Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
File:                     nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json)
Hash identifier:          n9CCeEYpNUPX1X2p9FMYdGFVDob6hgNZlql9rGnwLJM=
Subject key identifier:   AE:1F:C4:3F:6B:48:BC:61:A5:98:7F:27:DD:C1:06:25:B1:19:BB:C2
Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29
Certificate issuer:       /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
Manifest number:          061B
Signing time:             Sun 19 Oct 2025 00:22:34 +0000
Manifest this update:     Sun 19 Oct 2025 00:22:34 +0000
Manifest next update:     Sun 26 Oct 2025 00:22:33 +0000
Files and hashes:         1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: uShe9RFsfhfeLU73rXuiKa8u0Htp6bDKGcgJCfITFTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl
                          rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729
        Validity
            Not Before: Oct 19 00:22:34 2025 GMT
            Not After : Oct 26 00:22:33 2025 GMT
        Subject: CN=68f42f4a-4e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:9d:4a:37:e4:63:cf:40:75:bf:c1:e8:9f:
                    44:ec:67:f0:75:52:33:2c:63:df:c7:73:d6:0b:9d:
                    b8:37:9f:43:7a:0b:3f:73:f4:66:78:16:c5:ba:42:
                    33:f9:fe:51:4b:b7:cb:ab:b9:0a:f3:12:2e:fc:b6:
                    ec:90:19:84:df:b4:07:da:bb:b9:67:71:7f:e0:a1:
                    51:2f:1c:f5:31:b5:5e:aa:7c:4c:5b:64:2a:dd:0c:
                    b5:4f:3e:09:fd:87:7f:17:2a:7a:df:e1:03:ad:e2:
                    3a:2e:f4:64:93:45:0d:74:b6:a8:c9:4e:20:dd:48:
                    47:77:a7:e7:76:1e:d8:95:cf:4c:5a:de:00:d1:00:
                    4a:a2:cb:ec:5f:1c:5d:e4:22:f5:88:9d:82:7e:b9:
                    8c:bf:9d:29:7b:5f:cc:98:b8:68:96:78:21:1e:4b:
                    40:ed:73:60:4a:10:b1:39:3b:85:38:fb:5a:64:b2:
                    f7:15:1e:4c:e1:b9:c4:64:56:99:43:c4:db:8b:53:
                    0f:c1:6f:b4:15:64:c5:17:a0:ce:c2:06:af:1b:f6:
                    06:16:f0:b7:8c:8e:a4:94:90:19:e5:49:f5:14:40:
                    77:74:ce:34:7a:ec:11:0a:5b:53:d4:eb:00:b6:48:
                    be:eb:5c:38:ed:a9:ed:21:59:17:89:44:15:7a:e0:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1F:C4:3F:6B:48:BC:61:A5:98:7F:27:DD:C1:06:25:B1:19:BB:C2
            X509v3 Authority Key Identifier:
                keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:45:34:c5:3d:3d:9a:ab:05:c9:84:24:0c:d7:ea:ee:1d:
         5f:7c:40:7a:36:ea:b2:f9:f5:57:d9:90:f8:c5:55:b7:2a:a8:
         d7:ef:f8:3c:c6:0f:b1:72:05:91:48:ed:23:b3:53:49:ab:b1:
         a1:fd:e1:54:7b:f6:0f:aa:0a:ba:73:ae:9a:76:1c:d1:eb:9f:
         0e:0e:79:41:be:9f:6f:32:cf:52:be:c7:53:aa:a4:7a:6e:5c:
         ea:6d:37:92:73:f8:4d:85:c8:56:d4:ea:0b:9a:90:75:bf:e9:
         14:9e:f0:d7:b2:cb:c8:f8:93:a7:b5:72:2e:7e:d5:38:1f:56:
         8a:1c:34:d6:74:52:89:69:c7:18:16:3d:e5:16:11:5e:88:47:
         c0:9d:a9:c5:62:6f:05:b8:2e:5b:12:96:df:39:6c:35:9d:43:
         4a:48:f0:a6:ce:dd:1c:73:87:6a:a0:39:8e:f9:64:93:a0:48:
         db:d8:35:1d:ec:08:31:0e:8b:78:7f:7d:56:91:93:1b:20:50:
         d8:fb:ac:c3:b7:d2:ef:dd:91:7a:c4:e3:44:a5:42:52:26:97:
         33:82:36:25:e0:1f:98:56:43:2a:0f:a2:db:63:9c:01:14:52:
         a3:29:34:32:97:61:79:51:ce:21:a3:ed:91:c7:d8:02:ca:93:
         dd:2d:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:43 2025 by rpki-client