Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
File:                     6_FxbSSrM1DAvAcLRejf29D88b8.mft (raw, json)
Hash identifier:          rFmccYeMe8gaeEjyvRwtXoVf+aKfKA9rueQpuXEt1TU=
Subject key identifier:   33:B6:37:C5:DA:7F:1F:71:2A:B9:CD:2C:A9:CD:6C:0E:9D:D0:F7:80
Authority key identifier: EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF
Certificate issuer:       /CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
Certificate serial:       2786
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
Manifest number:          2786
Signing time:             Sat 18 Oct 2025 15:51:11 +0000
Manifest this update:     Sat 18 Oct 2025 15:51:10 +0000
Manifest next update:     Sat 25 Oct 2025 15:51:10 +0000
Files and hashes:         1: 6_FxbSSrM1DAvAcLRejf29D88b8.crl (hash: 2HOo5/fPCllH4dlDKajfdNLlgJq69YphZdaFfOu2ZfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10118 (0x2786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
        Validity
            Not Before: Oct 18 15:51:10 2025 GMT
            Not After : Oct 25 15:51:10 2025 GMT
        Subject: CN=68f3b76f-58f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:fa:83:77:40:1c:b9:e1:fb:5f:ab:3e:15:
                    d8:08:89:b8:ef:a4:d6:55:fb:ee:25:89:6f:ab:af:
                    cc:d7:df:87:dd:4e:ee:a0:79:95:49:b2:11:fe:de:
                    29:b3:72:b5:12:82:b4:66:e6:f9:9f:f5:01:10:b8:
                    9f:c8:dc:dd:9c:92:76:72:b8:38:46:49:de:0d:1b:
                    a4:82:fb:fa:9b:c7:59:72:9d:f0:3d:b7:0e:b4:0c:
                    34:cd:7f:44:6c:bf:eb:10:c8:35:39:3c:ef:67:ba:
                    44:31:d0:36:28:0b:c2:3c:f6:52:b4:ae:39:7c:b0:
                    b6:42:4d:bd:4c:d1:44:e2:1b:4e:f3:13:34:6f:ee:
                    14:df:1f:b5:46:d4:92:00:69:39:25:e1:74:ed:97:
                    6a:91:f9:51:ed:5d:80:d9:30:e4:cc:0b:49:29:cb:
                    2d:4f:61:35:53:37:4c:4d:94:26:57:c5:0d:aa:37:
                    5f:a0:42:b1:6c:32:24:03:10:94:8e:31:1c:2c:ac:
                    43:35:f7:ac:e3:c2:03:f5:bc:53:7a:f1:89:4e:91:
                    96:7e:3b:c2:ce:bc:c5:6c:19:25:0c:93:8c:92:97:
                    5a:ac:1f:3f:b3:13:83:fe:f6:df:69:45:bd:84:f1:
                    66:ce:16:11:f8:1d:f7:99:db:55:4d:bd:cf:53:22:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B6:37:C5:DA:7F:1F:71:2A:B9:CD:2C:A9:CD:6C:0E:9D:D0:F7:80
            X509v3 Authority Key Identifier:
                keyid:EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:61:2a:bb:be:25:41:fe:b5:f4:d7:b2:6a:c1:9a:aa:b1:ce:
         80:be:18:5a:3f:3d:e8:72:3a:b0:9f:5e:71:2a:d7:4d:9c:5e:
         7e:98:24:80:7e:48:30:dc:ac:e2:bb:dc:f4:6b:08:6e:82:13:
         18:bb:94:6e:22:2f:fc:43:24:20:3e:a6:68:72:b3:b0:1f:4e:
         cf:f1:33:96:84:da:4e:b8:07:1c:91:61:ff:4e:c8:38:ce:54:
         d2:b8:84:ee:a5:c8:7c:e8:b7:09:52:99:d5:35:af:6b:e3:0c:
         0c:b2:70:18:61:6e:17:2d:41:8c:a6:f2:ec:b1:23:97:e9:32:
         5e:19:c9:c4:db:04:49:20:ad:18:eb:0e:79:29:79:8c:10:59:
         72:58:18:d1:bd:7e:9f:c1:71:ac:fb:73:2f:d3:36:10:35:e5:
         3e:17:95:e3:fa:cc:65:ff:44:60:a8:d0:81:86:c8:8d:c5:3a:
         ba:87:00:4e:e0:24:2d:cf:b2:b6:93:e3:0f:dd:a4:0b:97:9a:
         ad:37:85:00:e5:b0:09:ee:fc:fa:2d:65:19:34:73:ba:e1:f7:
         44:7b:9c:7b:33:6e:76:7c:c4:3d:00:31:73:ab:4a:13:a0:ce:
         3e:49:7c:97:d8:43:59:9f:b4:ee:bb:d9:cf:dd:31:9e:f4:35:
         8f:bb:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:09 2025 by rpki-client