50:
                    ff:4b:a6:70:0e:19:81:21:7d:66:a9:67:d8:a6:df:
                    08:00:c4:2f:94:90:b1:41:ee:bf:6b:1d:9d:5e:d5:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:CF:08:1E:54:7D:7D:D9:00:8F:27:2A:5C:CB:0D:01:10:69:93
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:8c:f3:04:fc:a9:c1:7e:e6:93:e6:b1:e1:d6:00:ae:9f:
         c1:5f:4c:0c:ed:ea:da:37:87:46:56:d3:d9:bb:1e:6d:e3:8d:
         f5:7d:49:9a:96:05:c4:2f:e8:b4:76:96:93:ea:70:d8:7b:be:
         42:fe:8d:c4:5f:2b:e5:22:cc:1d:bf:9b:c6:6c:93:0d:ab:ab:
         c0:6c:4a:16:4c:d0:5b:61:09:60:1b:c8:8d:60:40:6f:9a:95:
         e1:91:7d:c1:bb:54:25:e3:c5:95:e5:44:59:ff:97:50:30:d0:
         00:26:db:2d:43:87:3a:ab:34:d3:3f:3b:8b:23:83:7d:eb:69:
         f2:02:16:8e:f2:bf:ec:3a:00:01:92:aa:28:68:e0:db:1d:77:
         2d:91:52:47:0c:51:15:c0:59:55:1b:0b:f5:d4:fb:ed:ad:e9:
         a1:56:bb:b6:7c:83:68:ec:01:0f:bd:bb:91:52:bd:9f:7a:42:
         5d:a4:e1:27:03:2a:f3:c8:20:fa:91:01:17:d3:59:67:1c:72:
         e6:f7:e7:ec:96:b0:50:79:67:5b:8c:e6:be:f8:63:a3:d7:46:
         cc:0b:94:6c:9b:27:54:78:4b:9e:a9:c3:94:a3:e8:05:a8:d9:
         ea:3e:13:9d:b7:54:ce:a3:02:8f:74:98:b8:78:49:5b:8b:11:
         68:97:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:26:16 2025 by rpki-client