Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
File:                     _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json)
Hash identifier:          MN9+GTlEWc79ET3firwQMmX93/8vpX9IWVIxS3ifBEE=
Subject key identifier:   73:8A:35:28:EE:29:F4:C4:44:1B:B7:C0:B5:4D:26:EE:4B:5D:97:89
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Certificate issuer:       /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
Manifest number:          A6
Signing time:             Sun 19 Oct 2025 09:30:42 +0000
Manifest this update:     Sun 19 Oct 2025 09:30:42 +0000
Manifest next update:     Sun 26 Oct 2025 09:30:42 +0000
Files and hashes:         1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: 9SmlzBrly7p5TmG9e1uqm2WsOz3Uq3SVTYNNXMzYrqE=)
                          2: 8AD1FCF8BBBF11EF87907310C4F9AE02.roa (hash: Rt4bwv9SSiv+XiRqx1M1+YBUJXfxko335m5/WVQTRcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
        Validity
            Not Before: Oct 19 09:30:42 2025 GMT
            Not After : Oct 26 09:30:42 2025 GMT
        Subject: CN=68f4afc2-1ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:bb:d9:11:0c:53:77:37:b2:d8:9c:22:52:
                    03:bd:5f:53:2c:d9:de:3b:e6:a6:f5:4f:af:f6:91:
                    a5:86:d2:03:64:ae:7f:aa:7a:d6:d9:bd:47:d3:25:
                    72:c1:a7:84:33:7d:76:98:37:80:7d:03:97:6d:7a:
                    a6:70:f7:13:cc:40:b1:8c:7e:da:3b:d6:de:e2:10:
                    a6:0f:f4:09:5c:74:e4:f2:04:be:6e:68:2f:59:58:
                    3e:8d:7e:44:2f:a4:45:c2:75:63:0a:f0:35:9b:b6:
                    37:2f:ba:14:2f:96:af:43:b5:eb:e9:84:b8:07:4d:
                    c4:a2:24:cd:e2:b7:e6:b7:6b:82:07:1a:13:32:19:
                    cf:a6:c0:6f:83:53:ab:65:0a:66:4a:d6:d3:f6:15:
                    bc:4d:e8:13:c2:35:7d:f6:61:31:fc:1c:88:95:d4:
                    d7:b9:86:fb:2c:c2:7b:7f:e4:86:4d:83:07:5f:1f:
                    2f:00:7c:cf:fa:a8:6c:36:eb:73:83:0d:e8:e0:28:
                    37:8f:59:82:05:93:5a:4f:52:26:17:ab:d2:99:52:
                    50:14:dd:2d:d7:c9:f9:66:f4:b9:b4:2d:72:c6:88:
                    e9:8d:09:a3:ee:20:59:42:59:36:65:d9:6e:63:59:
                    6a:7b:2d:c3:8a:04:1d:13:20:9e:a2:1c:ca:9d:46:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:35:28:EE:29:F4:C4:44:1B:B7:C0:B5:4D:26:EE:4B:5D:97:89
            X509v3 Authority Key Identifier:
                keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:67:9c:35:3a:30:00:31:67:52:3e:43:c8:e3:e0:82:c3:5c:
         56:d5:54:ed:ba:11:3d:c3:0a:a1:96:8d:e5:d2:97:15:49:13:
         10:db:0f:ce:da:ca:39:d1:f9:d8:0f:d2:fa:b8:15:ca:82:bb:
         6e:43:18:ef:f8:e4:dc:b0:9e:a1:f3:b7:1d:81:a1:62:5e:92:
         2f:60:1f:2e:04:40:92:d3:e0:b7:00:45:76:30:b9:c7:11:c9:
         0f:2f:a7:b9:1f:97:07:90:b6:b1:4e:5b:62:cd:f9:ce:b1:7c:
         ec:c8:60:78:c9:28:04:34:19:c2:3e:fa:07:3e:e0:26:39:df:
         0b:30:48:60:87:3f:7c:69:9b:04:3c:6e:1f:da:41:90:07:d7:
         c1:a7:f4:57:4c:8a:d2:69:4b:64:a8:96:1b:7d:a3:7c:65:e2:
         3a:a4:cb:95:55:8e:04:07:0d:17:d0:01:22:b3:f6:81:8c:92:
         78:5c:ab:c8:17:5a:7a:80:21:f9:bf:51:ca:05:7a:52:c9:20:
         93:ff:a2:8e:6f:49:2a:3a:12:b9:04:40:32:aa:67:e9:5d:a8:
         53:c2:5a:57:5c:21:a5:f7:df:eb:89:4e:dd:48:ca:eb:aa:6e:
         4a:2f:b1:28:08:3e:d9:2d:9e:af:37:a0:40:79:7b:46:d7:09:
         1e:3a:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 15:12:57 2025 by rpki-client