Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File:                     u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier:          miuQpMvIGWhihVJ5m7/2RuKY8MopPuWdHRlUrsqhUIM=
Subject key identifier:   B4:3D:D7:38:E4:6F:36:9E:41:03:C2:46:2B:FA:64:3C:1A:8E:AE:E1
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer:       /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial:       0E41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number:          17DE
Signing time:             Sat 18 Oct 2025 18:26:49 +0000
Manifest this update:     Sat 18 Oct 2025 18:26:49 +0000
Manifest next update:     Sat 25 Oct 2025 18:26:49 +0000
Files and hashes:         1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: /AadC7SgILA89vimWgBd9A9RyVM0r3Rku6d/z1B8QAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3649 (0xe41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626, serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
        Validity
            Not Before: Oct 18 18:26:49 2025 GMT
            Not After : Oct 25 18:26:49 2025 GMT
        Subject: CN=68f3dbe9-dfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:62:8e:fa:a2:69:58:67:fa:bc:70:88:b9:
                    84:d2:3f:f5:29:2e:67:ff:22:5e:ab:b4:eb:8e:18:
                    c9:c3:67:15:92:48:29:e7:fa:76:36:2c:99:83:dc:
                    5b:d6:89:76:5e:31:1a:3f:d9:19:44:2e:ba:f2:f9:
                    c4:a2:57:9d:95:96:98:9f:4d:77:0f:e9:08:7a:74:
                    1d:93:6a:e4:d9:31:71:bc:4d:0f:5b:ab:ef:57:0f:
                    ae:a2:1d:ee:85:90:ef:ed:27:fa:3a:3d:6b:2a:cf:
                    47:b6:0f:10:27:41:19:c1:ed:a6:5b:ff:f6:82:e5:
                    3a:7b:f1:c4:82:ee:c2:66:a3:a8:1d:ae:86:fa:15:
                    69:c6:4f:28:53:50:e5:fd:26:65:b1:13:5f:6a:fc:
                    b3:da:91:e5:8e:cd:2a:e1:8f:5a:e9:87:b7:2e:64:
                    4d:2d:26:27:ae:2f:33:2a:ee:31:ae:e2:2b:1e:92:
                    2f:5b:92:fa:bc:73:2c:e0:b4:b3:6f:71:78:62:48:
                    f9:51:b6:c6:ec:ef:99:fd:a2:74:87:62:d8:64:de:
                    90:15:3e:5a:c7:e2:46:07:8f:58:e6:72:65:3c:ed:
                    d9:80:39:b6:57:20:8a:ae:6a:30:46:9e:0d:fb:a8:
                    c2:d0:f4:5a:68:8f:ff:4c:fd:1c:75:15:f6:eb:24:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:D7:38:E4:6F:36:9E:41:03:C2:46:2B:FA:64:3C:1A:8E:AE:E1
            X509v3 Authority Key Identifier:
                keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:20:db:d3:65:4c:fe:94:83:9f:1f:06:7c:53:1b:48:71:7d:
         e1:8b:c7:97:4c:dd:7c:ca:27:e5:2b:cb:83:1d:9b:d7:ea:a8:
         3d:8b:fc:a6:34:ae:84:39:ae:d4:e1:3e:1d:3c:de:b6:85:d3:
         06:a6:8d:80:61:75:2e:09:15:6f:8e:70:ee:27:83:fa:79:e1:
         43:ed:c2:3d:43:fb:db:0c:38:17:ef:7d:52:d1:20:74:fa:5a:
         6e:1c:f6:04:54:a8:11:7b:aa:0f:71:0b:d1:85:d0:95:e4:c5:
         9d:30:ae:9c:af:f3:6b:9a:48:40:3f:1e:42:b4:85:34:7a:66:
         57:08:aa:2f:e4:ed:48:22:27:cc:f1:82:e9:5e:fe:22:78:cb:
         71:96:c0:5c:dc:ab:9b:c9:a4:41:b2:d0:9b:a6:6f:6e:f1:2f:
         9e:ea:4c:4c:c2:2a:be:30:a7:29:e8:1c:84:3c:db:a6:34:3e:
         6f:f4:fe:b5:35:44:cc:da:d0:43:22:82:37:53:62:fb:1d:e6:
         f2:77:45:96:b4:65:16:a1:79:46:1a:e0:d5:43:57:91:08:f2:
         f9:a9:0d:fd:de:ab:40:2b:71:dd:fe:a8:76:99:0b:fe:8f:8a:
         48:e1:67:6d:d4:e3:da:c5:eb:b3:89:7e:2a:e3:f3:05:c6:30:
         86:01:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:52 2025 by rpki-client