Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File:                     Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier:          t8FbyaXViobSYgM+YaDaggACAKkKTVFFlHg/hPpW5oQ=
Subject key identifier:   BD:72:55:BD:BF:BD:B5:3C:31:26:D5:9B:59:24:C2:B7:CC:C4:0F:F0
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer:       /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number:          6F
Signing time:             Sun 19 Oct 2025 10:14:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:14:47 +0000
Manifest next update:     Sun 26 Oct 2025 10:14:46 +0000
Files and hashes:         1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: fC/S2S8D5d0pnB9mfTu1wM/gHdyMXWTlzKldFoAtjts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
        Validity
            Not Before: Oct 19 10:14:47 2025 GMT
            Not After : Oct 26 10:14:46 2025 GMT
        Subject: CN=68f4ba17-24bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:ef:eb:6a:2d:08:b5:63:07:c5:04:9d:fe:
                    6a:cc:1f:ff:09:da:61:be:39:a8:9e:51:69:a5:04:
                    ce:de:85:ff:1e:b6:ba:74:fb:ae:ed:81:05:ab:77:
                    6c:a2:0a:a5:b9:d0:af:44:83:e0:ac:33:d8:a1:b5:
                    c1:13:5c:36:dd:71:d5:0d:d6:6a:cd:ff:db:d2:16:
                    c0:86:b3:a2:ca:01:3a:28:06:7e:49:bf:f5:01:85:
                    c9:2b:fd:e8:f7:cb:65:06:db:9a:e1:45:96:b1:c6:
                    06:56:60:a8:d8:9a:d0:1c:b0:84:d0:1f:59:a6:2a:
                    e4:bd:e2:f2:1b:e5:62:77:18:f4:5d:a1:ed:a7:45:
                    30:81:bc:2b:fb:ef:12:c2:ab:a8:72:c3:5c:7b:6a:
                    e7:fc:09:54:b7:88:d9:d4:a4:4c:6d:6f:5c:4c:a1:
                    eb:20:02:ae:1d:39:8c:9a:fb:59:4a:ad:d5:ed:fd:
                    a2:7f:e4:e3:9f:a6:04:c5:75:f8:49:27:34:8e:54:
                    ef:16:76:ef:f1:20:a3:bb:20:af:b3:dc:47:1e:87:
                    e7:50:86:90:6d:67:7f:94:02:10:63:38:f6:4a:21:
                    49:55:c7:16:f3:e2:87:5e:e6:62:03:51:d8:be:49:
                    82:93:14:22:e1:04:e2:66:44:15:f1:20:38:4f:ce:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:55:BD:BF:BD:B5:3C:31:26:D5:9B:59:24:C2:B7:CC:C4:0F:F0
            X509v3 Authority Key Identifier:
                keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:3a:19:1f:f0:34:f9:ab:9b:b0:26:71:15:94:22:03:21:
         8b:f4:63:f6:6d:9c:6b:37:ba:9c:9b:bd:a1:ae:e5:6d:c4:8e:
         0a:80:3a:82:20:25:33:9f:d9:54:b6:44:84:a4:9e:8d:6a:fc:
         02:c5:ad:c5:1e:57:c4:d3:13:32:72:69:1d:44:1a:a2:57:8d:
         3c:28:75:ab:b4:f9:c3:34:46:59:cd:bc:35:37:2b:4c:40:91:
         dd:f6:f6:1f:cc:82:33:3d:43:56:0c:ee:5a:a0:71:bc:84:f3:
         0e:0f:2d:d8:63:44:53:da:1f:25:b5:75:30:43:de:e2:dc:a2:
         ee:3b:8e:b5:c4:2e:4a:4b:92:bb:4c:25:02:8c:16:b3:33:63:
         59:a9:d3:70:d4:69:73:d0:34:01:6b:00:af:6b:54:7d:df:79:
         9d:81:de:81:18:bb:a0:cb:52:54:72:dc:f1:45:82:20:2f:8c:
         ab:f7:8b:27:90:13:1e:f3:c6:f9:48:6e:b5:01:19:c8:4b:ee:
         07:15:6f:b4:d4:66:12:bf:fc:8b:d0:6b:6b:68:7b:f6:70:99:
         7a:a5:09:33:97:3b:28:a3:e7:e7:42:a4:69:ab:f5:f8:37:d7:
         0c:02:5e:3b:6f:92:45:ff:e2:50:a2:79:3d:12:f2:76:9e:ba:
         7e:ad:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:51 2025 by rpki-client