Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          6TRdLDI/RuxBpIyAcCSmo03HCqI5LexoD686HXBsD9w=
Subject key identifier:   B0:72:37:80:F2:5B:59:EC:D5:02:53:A8:29:05:6A:9E:A3:CB:A3:61
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          86
Signing time:             Sun 19 Oct 2025 09:53:33 +0000
Manifest this update:     Sun 19 Oct 2025 09:53:32 +0000
Manifest next update:     Sun 26 Oct 2025 09:53:32 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: p0NX2qXNVC1wv0292wzHFXvMVjGXoQmV/YqX8AHUlcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Oct 19 09:53:32 2025 GMT
            Not After : Oct 26 09:53:32 2025 GMT
        Subject: CN=68f4b51d-e617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:b0:39:cc:f0:85:c9:cb:31:36:90:58:b5:
                    af:3b:5d:75:ee:ac:48:92:3a:22:25:fb:20:13:21:
                    e7:eb:c8:0c:17:73:e0:1a:64:f6:d2:b9:7e:4e:d4:
                    b3:18:71:a5:57:48:6e:be:8b:1f:a9:a4:1a:24:7a:
                    50:44:fc:a5:3a:d7:94:50:31:de:d6:93:e2:3a:b4:
                    a6:df:2c:a5:bd:11:b2:c0:0d:cf:14:ba:d1:f5:9f:
                    68:72:11:35:63:26:b3:ad:10:b3:76:19:44:41:59:
                    6e:1d:81:69:5f:19:77:49:4b:7f:42:bd:42:b1:8c:
                    c0:f3:dd:b2:74:45:af:f3:e2:58:7a:c8:61:aa:c8:
                    4c:5c:7b:3c:41:6d:62:36:ea:e4:9b:2d:00:b0:ba:
                    ec:d9:8e:79:95:0c:b9:7d:08:ee:93:e8:33:91:2a:
                    f8:ee:4f:43:91:75:7b:26:69:2d:db:74:72:23:bc:
                    3b:99:55:9d:4c:9b:bb:2e:b2:6d:bb:19:57:ac:a2:
                    f8:ba:3a:ff:5e:5e:a7:ab:7f:38:6b:bd:e1:14:b4:
                    81:6f:22:20:9c:67:1c:cd:57:f9:3a:13:b2:86:4e:
                    3f:b3:eb:45:f3:58:b3:85:0b:46:9a:73:31:41:58:
                    c7:d1:3a:39:57:3e:66:98:71:ff:00:08:7c:a7:db:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:37:80:F2:5B:59:EC:D5:02:53:A8:29:05:6A:9E:A3:CB:A3:61
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:5e:11:b1:ac:bd:4b:29:a6:36:0d:40:38:aa:9e:91:b5:
         70:f0:b5:4e:3b:be:fc:53:9d:60:a0:46:61:29:46:fe:9a:59:
         10:cc:c2:fe:ed:e8:0e:3b:b2:9e:85:d8:6b:cc:56:1f:b2:94:
         31:ae:f4:f9:5f:83:2a:1a:4d:df:97:91:1a:ba:0a:67:ba:4e:
         e9:c7:69:c7:de:0c:e1:e1:bb:5e:cb:d6:23:44:2e:b9:66:a2:
         e8:ec:3f:e5:a1:f9:15:4b:36:68:4f:e5:7b:70:f6:3b:ff:63:
         5f:5b:e7:7d:19:e0:01:5c:15:2e:57:d5:5a:b4:36:ce:a2:03:
         61:8b:43:91:6a:fe:7d:ba:fa:0a:88:9e:0d:5c:db:70:b8:37:
         89:72:ef:39:43:24:f6:f8:8d:f4:16:3d:45:b0:fd:fa:c6:af:
         41:54:79:09:82:18:50:e3:86:a3:dd:63:d0:32:80:52:a6:79:
         ba:ff:74:c2:2d:8e:62:f7:9c:81:8d:06:9f:4c:9d:db:b0:dd:
         a7:f3:02:92:bf:ca:9e:f0:f2:04:66:7c:bc:1e:0d:a2:0b:74:
         1b:0d:a4:3c:8c:c4:ae:d3:55:26:f3:36:6b:61:a6:12:da:be:
         bb:bc:f4:59:1e:1e:b4:4d:71:74:f0:20:7d:72:66:e8:59:b0:
         d6:8b:b9:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG
MDg2MTA4MkIwHhcNMjUxMDE5MDk1MzMyWhcNMjUxMDI2MDk1MzMyWjAYMRYwFAYD
VQQDEw02OGY0YjUxZC1lNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPCwOczwhcnLMTaQWLWvO1117qxIkjoiJfsgEyHn68gMF3PgGmT20rl+TtSz
GHGlV0huvosfqaQaJHpQRPylOteUUDHe1pPiOrSm3yylvRGywA3PFLrR9Z9ochE1
YyazrRCzdhlEQVluHYFpXxl3SUt/Qr1CsYzA892ydEWv8+JYeshhqshMXHs8QW1i
Nurkmy0AsLrs2Y55lQy5fQjuk+gzkSr47k9DkXV7Jmkt23RyI7w7mVWdTJu7LrJt
uxlXrKL4ujr/Xl6nq384a73hFLSBbyIgnGcczVf5OhOyhk4/s+tF81izhQtGmnMx
QVjH0To5Vz5mmHH/AAh8p9vlJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLByN4Dy
W1ns1QJTqCkFap6jy6NhMB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG
OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCD7V4Rsay9SymmNg1AOKqekbVw8LVOO778U51goEZhKUb+mlkQzML+
7egOO7KehdhrzFYfspQxrvT5X4MqGk3fl5Eaugpnuk7px2nH3gzh4btey9YjRC65
ZqLo7D/lofkVSzZoT+V7cPY7/2NfW+d9GeABXBUuV9VatDbOogNhi0ORav59uvoK
iJ4NXNtwuDeJcu85QyT2+I30Fj1FsP36xq9BVHkJghhQ44aj3WPQMoBSpnm6/3TC
LY5i95yBjQafTJ3bsN2n8wKSv8qe8PIEZny8Hg2iC3QbDaQ8jMSu01Um8zZrYaYS
2r67vPRZHh60TXF08CB9cmboWbDWi7nt
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:48 2025 by rpki-client