Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File:                     7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier:          Y55+gi3WvoY1QWwAMXkIjm6wzxb9ftBfPhoqGadfQ8o=
Subject key identifier:   30:E5:AD:4D:BD:07:CF:88:60:2E:63:68:68:47:70:DB:31:C8:B7:0A
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer:       /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number:          F5
Signing time:             Mon 03 Nov 2025 05:11:29 +0000
Manifest this update:     Mon 03 Nov 2025 05:11:29 +0000
Manifest next update:     Mon 10 Nov 2025 05:11:29 +0000
Files and hashes:         1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: C8awjADT/YoFQIzQsLoe5bCtPgbB4Mb3DsmFx0IaS2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
        Validity
            Not Before: Nov  3 05:11:29 2025 GMT
            Not After : Nov 10 05:11:29 2025 GMT
        Subject: CN=69083981-b534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0a:6e:f4:2f:a1:0d:3c:89:cb:4c:29:62:40:
                    fc:db:e9:c0:85:4e:c9:3f:a1:d6:be:6f:96:e2:e9:
                    d1:72:22:96:35:97:d2:3e:b7:25:9b:a5:88:8a:ed:
                    c2:4a:85:e5:5e:da:12:ba:e9:dd:ae:94:4b:59:ce:
                    66:a2:7b:61:8f:5d:a6:e0:bc:3c:19:27:4c:72:d8:
                    8b:2f:24:14:cc:1c:5d:9f:e0:7e:96:b1:41:fc:7a:
                    67:1d:9e:c7:82:2d:4d:05:d9:2b:18:4a:08:51:6c:
                    40:ad:e9:38:79:cf:0c:63:f2:99:47:7b:f2:a4:d1:
                    54:ed:a0:3e:a3:81:ee:53:e3:2f:c6:59:c3:ae:42:
                    e7:93:6f:f8:d2:33:01:1b:62:09:7d:36:a7:15:05:
                    2e:ec:5d:88:2b:13:99:1a:a6:aa:93:b2:76:a5:3d:
                    83:59:95:cc:c5:d7:76:4a:ac:3d:50:d3:67:98:b2:
                    b7:a5:f3:99:ce:e9:aa:f3:e5:b4:bf:1a:70:0a:ec:
                    0e:c1:53:cb:8c:b9:b7:65:df:76:90:94:b0:0c:76:
                    27:66:0d:7e:4f:fa:3a:2a:80:cc:3d:ca:fb:91:e7:
                    5a:0e:31:0f:b6:df:88:57:2e:eb:a4:1d:ca:8e:38:
                    ba:4f:4f:57:f0:96:05:59:ba:07:15:db:2d:ce:7d:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E5:AD:4D:BD:07:CF:88:60:2E:63:68:68:47:70:DB:31:C8:B7:0A
            X509v3 Authority Key Identifier:
                keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:86:6b:9e:6a:03:ae:3f:1a:f6:65:3c:9f:2a:f8:1a:8f:f6:
         70:32:78:45:27:fa:7c:38:6e:3c:87:73:7e:0a:96:7f:a5:58:
         9d:3a:1b:3c:13:83:0e:2d:48:af:bb:6c:ac:47:44:54:5f:15:
         0f:77:57:9d:ac:31:06:a9:c5:6f:ae:d5:99:d8:81:5f:9e:c8:
         a6:c6:92:e1:fe:48:53:e9:6e:8b:9d:b5:e8:2e:12:d6:87:db:
         8d:a9:62:cc:c7:a0:29:04:e6:50:de:50:67:de:fd:55:a8:e8:
         41:6a:d7:a4:38:b7:84:03:44:cc:84:01:08:80:85:5b:9d:8a:
         84:03:30:a4:4d:13:95:a5:7f:bd:b9:d8:bb:e3:f1:83:9a:01:
         6c:20:fb:7b:f5:09:f4:4f:02:e9:96:86:9f:93:7f:18:ca:d2:
         36:f0:de:ba:80:d0:68:9a:c8:08:32:8f:02:06:40:10:ee:8a:
         8b:d8:26:71:a5:47:d7:b3:2d:ba:63:3c:82:e3:0b:61:ae:a0:
         62:4e:b7:c0:1d:53:b0:7c:c9:dc:9e:2d:bc:24:ff:2c:ba:17:
         ab:87:10:3d:21:cc:b9:6f:e3:87:74:6f:b2:ed:df:c4:d1:9c:
         24:48:9c:93:b0:28:4e:ca:5d:d1:d1:10:3b:5a:3c:3f:98:12:
         7e:af:51:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD
QTU1RjE1QTQwHhcNMjUxMTAzMDUxMTI5WhcNMjUxMTEwMDUxMTI5WjAYMRYwFAYD
VQQDEw02OTA4Mzk4MS1iNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6wpu9C+hDTyJy0wpYkD82+nAhU7JP6HWvm+W4unRciKWNZfSPrclm6WIiu3C
SoXlXtoSuundrpRLWc5monthj12m4Lw8GSdMctiLLyQUzBxdn+B+lrFB/HpnHZ7H
gi1NBdkrGEoIUWxArek4ec8MY/KZR3vypNFU7aA+o4HuU+MvxlnDrkLnk2/40jMB
G2IJfTanFQUu7F2IKxOZGqaqk7J2pT2DWZXMxdd2Sqw9UNNnmLK3pfOZzumq8+W0
vxpwCuwOwVPLjLm3Zd92kJSwDHYnZg1+T/o6KoDMPcr7kedaDjEPtt+IVy7rpB3K
jji6T09X8JYFWboHFdstzn03FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDlrU29
B8+IYC5jaGhHcNsxyLcKMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG
NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr
VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4hmueagOuPxr2ZTyfKvgaj/ZwMnhFJ/p8OG48h3N+CpZ/pVidOhs8
E4MOLUivu2ysR0RUXxUPd1edrDEGqcVvrtWZ2IFfnsimxpLh/khT6W6LnbXoLhLW
h9uNqWLMx6ApBOZQ3lBn3v1VqOhBatekOLeEA0TMhAEIgIVbnYqEAzCkTROVpX+9
udi74/GDmgFsIPt79Qn0TwLploafk38YytI28N66gNBomsgIMo8CBkAQ7oqL2CZx
pUfXsy26YzyC4wthrqBiTrfAHVOwfMncni28JP8suherhxA9Icy5b+OHdG+y7d/E
0ZwkSJyTsChOyl3R0RA7Wjw/mBJ+r1Fr
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:03 2025 by rpki-client