Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
File:                     Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft (raw, json)
Hash identifier:          LLEccaAy7Z7f7/eY9c3qkyVHiY4nwqZwyk3WnqnzPpk=
Subject key identifier:   04:2C:17:83:0A:4F:83:E1:65:B9:E9:76:FB:87:48:3C:48:97:F1:6D
Authority key identifier: 16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1
Certificate issuer:       /CN=A91E6F07/serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
Certificate serial:       0C77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
Manifest number:          14F8
Signing time:             Thu 18 Sep 2025 18:32:46 +0000
Manifest this update:     Thu 18 Sep 2025 18:32:45 +0000
Manifest next update:     Thu 25 Sep 2025 18:32:45 +0000
Files and hashes:         1: Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl (hash: kzCZPHYZnB6P7jCFANANmfVpk97v3dPH94wYcCG6IjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=162E956F88DD3E09A6B044D8B2B42DEB10A83DA1
        Validity
            Not Before: Sep 18 18:32:45 2025 GMT
            Not After : Sep 25 18:32:45 2025 GMT
        Subject: CN=68cc504d-f4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:1c:25:59:d9:3c:c3:07:d7:72:d4:7c:b0:
                    c3:72:8b:6d:60:ce:ee:b5:16:7b:48:04:fe:c0:2e:
                    89:89:87:62:54:9f:af:89:fa:18:84:b9:18:0b:6b:
                    b2:22:39:ba:98:97:c2:64:dd:d6:65:10:de:1b:43:
                    36:06:27:0b:fa:c9:78:d3:bb:8b:31:98:5c:17:e6:
                    26:50:44:c9:26:f0:75:75:f6:ae:a2:4c:be:0d:7b:
                    20:c0:2a:2d:85:56:63:9e:c4:48:f4:05:5f:fe:ed:
                    77:3e:58:1a:ec:c8:e2:6f:ea:17:ec:f1:ab:4b:82:
                    b6:81:1f:f6:4b:00:5b:24:84:ff:89:cd:a4:36:ea:
                    17:24:d4:a2:68:59:dd:7e:3c:a0:f8:09:8b:46:98:
                    9c:16:e8:bf:a4:76:e8:c6:b7:55:70:76:34:8a:97:
                    24:72:e3:41:e5:de:63:4f:d8:ba:bf:89:21:df:e1:
                    4b:55:ab:f8:43:ea:9d:07:fa:47:3d:a9:81:5a:4b:
                    2c:13:f7:92:b9:1e:b3:5c:4f:60:87:d6:af:cd:e5:
                    c5:ee:6d:c3:4f:58:79:19:b8:3b:de:80:64:7b:de:
                    28:87:d4:68:f4:a1:02:ee:91:b4:fd:62:31:45:8a:
                    31:f6:75:d9:8a:72:9b:23:81:2f:eb:7d:bf:0c:b0:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:17:83:0A:4F:83:E1:65:B9:E9:76:FB:87:48:3C:48:97:F1:6D
            X509v3 Authority Key Identifier:
                keyid:16:2E:95:6F:88:DD:3E:09:A6:B0:44:D8:B2:B4:2D:EB:10:A8:3D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/Fi6Vb4jdPgmmsETYsrQt6xCoPaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:ff:56:25:de:ad:b3:0c:bb:f2:9d:62:06:5a:66:f8:e1:
         d1:e9:83:a7:b3:4e:18:3f:71:47:39:4d:46:2e:38:28:7b:1a:
         1d:d2:e0:39:e0:12:31:03:f0:d7:c9:46:1e:69:5a:37:60:6d:
         ea:25:62:8e:14:81:a0:ba:70:33:c6:e8:ea:2b:a6:13:85:de:
         e6:50:e9:f6:7f:df:85:08:2b:41:99:91:1a:6e:0c:9b:1d:64:
         5c:86:01:7a:1a:68:ee:85:d3:04:a2:2c:2b:39:f8:1a:4d:87:
         0d:e3:40:38:9f:d6:2e:49:9a:ef:20:57:dd:2f:db:3c:49:99:
         6b:22:c6:d4:a4:e5:80:e0:4e:f1:d1:97:5f:61:1f:72:28:46:
         e3:54:f6:23:87:69:01:b7:89:7b:33:3d:59:19:ea:83:7f:4f:
         72:ac:70:e5:c1:8e:bb:c0:4a:f2:f2:88:7c:67:bd:69:62:54:
         b5:35:c7:3b:88:7c:3b:0e:d4:3a:ec:b8:80:d6:e0:68:a9:e8:
         56:fb:62:30:c5:de:ac:c7:3f:9e:3d:27:68:87:f0:6d:b8:c6:
         db:80:4a:8f:41:ab:12:17:af:e8:9c:34:af:8e:95:f4:33:8f:
         db:c7:88:aa:57:ec:8c:e8:24:f6:5d:55:7c:81:73:c2:a9:4e:
         ab:e1:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:29:16 2025 by rpki-client