Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier:          IO6vZx4WB/kmewGP7sYugBtGeeyz4xhlCUBo/UFCZZ4=
Subject key identifier:   9F:06:EB:D0:51:7A:A9:85:59:DD:96:45:E2:92:9C:3A:FF:77:10:8F
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer:       /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number:          5B
Signing time:             Wed 17 Sep 2025 07:54:06 +0000
Manifest this update:     Wed 17 Sep 2025 07:54:06 +0000
Manifest next update:     Wed 24 Sep 2025 07:54:06 +0000
Files and hashes:         1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: IJFRojeGN+6yimrkNXe8kxNnX7BcpBRQXr6G/Y/AIcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
        Validity
            Not Before: Sep 17 07:54:06 2025 GMT
            Not After : Sep 24 07:54:06 2025 GMT
        Subject: CN=68ca691e-c527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:dd:3a:97:32:18:17:d2:72:78:f7:0e:ab:
                    ca:50:34:83:3f:46:e2:71:ef:ad:ab:50:fe:75:9b:
                    e7:ce:2d:f5:f6:cb:f8:d2:4d:5b:f7:55:6c:56:77:
                    be:a0:84:16:50:e3:28:eb:24:ba:3b:6d:9d:09:5b:
                    ba:71:22:31:88:2e:7b:f8:f7:fe:4c:60:12:05:51:
                    00:e9:79:b7:7a:36:e0:19:21:96:6a:e6:43:d1:eb:
                    ba:05:b9:af:f4:39:75:db:d1:4b:21:32:dc:12:08:
                    53:f1:2f:68:07:71:0c:02:a6:90:be:52:e7:37:e9:
                    ea:2c:41:83:f0:f7:ca:83:1e:13:8d:43:73:ab:02:
                    5b:53:5c:ff:cc:12:97:09:95:91:9a:f8:eb:53:5b:
                    9e:52:36:ba:32:ac:34:39:ba:4e:25:b5:ce:71:46:
                    4a:a8:5f:b1:5b:e2:26:59:3a:76:51:47:17:b9:84:
                    43:3d:2d:18:32:61:16:7d:8c:80:8a:c3:67:23:1f:
                    0a:5f:ac:02:41:00:ee:5b:6e:f9:4f:48:04:62:ed:
                    31:88:72:b4:1b:f4:bc:06:0e:fc:37:e0:ec:a3:8c:
                    2b:9a:06:72:ab:62:e5:90:48:3d:bf:86:11:0d:25:
                    95:21:a0:1a:6c:7c:a4:1b:f1:3c:98:b8:83:16:00:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:EB:D0:51:7A:A9:85:59:DD:96:45:E2:92:9C:3A:FF:77:10:8F
            X509v3 Authority Key Identifier:
                keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:27:78:e1:5f:fa:27:32:78:ca:b5:0f:6e:03:9c:7e:ca:2a:
         37:88:c7:76:f6:84:57:4c:9e:d1:1a:63:31:06:cb:90:e3:16:
         01:83:d2:8d:6a:a7:d4:47:41:9b:5d:11:2a:44:42:bd:5c:0d:
         27:53:f2:87:aa:63:eb:f7:e2:c2:e3:92:c7:0a:a1:1c:45:2f:
         02:5e:62:62:3f:79:4e:db:a7:54:e1:2f:fd:40:0a:59:16:61:
         ad:86:da:89:56:44:03:25:cf:ec:12:24:03:e7:e5:d0:53:16:
         cf:75:72:e5:92:42:01:66:20:d6:57:58:40:02:f6:08:cb:26:
         6a:5b:ec:05:d9:d5:ee:9f:b4:8c:28:98:2e:4b:d7:12:a5:9a:
         1c:9c:16:70:d5:c1:7c:62:41:4d:86:a8:7d:1f:5b:2b:b6:9e:
         7a:1f:3f:7d:37:4a:6a:01:b8:e2:ea:cb:23:da:59:6e:f3:c1:
         dc:9c:49:2a:62:b2:ad:a9:ed:f2:4e:81:95:c9:86:ba:3b:b3:
         25:f4:0d:b6:97:a2:36:97:d7:c3:80:55:a6:8e:a9:69:9f:49:
         8b:88:bf:66:a1:d2:cb:05:47:39:c8:35:eb:87:a5:f8:0c:b3:
         42:f8:8c:3b:3e:38:3a:51:04:4f:4b:ad:0f:13:85:5a:e7:ec:
         35:49:74:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QkFEQTExMC8GA1UEBRMoNEMyNkY5N0M5NTdCQkZCRDhDQUFBRkRBRkE3OTVBNzMx
RTExMkFEMjAeFw0yNTA5MTcwNzU0MDZaFw0yNTA5MjQwNzU0MDZaMBgxFjAUBgNV
BAMTDTY4Y2E2OTFlLWM1MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMkt06lzIYF9JyePcOq8pQNIM/RuJx762rUP51m+fOLfX2y/jSTVv3VWxWd76g
hBZQ4yjrJLo7bZ0JW7pxIjGILnv49/5MYBIFUQDpebd6NuAZIZZq5kPR67oFua/0
OXXb0UshMtwSCFPxL2gHcQwCppC+Uuc36eosQYPw98qDHhONQ3OrAltTXP/MEpcJ
lZGa+OtTW55SNroyrDQ5uk4ltc5xRkqoX7Fb4iZZOnZRRxe5hEM9LRgyYRZ9jICK
w2cjHwpfrAJBAO5bbvlPSARi7TGIcrQb9LwGDvw34OyjjCuaBnKrYuWQSD2/hhEN
JZUhoBpsfKQb8TyYuIMWAOZvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnwbr0FF6
qYVZ3ZZF4pKcOv93EI8wHwYDVR0jBBgwFoAUTCb5fJV7v72Mqq/a+nlacx4RKtIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQURBL0ZCNTUzRDMyMDk1
MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcyTXFxX2EtbmxhY3g0Ukt0
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVENiNWZKVjd2NzJNcXFfYS1ubGFjeDRSS3RJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC
QURBL0ZCNTUzRDMyMDk1MzExRjA4NTQ3QTIxM0M0RjlBRTAyL1RDYjVmSlY3djcy
TXFxX2EtbmxhY3g0Ukt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAkneOFf+icyeMq1D24DnH7KKjeIx3b2hFdMntEaYzEGy5DjFgGD0o1q
p9RHQZtdESpEQr1cDSdT8oeqY+v34sLjkscKoRxFLwJeYmI/eU7bp1ThL/1AClkW
Ya2G2olWRAMlz+wSJAPn5dBTFs91cuWSQgFmINZXWEAC9gjLJmpb7AXZ1e6ftIwo
mC5L1xKlmhycFnDVwXxiQU2GqH0fWyu2nnofP303SmoBuOLqyyPaWW7zwdycSSpi
sq2p7fJOgZXJhro7syX0DbaXojaX18OAVaaOqWmfSYuIv2ah0ssFRznINeuHpfgM
s0L4jDs+ODpRBE9LrQ8ThVrn7DVJdAk=
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:18:55 2025 by rpki-client