Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          +LLyWaWG8pl5PJLREFWV9jP+28TC98IRUn54UKmqKC4=
Subject key identifier:   14:FE:11:7A:33:70:22:DB:13:09:41:D9:14:17:E1:2D:A6:17:2E:2A
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          03F5
Signing time:             Sun 19 Oct 2025 02:28:42 +0000
Manifest this update:     Sun 19 Oct 2025 02:28:42 +0000
Manifest next update:     Sun 26 Oct 2025 02:28:42 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: ZGUjyj21BdPO+YYv1DNbk107+l5jV20pgOKjpModdeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl
                          rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Oct 19 02:28:42 2025 GMT
            Not After : Oct 26 02:28:42 2025 GMT
        Subject: CN=68f44cda-04b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:02:2d:01:71:57:d3:e2:cc:e9:71:7e:44:
                    26:a5:52:80:39:cc:f5:5f:a6:6a:94:16:73:7e:03:
                    58:ea:35:0f:a7:1d:55:71:17:6e:90:a9:3f:b3:ec:
                    28:85:e9:3d:bc:87:42:6f:2d:a4:18:69:12:32:a6:
                    00:34:3c:2b:95:fc:af:e9:eb:a9:36:0a:5d:5e:f9:
                    02:dd:51:16:dd:57:60:41:12:0e:12:41:fe:dc:38:
                    50:d7:cb:69:43:6e:6a:51:4f:2e:c2:b1:0e:de:7a:
                    c9:94:02:e9:f4:e6:d0:29:cd:3f:7e:3f:0a:c7:bf:
                    34:90:42:9f:5d:8a:ef:8f:b6:be:01:bc:4f:66:9f:
                    1e:d5:92:4f:04:5a:e8:fb:fc:b7:06:d7:ee:b7:fa:
                    0c:17:b3:5b:8c:d0:58:61:d4:26:e8:51:2e:e1:56:
                    b9:31:9c:d6:4e:3f:82:f2:39:17:72:54:50:06:8b:
                    f8:f9:0c:d6:4e:04:5e:dd:77:66:e4:7c:00:61:53:
                    2b:35:d0:41:54:bb:83:f6:e7:fa:d4:3e:38:4c:2c:
                    40:91:56:61:8c:ab:37:e4:59:11:60:45:bb:ac:e4:
                    18:08:87:d4:ae:db:44:41:4e:31:43:ca:40:3f:50:
                    ce:f1:6b:63:18:59:35:75:5c:d1:ba:a8:d0:ab:20:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:11:7A:33:70:22:DB:13:09:41:D9:14:17:E1:2D:A6:17:2E:2A
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:26:46:3a:e0:00:9c:d0:bd:cb:a2:93:84:9b:79:82:42:32:
         fe:ac:91:3f:dc:54:ea:30:ce:a5:66:75:89:ea:14:6f:41:d3:
         26:29:9b:c8:2a:2a:4b:5e:31:e5:e8:e8:99:c1:fc:50:a0:0c:
         fc:fa:4a:5d:f4:37:f8:7c:cd:86:95:6e:70:2d:57:a3:33:81:
         1b:be:6c:31:35:af:0a:8d:d3:f3:cc:08:21:10:72:95:84:a3:
         de:42:d3:59:73:9a:67:50:70:a1:4c:b4:f5:b6:35:96:9d:0f:
         63:ad:ca:56:fc:80:60:67:6f:b3:e3:f6:f9:4e:76:07:fb:eb:
         4b:06:7c:85:8a:ed:97:33:9a:53:ef:c6:1c:c3:19:05:da:67:
         8a:75:a4:8c:62:a8:a4:08:e1:e5:a1:24:1a:e1:64:62:a3:04:
         4a:91:fd:c4:e2:66:11:60:0a:52:48:f6:fd:71:cc:90:a4:83:
         13:46:2b:e0:70:b1:90:4b:5e:92:15:0d:16:81:6c:5a:8a:f7:
         93:49:59:79:26:40:45:fe:f3:db:99:19:fa:e4:b0:f0:5e:8e:
         fd:ad:24:e9:08:5f:d9:ce:df:00:9f:95:84:3e:4c:b7:68:1b:
         0e:88:ce:6c:0f:e2:f0:cb:61:f2:0c:16:9b:df:a6:bc:01:3b:
         f9:a2:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:38 2025 by rpki-client