Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          SV1MqpbhJhHGdQIRsWPEupZIAzAin8e7EVIAL++o6ao=
Subject key identifier:   86:77:30:C0:C1:FF:7D:11:31:68:B7:2B:60:22:F6:25:23:0E:0C:0D
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          B2
Signing time:             Sun 19 Oct 2025 09:12:08 +0000
Manifest this update:     Sun 19 Oct 2025 09:12:08 +0000
Manifest next update:     Sun 26 Oct 2025 09:12:08 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 4q8EYw/65Lg1OR6eSRFMs82nJyvsWoKn162L6ywm0rQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Oct 19 09:12:08 2025 GMT
            Not After : Oct 26 09:12:08 2025 GMT
        Subject: CN=68f4ab68-3899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:78:d7:51:47:b5:6d:fb:2c:6f:cd:f3:8f:
                    7a:eb:68:21:8a:69:7b:89:db:02:e0:40:9e:38:ab:
                    09:c5:7b:4e:1b:bb:c1:60:e6:3d:2c:34:3b:36:3e:
                    2a:0c:d5:41:9c:59:0b:82:d1:13:55:87:82:fb:ca:
                    4e:ab:df:b5:da:1d:ff:10:5b:c8:73:c6:43:37:3d:
                    55:63:87:9b:6d:94:07:ad:b6:ef:c5:7b:7d:a0:c7:
                    48:dd:6f:e8:14:3a:25:35:08:09:e1:7f:be:6d:b7:
                    de:f7:2e:54:1c:66:dc:0f:06:8c:6a:20:cd:04:3e:
                    7e:07:99:86:8d:9f:cf:5d:00:99:63:39:5e:f9:98:
                    81:6a:db:c8:e1:bb:8e:b3:5e:81:71:38:de:3e:be:
                    62:2d:e3:f9:ab:79:08:e7:f4:da:3d:fa:fa:c2:43:
                    31:88:fc:8a:8c:ab:71:65:2e:af:c0:38:a6:53:82:
                    56:b3:39:13:78:a9:be:b5:b8:39:88:4a:bf:2b:ce:
                    53:79:5a:ce:d1:19:3b:a2:a3:b2:1c:0e:53:d3:0a:
                    c7:6f:1d:2e:8f:ba:26:d1:67:33:36:3e:05:7f:af:
                    af:78:ba:c9:78:33:89:46:05:02:d6:6b:b9:ac:63:
                    ef:53:db:5e:21:17:b7:84:9f:30:b6:4d:50:c7:a1:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:77:30:C0:C1:FF:7D:11:31:68:B7:2B:60:22:F6:25:23:0E:0C:0D
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:b1:41:72:90:10:6b:30:5b:63:21:9f:e7:b1:a4:a9:89:
         fb:bd:5d:b7:1b:d1:0a:e8:71:78:79:92:d3:73:7b:2c:87:4d:
         3e:3a:0e:29:5a:c3:8e:af:c9:8c:b2:9d:94:e6:83:21:2d:de:
         b5:01:8e:6f:25:a2:f6:93:ba:b0:64:39:2b:b3:eb:73:4f:eb:
         f1:03:4c:a4:15:1b:a6:c8:c9:53:a8:0a:d4:f8:2c:0e:10:3d:
         c1:4c:14:03:84:aa:8a:e8:fe:e7:76:b5:e3:7d:ba:33:75:33:
         21:3c:1a:fd:19:e1:b2:14:94:43:a4:6f:88:0d:17:75:c8:4f:
         33:96:68:27:52:e5:95:8a:f6:f8:63:7b:fc:17:a9:24:84:2c:
         ed:be:74:ac:60:36:ae:a1:e7:35:73:63:44:f8:40:25:de:8e:
         b8:1e:2c:6d:d4:0a:c5:df:21:c0:53:79:97:76:47:04:18:5d:
         22:4d:99:d6:1e:b2:15:46:bc:82:7b:60:45:8c:41:d8:b9:bb:
         59:e0:24:48:72:e3:58:6a:b1:2b:23:34:dc:b0:93:f8:5e:eb:
         8d:d7:2c:42:7e:c4:db:32:bd:54:67:78:c0:9b:1d:49:02:d1:
         ff:57:f8:65:73:5e:9c:62:ae:d5:72:51:7c:5b:5e:b5:d7:28:
         0a:a3:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:57 2025 by rpki-client