Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File:                     wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier:          ukO3DIZWEvEH+ga1YgBa7/Pl1z5Mb1CLRwNax+ViE9w=
Subject key identifier:   DC:4E:94:C4:11:48:AF:4C:7A:E2:43:8E:73:2B:C2:29:4B:8A:E8:06
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer:       /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number:          0104
Signing time:             Sun 19 Oct 2025 07:55:28 +0000
Manifest this update:     Sun 19 Oct 2025 07:55:28 +0000
Manifest next update:     Sun 26 Oct 2025 07:55:28 +0000
Files and hashes:         1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: IjhjrKQ69sBg8dWq9mVjqve3g4xILgqJPlTrN63QpFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
                          rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
        Validity
            Not Before: Oct 19 07:55:28 2025 GMT
            Not After : Oct 26 07:55:28 2025 GMT
        Subject: CN=68f49970-2483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:36:fb:7e:da:58:20:e9:96:e0:87:c0:9c:
                    b1:2b:eb:8c:05:6f:8c:4b:70:94:4a:62:96:cc:79:
                    16:4c:9a:eb:cf:90:f8:b1:5f:41:15:1a:43:64:26:
                    59:65:8d:25:5b:20:b6:72:fc:29:2e:1f:3f:7a:20:
                    4a:a9:74:b5:a4:46:f1:91:05:15:42:97:b8:e4:20:
                    9b:ee:69:71:c7:18:b2:25:71:52:e5:2a:d9:45:52:
                    41:24:6d:f1:92:ae:a5:58:a1:4e:54:8d:90:a8:b9:
                    89:ee:88:9d:83:b8:da:fd:96:54:0f:03:31:a3:42:
                    40:ff:3a:52:a8:d0:22:0b:a2:d1:f9:9f:cb:d3:8a:
                    03:eb:af:ab:b8:5e:37:48:ad:4e:ae:3e:e3:c7:14:
                    6b:cf:a7:2b:35:b6:37:0d:85:9b:5e:14:76:b5:b6:
                    3f:9b:c5:74:cb:05:25:b2:c9:7d:10:15:19:46:86:
                    24:06:f7:7b:97:dc:8a:75:96:50:30:2d:9c:ef:bf:
                    a0:e3:c4:e7:50:f6:d2:0e:3d:b7:9b:36:5f:4f:99:
                    a1:76:7e:2e:6d:65:2e:b6:8a:91:38:a7:95:a0:55:
                    e4:c2:40:92:8f:d0:eb:88:7d:8d:ab:a3:5c:97:62:
                    79:48:1a:f5:33:57:0f:aa:e4:e7:98:37:77:4b:3e:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:94:C4:11:48:AF:4C:7A:E2:43:8E:73:2B:C2:29:4B:8A:E8:06
            X509v3 Authority Key Identifier:
                keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:bd:0f:e4:45:4c:93:ce:f1:50:51:ab:c9:a5:c8:fd:d1:
         a3:95:7a:6b:d7:ac:db:0a:cb:45:0f:e3:b2:4c:59:34:99:95:
         92:b8:90:3f:57:b1:d8:8d:66:c9:ff:04:2f:88:bf:15:55:d4:
         96:d6:c8:31:5e:58:67:8e:ec:7f:8f:f1:d8:89:09:a5:4e:0f:
         be:a6:8f:d0:84:61:2e:a0:27:47:4f:d4:43:55:79:1e:1a:3d:
         fc:03:b3:76:5b:30:35:5d:29:0d:66:e7:da:06:3d:57:a3:5b:
         6f:40:12:8f:1a:26:73:dc:4e:e8:d4:0c:35:06:87:e7:fa:0c:
         f6:32:06:6d:0a:a8:e4:ea:88:70:ee:9b:f8:c1:ba:51:f5:37:
         69:bb:f8:e5:17:17:12:b0:5b:4b:2a:68:6e:c9:86:bf:2e:6e:
         c6:df:57:3a:f9:cd:a8:ab:f7:89:32:a8:1d:75:47:e9:dc:9d:
         d4:c4:cc:f6:ea:4c:04:a5:55:6d:e0:38:53:2d:bc:75:ab:52:
         fb:b7:9d:d2:29:fd:a4:ae:2b:8d:b1:c0:3b:b1:95:7f:01:d2:
         88:eb:a3:df:a1:f0:e3:c8:1d:7c:d7:ec:98:ab:12:9c:7a:4f:
         4c:b4:a0:03:69:d8:2b:3c:d9:c7:9f:12:7d:29:ea:10:2b:18:
         43:31:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:39:31 2025 by rpki-client