Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File:                     iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier:          U8X+N/iPxw1YqF05p+Yq0nQiPXgUZPcjy+JFkmYzofA=
Subject key identifier:   F0:FB:D0:E1:50:D8:28:FF:63:E5:AF:B1:FC:7D:B4:F0:52:FD:E8:D4
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer:       /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number:          093E
Signing time:             Sat 18 Oct 2025 22:08:14 +0000
Manifest this update:     Sat 18 Oct 2025 22:08:14 +0000
Manifest next update:     Sat 25 Oct 2025 22:08:14 +0000
Files and hashes:         1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: bS4bGuef4x2rPl/mBW2kE/XgionFw1lQn9q6unvq/HQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
        Validity
            Not Before: Oct 18 22:08:14 2025 GMT
            Not After : Oct 25 22:08:14 2025 GMT
        Subject: CN=68f40fce-8f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:22:b6:8c:d2:dd:d8:f0:85:dd:0b:7a:61:
                    2b:a8:f9:d0:f6:5f:cf:9f:74:8b:78:4a:de:08:f7:
                    6f:13:ff:48:11:03:3f:f6:06:ba:82:96:0e:c8:26:
                    1a:60:50:d9:9e:c2:17:34:b2:04:e8:ff:29:78:bf:
                    b9:0c:b5:db:aa:0c:b4:4a:1b:90:f8:65:93:72:97:
                    a8:0e:8a:c3:4e:a4:4e:cf:30:00:3c:db:c0:fb:42:
                    cd:c3:63:83:8a:9a:87:95:3b:37:33:b2:92:2c:ad:
                    42:8a:d2:a4:3b:6e:70:df:40:14:28:b1:c4:f3:94:
                    98:0c:93:df:4a:ea:a5:7d:68:d2:06:0e:dc:18:45:
                    b3:ea:9b:35:10:b2:43:e2:12:3c:43:c2:7f:2a:86:
                    78:ea:7c:cb:a0:d2:c7:c4:05:5e:21:6c:c0:70:bd:
                    1e:ef:95:f4:db:ba:7a:02:e2:d8:6a:12:98:59:c0:
                    76:d1:c8:1c:4f:91:dd:9f:0d:3d:56:36:3a:f8:7e:
                    17:be:be:e5:cf:97:3c:7b:f7:29:14:10:4c:df:86:
                    0e:d4:73:b2:3d:8c:35:8b:f5:49:47:79:f6:f1:39:
                    f3:8c:4a:29:5d:df:fb:9d:f9:6e:5f:c3:d7:67:74:
                    0e:84:55:ee:24:e2:a8:65:b1:78:b8:f1:ac:6b:d8:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:D0:E1:50:D8:28:FF:63:E5:AF:B1:FC:7D:B4:F0:52:FD:E8:D4
            X509v3 Authority Key Identifier:
                keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:9e:2c:f7:6f:56:1c:0a:c1:5e:b7:05:cc:d2:a8:8d:0b:
         85:e4:c8:e9:f9:22:50:b1:4e:bc:19:1f:2c:78:b2:bf:02:0b:
         a3:ee:f8:9d:f3:42:89:9b:57:6c:69:5c:40:34:b9:e9:ef:d0:
         37:28:58:5b:db:2a:cf:dc:9f:1d:4b:d7:21:5c:33:92:5e:5f:
         60:2d:bd:bb:72:2a:88:33:28:09:30:e9:b9:32:14:55:53:ca:
         97:9a:43:30:13:32:11:2d:35:2e:57:76:89:5c:c1:52:dc:aa:
         b5:48:40:77:fc:e6:c3:a3:3a:82:ff:c4:d5:26:ad:f6:76:02:
         94:3c:c8:02:27:87:3b:29:4a:53:fa:6d:ce:f8:00:6e:22:4d:
         c7:17:03:d5:ad:97:a4:c4:ee:56:5f:2f:80:c6:1e:35:e5:ca:
         c9:bd:52:9f:28:9a:95:99:ba:55:bb:c2:8c:43:92:95:b0:37:
         09:0d:20:cf:f6:2e:9e:4f:75:58:3d:17:5b:51:44:ff:39:35:
         d9:fc:d5:e5:c0:6c:69:ac:d0:e4:7c:42:db:eb:18:00:b8:ee:
         ba:1e:38:6c:43:7c:3e:cf:44:f7:ad:8a:77:7e:39:fb:60:b3:
         60:64:3a:af:59:44:b1:db:39:c2:f3:cc:c1:e8:fb:5f:ad:22:
         4c:79:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:38 2025 by rpki-client