Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          ShbmupQa21J4XHC7clnPC8BA/IR0fo8TQi/7zKA38Y0=
Subject key identifier:   4F:36:01:13:F2:FA:E2:6A:2B:75:5C:D2:65:CB:B0:6D:A8:2C:BB:17
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       34CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          34CC
Signing time:             Sat 18 Oct 2025 15:00:38 +0000
Manifest this update:     Sat 18 Oct 2025 15:00:37 +0000
Manifest next update:     Sat 25 Oct 2025 15:00:37 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: JRTfTLMOvJtQQ8+QM2jFp1t4bTWtASLJqL7cePXHCA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13516 (0x34cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: Oct 18 15:00:37 2025 GMT
            Not After : Oct 25 15:00:37 2025 GMT
        Subject: CN=68f3ab95-cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:27:bc:2b:39:91:58:18:d5:64:bd:2b:b3:
                    30:60:27:75:c8:71:03:47:e8:81:f9:22:3b:f9:6a:
                    ff:79:9d:ff:a8:f4:dc:47:2a:1d:4f:8a:94:75:b2:
                    0a:99:95:2f:47:94:9d:1f:7a:96:51:a3:e5:50:0c:
                    a4:fd:68:27:50:57:64:82:a1:56:02:80:19:27:d6:
                    a4:4d:af:19:b7:e7:ff:e1:ef:be:3a:97:f0:0c:29:
                    c8:fd:c3:8d:62:b2:5e:72:08:9b:7d:b1:5a:8b:26:
                    41:fa:96:d1:a5:ff:ce:d9:ed:c5:88:52:65:d5:83:
                    89:cb:0b:e2:bc:58:74:c7:e0:74:f3:38:6f:72:5f:
                    f2:0e:36:c6:13:4d:de:1c:9f:c6:e7:26:2d:59:45:
                    d1:63:a8:b9:94:7b:ac:b8:46:ec:9c:71:d7:7b:eb:
                    f0:2b:a4:48:48:8f:68:d0:01:b1:9c:4a:2d:a4:1f:
                    a2:2d:f3:f7:ec:3d:14:13:43:5e:ef:67:d8:86:3c:
                    22:29:a4:0a:54:61:5e:0b:f5:8c:a3:cb:36:ae:83:
                    dc:71:79:5a:6f:9f:a3:b7:44:10:b5:d5:f8:b1:f3:
                    1e:93:33:7e:7b:4f:be:d5:87:9d:06:99:8e:b8:d0:
                    07:32:4b:e3:5e:04:b0:82:e1:08:d1:87:a0:8c:8f:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:36:01:13:F2:FA:E2:6A:2B:75:5C:D2:65:CB:B0:6D:A8:2C:BB:17
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ad:f1:a8:be:92:43:06:72:f7:90:31:82:ed:cd:0e:80:c2:
         61:e9:66:e7:8d:02:92:d3:d5:3b:d6:f8:e8:04:6c:0e:f0:c3:
         37:8e:50:0c:c3:d3:fb:12:1d:18:99:fd:78:d5:cc:03:f7:ad:
         49:ea:7e:0b:7e:fe:35:9c:8a:6c:a7:68:7e:9c:62:a3:d1:cd:
         f4:0e:8d:86:7f:d4:42:5c:e6:f7:8a:93:6e:4d:19:74:0f:c8:
         04:f7:9c:85:b1:77:45:da:36:88:b9:21:4b:bf:93:ff:87:9e:
         bc:e9:f8:72:f4:dc:ed:b1:3d:ab:07:f9:94:70:18:f8:1d:bc:
         d6:c7:f7:19:a4:56:28:fc:77:ff:04:63:22:55:82:fb:88:f6:
         de:e9:3d:28:30:7d:87:1a:89:75:c0:48:7c:f0:3d:d5:df:6f:
         f6:71:ce:63:aa:b1:80:74:e1:66:9c:6b:12:24:de:ef:dc:ba:
         9d:c0:cd:d4:95:a0:bb:79:4f:c4:59:05:49:d2:72:c9:b6:3a:
         b7:a0:0b:0a:01:73:07:89:10:ee:bf:d1:f3:b6:44:9e:e8:96:
         df:56:73:0b:d2:15:71:ef:ae:36:a4:43:f8:ed:4b:0d:26:3b:
         7c:2b:7d:5f:2d:cc:40:7d:34:fb:e0:44:29:c1:8a:58:a4:9c:
         3d:0c:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:11 2025 by rpki-client