Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
File:                     cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json)
Hash identifier:          LK33QRzNym0PuaIPafi7eht2UozsekUz0eonpluIgts=
Subject key identifier:   5D:F5:09:77:FA:44:00:11:FB:A0:91:E4:2A:0B:0B:E5:8D:18:E9:9A
Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
Certificate issuer:       /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
Certificate serial:       1679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
Manifest number:          2676
Signing time:             Sat 18 Oct 2025 17:06:39 +0000
Manifest this update:     Sat 18 Oct 2025 17:06:39 +0000
Manifest next update:     Sat 25 Oct 2025 17:06:39 +0000
Files and hashes:         1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: f943PDiPUbo9nk00PYjnKvbjlg55CReclIRlVtyMcYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5753 (0x1679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
        Validity
            Not Before: Oct 18 17:06:39 2025 GMT
            Not After : Oct 25 17:06:39 2025 GMT
        Subject: CN=68f3c91f-5938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:1e:23:44:b8:4a:ac:a1:28:0c:db:67:60:
                    72:ba:28:d1:47:cc:09:75:32:80:02:3f:61:3e:8d:
                    19:c2:d2:76:5b:2e:e9:2b:07:a7:e9:f7:06:02:72:
                    25:e8:8c:2a:69:39:04:48:f9:67:35:6a:9e:e5:d3:
                    01:33:28:89:6d:7c:72:78:43:32:f6:37:89:14:fc:
                    7d:27:a4:cf:bd:f4:f4:92:83:9a:4d:8d:70:78:79:
                    ad:e5:e8:61:4a:12:28:97:90:d0:45:2c:b4:29:3a:
                    e9:89:f3:9d:7b:73:03:f5:1b:8b:0a:26:cb:db:61:
                    40:9f:0b:ec:30:ee:d7:ec:53:d0:1f:5c:f1:b1:8b:
                    3b:38:94:20:25:78:a6:32:ac:5b:80:80:4a:8f:44:
                    a7:d7:01:0f:a6:e7:55:a1:89:0a:26:a8:56:5c:28:
                    42:ef:ed:91:a4:81:e3:9e:df:5e:b1:9a:cd:e7:37:
                    1e:90:0c:1b:dc:48:a8:b4:45:d5:9a:01:da:e0:0c:
                    e3:2d:1b:d9:30:16:13:c3:25:2e:4b:de:1d:d3:b7:
                    49:b1:73:16:32:71:4e:a9:79:72:f0:05:89:79:d9:
                    37:7d:33:6c:95:36:ff:cb:87:ce:19:b4:f0:c0:5a:
                    1d:94:5f:d5:07:14:97:0d:6e:11:55:99:da:08:f4:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:09:77:FA:44:00:11:FB:A0:91:E4:2A:0B:0B:E5:8D:18:E9:9A
            X509v3 Authority Key Identifier:
                keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:d3:d4:2f:03:94:75:a6:c2:69:ce:03:fc:12:01:ae:19:
         50:0c:23:a5:f7:11:fc:f7:18:87:e4:8c:a0:8d:9d:45:21:ad:
         93:8a:59:9b:c6:a7:86:c2:53:7e:40:2f:af:27:ec:e9:68:cc:
         3d:04:be:db:4e:54:94:ef:5b:7d:25:24:f0:3a:62:c6:fb:94:
         c2:d4:31:29:1e:54:f5:54:c2:2c:37:8c:70:3a:88:94:c5:1b:
         06:20:b8:7d:bf:17:5c:a8:8b:b9:6a:b3:92:08:77:e3:ca:76:
         6c:75:1e:8f:29:df:d6:c2:c1:2b:bd:2d:8b:19:b0:5d:b3:ea:
         d1:d2:5c:7b:48:91:51:4a:db:62:4d:a9:5b:0e:bb:2b:2f:2a:
         2d:99:90:b1:9b:92:5d:ab:db:e6:47:2e:e1:13:79:77:8d:f5:
         3f:c3:60:78:b4:02:4c:23:1f:18:ea:5d:d1:25:94:ad:5a:d8:
         81:dd:2b:a9:f4:d1:9a:64:2b:9e:2c:69:c3:27:23:59:cb:01:
         17:9f:66:44:0d:91:2a:63:b0:69:88:d3:19:dc:09:8e:08:07:
         61:54:77:b3:b3:e7:66:86:32:3f:36:2b:fd:73:58:07:d5:05:
         59:d0:5b:5d:4c:b9:30:b3:0e:ca:7b:3c:21:8f:7e:f4:53:ba:
         fa:01:9d:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4
RDJBRUJGNDEwHhcNMjUxMDE4MTcwNjM5WhcNMjUxMDI1MTcwNjM5WjAYMRYwFAYD
VQQDEw02OGYzYzkxZi01OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtd4eI0S4SqyhKAzbZ2ByuijRR8wJdTKAAj9hPo0ZwtJ2Wy7pKwen6fcGAnIl
6IwqaTkESPlnNWqe5dMBMyiJbXxyeEMy9jeJFPx9J6TPvfT0koOaTY1weHmt5ehh
ShIol5DQRSy0KTrpifOde3MD9RuLCibL22FAnwvsMO7X7FPQH1zxsYs7OJQgJXim
MqxbgIBKj0Sn1wEPpudVoYkKJqhWXChC7+2RpIHjnt9esZrN5zcekAwb3EiotEXV
mgHa4AzjLRvZMBYTwyUuS94d07dJsXMWMnFOqXly8AWJedk3fTNslTb/y4fOGbTw
wFodlF/VBxSXDW4RVZnaCPSeiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF31CXf6
RAAR+6CR5CoLC+WNGOmaMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw
NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP
SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPY9PULwOUdabCac4D/BIBrhlQDCOl9xH89xiH5IygjZ1FIa2Tilmb
xqeGwlN+QC+vJ+zpaMw9BL7bTlSU71t9JSTwOmLG+5TC1DEpHlT1VMIsN4xwOoiU
xRsGILh9vxdcqIu5arOSCHfjynZsdR6PKd/WwsErvS2LGbBds+rR0lx7SJFRStti
TalbDrsrLyotmZCxm5Jdq9vmRy7hE3l3jfU/w2B4tAJMIx8Y6l3RJZStWtiB3Sup
9NGaZCueLGnDJyNZywEXn2ZEDZEqY7BpiNMZ3AmOCAdhVHezs+dmhjI/Niv9c1gH
1QVZ0FtdTLkwsw7Kezwhj370U7r6AZ2a
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:11 2025 by rpki-client