Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
File:                     jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json)
Hash identifier:          SDYuZtz0yjmgNyrhxsfrF/dH5HcFTcmM367WR9gDWDw=
Subject key identifier:   80:E5:D4:92:80:19:A2:67:15:D7:6A:42:59:E4:EE:2F:4C:FC:88:23
Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48
Certificate issuer:       /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
Manifest number:          0224
Signing time:             Sun 19 Oct 2025 04:13:24 +0000
Manifest this update:     Sun 19 Oct 2025 04:13:24 +0000
Manifest next update:     Sun 26 Oct 2025 04:13:24 +0000
Files and hashes:         1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: KpwT/7G0oA2B9pRE49UqGmlfRWcHNOixvewQfY6Iy/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
        Validity
            Not Before: Oct 19 04:13:24 2025 GMT
            Not After : Oct 26 04:13:24 2025 GMT
        Subject: CN=68f46564-b15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:9b:8f:6c:9d:13:a7:2d:17:9b:62:08:eb:
                    d2:c4:2e:80:a7:95:ff:85:ca:97:53:3e:33:9f:6f:
                    80:05:6a:08:e2:7b:3c:e7:8c:ca:83:4e:14:c3:14:
                    b2:83:bf:f3:93:3e:2b:5e:6f:4a:9a:35:24:ca:82:
                    9c:82:71:28:06:78:56:e7:5e:b7:0e:66:2b:81:48:
                    d7:e9:56:f3:52:dc:cc:9b:02:aa:66:66:5c:d6:ca:
                    9b:e5:a4:7c:46:cf:c5:a8:45:72:a1:2e:6e:21:08:
                    b9:f5:31:fb:79:04:cf:aa:f9:32:d4:e5:44:6d:e0:
                    2f:ee:36:11:c1:f8:e8:e9:99:60:1f:ab:b6:7a:17:
                    a4:25:cc:12:56:9b:7e:78:43:3e:79:6c:73:67:d5:
                    f0:44:24:ef:e7:2d:d2:c1:ea:5d:4f:6a:6d:dd:be:
                    4a:3b:8e:c1:fe:b2:46:be:03:6e:b4:f0:18:74:9c:
                    b4:76:10:1c:f8:b5:b8:71:49:aa:4c:50:7e:fd:f2:
                    51:2f:69:6a:01:75:ab:2f:40:4e:e3:1c:86:75:66:
                    e2:45:67:ce:9f:e5:a4:aa:16:41:28:72:56:3b:c0:
                    0c:fb:71:0e:12:75:45:b4:8d:3f:6c:d0:6b:ef:d5:
                    65:b9:4c:5c:83:9b:b6:22:14:9e:a8:25:ac:2d:28:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E5:D4:92:80:19:A2:67:15:D7:6A:42:59:E4:EE:2F:4C:FC:88:23
            X509v3 Authority Key Identifier:
                keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:f3:2f:f9:8f:57:b6:6f:ff:94:4e:40:e2:7f:a9:63:d8:
         94:ad:d6:1f:83:9d:f7:8c:40:e9:f5:ee:47:0e:68:32:de:5e:
         f8:4d:13:d0:cf:99:aa:f2:0f:dc:72:e1:51:06:05:42:b4:fb:
         a6:a6:53:f7:7d:7f:94:82:49:61:b4:a6:ac:df:e7:b1:31:90:
         b6:21:25:93:29:85:90:95:9c:da:0e:f2:1d:1d:4e:aa:c9:1d:
         d3:0b:b2:39:bb:ee:7f:0f:6b:24:ff:59:67:31:05:68:ed:8e:
         69:a1:78:34:8f:45:68:e5:6d:6f:f6:60:86:3c:28:fc:68:5d:
         90:72:fa:6e:01:9f:fc:32:52:6d:35:26:42:94:14:76:07:99:
         e7:8e:be:43:be:6b:7f:1f:22:75:14:fa:8b:5b:9b:dc:b3:4a:
         0d:c7:d1:b0:e8:ab:6e:fb:41:69:7c:c0:f9:f7:63:4d:dd:e8:
         2a:03:b9:44:99:93:14:59:65:13:77:77:16:f2:6c:ae:5c:5e:
         ad:7b:6c:39:c6:64:75:31:59:af:aa:03:7c:11:3a:d1:9f:1f:
         4e:73:ad:66:38:0f:1b:2c:27:54:7e:f5:8d:a7:25:ad:12:a0:
         76:c8:63:9d:f7:f1:56:f3:15:17:b8:f2:0a:a8:cc:8f:89:0a:
         77:6b:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:26 2025 by rpki-client