Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
File:                     67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json)
Hash identifier:          L/biyj4VxG1eJ1QwLBZ3Do7JkfhnYGh2yLOFMYMoEP0=
Subject key identifier:   A2:4B:BF:F1:52:1E:AA:91:05:5C:DF:7C:3E:82:5D:DD:AC:9B:56:66
Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
Certificate issuer:       /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
Manifest number:          29
Signing time:             Sun 19 Oct 2025 11:15:28 +0000
Manifest this update:     Sun 19 Oct 2025 11:15:27 +0000
Manifest next update:     Sun 26 Oct 2025 11:15:27 +0000
Files and hashes:         1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: EYOL5RhF2mUPEirgwaeniTvhMpy4OnkmRLWMItGILds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
                          rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
        Validity
            Not Before: Oct 19 11:15:27 2025 GMT
            Not After : Oct 26 11:15:27 2025 GMT
        Subject: CN=68f4c850-66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:31:18:a6:d7:e4:72:c6:21:d4:72:bf:37:
                    d9:c8:7a:e9:6d:1c:27:72:1d:f9:e8:3c:92:14:c0:
                    d5:bc:e2:9c:50:3b:28:b4:ad:db:61:f3:22:77:cb:
                    b7:52:77:b5:49:e7:be:b5:3c:10:2d:b1:97:0b:74:
                    ea:e7:20:36:cd:ad:94:f4:59:dc:55:56:eb:09:e5:
                    17:b2:d5:85:07:7c:cb:b6:36:05:79:58:d3:32:25:
                    0f:a9:13:09:3b:83:c7:01:b6:ad:f8:6c:90:3d:db:
                    9a:44:a8:cb:b8:50:df:c9:e2:d7:45:07:cd:3d:3f:
                    6c:91:88:d6:25:d2:f9:24:25:86:02:a9:28:38:24:
                    68:5c:dd:2e:d8:b9:8f:80:d9:2a:42:ac:d6:36:b9:
                    c2:94:a0:f4:e2:0d:15:15:1d:1f:99:62:ee:d0:8f:
                    80:f2:cb:4c:78:d2:2f:23:ff:b3:68:21:0a:b9:da:
                    1c:55:5b:e9:dd:91:2d:10:c4:8d:31:9a:34:3f:31:
                    63:90:f5:10:71:82:7d:c0:17:c7:88:08:61:dc:25:
                    d3:03:ef:a3:d2:60:1b:15:23:b1:77:0c:e9:8b:fe:
                    e1:65:c2:b7:2d:a5:5d:7d:02:2a:ee:0c:55:06:8d:
                    03:0c:ec:95:d6:ee:fb:22:ae:03:1e:28:64:9e:10:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:BF:F1:52:1E:AA:91:05:5C:DF:7C:3E:82:5D:DD:AC:9B:56:66
            X509v3 Authority Key Identifier:
                keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:56:03:9d:93:76:32:45:d6:e5:b2:59:8a:c3:70:34:4e:d0:
         42:e7:ee:f8:9d:f2:ff:5d:7b:fc:31:ee:05:2f:98:41:cd:46:
         78:17:62:50:5f:63:e7:af:44:24:d0:ad:c3:9b:66:43:60:8b:
         78:b8:ce:b2:f1:b3:03:38:ab:00:ce:2f:25:fe:c9:7f:f7:08:
         47:77:0f:33:c7:84:b0:0b:ed:10:db:a3:02:2b:27:93:cd:bb:
         d5:9d:b6:5d:cd:77:62:3a:ac:76:f4:5a:db:45:3f:8b:e5:00:
         9c:6a:b8:87:85:dd:c9:28:17:bc:6d:a4:af:3e:cd:b7:6f:ea:
         ec:34:1b:87:51:19:7f:88:83:64:0b:96:c8:c0:40:a7:65:0c:
         19:ec:d3:75:5e:52:5d:ff:e1:32:95:de:bb:16:98:26:ee:1f:
         b1:86:00:12:4b:5d:42:1f:bd:16:10:cc:95:79:c6:76:02:02:
         7c:52:b2:42:fa:9b:bf:1b:5a:d8:04:27:50:4e:62:d8:b7:4e:
         af:b6:38:1c:c9:55:83:05:86:7b:7d:98:c2:72:67:ca:62:49:
         d4:f9:c7:78:3b:b5:9a:e4:92:a1:cd:47:ef:4c:d0:7d:7e:b9:
         b6:a1:ad:05:6c:c0:e2:3a:63:72:10:dd:67:ab:16:7e:75:ec:
         df:4b:b5:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3
MEU4OEI4MjAeFw0yNTEwMTkxMTE1MjdaFw0yNTEwMjYxMTE1MjdaMBgxFjAUBgNV
BAMTDTY4ZjRjODUwLTY2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtNjEYptfkcsYh1HK/N9nIeultHCdyHfnoPJIUwNW84pxQOyi0rdth8yJ3y7dS
d7VJ5761PBAtsZcLdOrnIDbNrZT0WdxVVusJ5Rey1YUHfMu2NgV5WNMyJQ+pEwk7
g8cBtq34bJA925pEqMu4UN/J4tdFB809P2yRiNYl0vkkJYYCqSg4JGhc3S7YuY+A
2SpCrNY2ucKUoPTiDRUVHR+ZYu7Qj4Dyy0x40i8j/7NoIQq52hxVW+ndkS0QxI0x
mjQ/MWOQ9RBxgn3AF8eICGHcJdMD76PSYBsVI7F3DOmL/uFlwrctpV19AiruDFUG
jQMM7JXW7vsirgMeKGSeEHWDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoku/8VIe
qpEFXN98PoJd3aybVmYwHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC
NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF
MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp
em1na1BjaXF3NjNEb2k0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJNWA52TdjJF1uWyWYrDcDRO0ELn7vid8v9de/wx7gUvmEHNRngXYlBf
Y+evRCTQrcObZkNgi3i4zrLxswM4qwDOLyX+yX/3CEd3DzPHhLAL7RDbowIrJ5PN
u9Wdtl3Nd2I6rHb0WttFP4vlAJxquIeF3ckoF7xtpK8+zbdv6uw0G4dRGX+Ig2QL
lsjAQKdlDBns03VeUl3/4TKV3rsWmCbuH7GGABJLXUIfvRYQzJV5xnYCAnxSskL6
m78bWtgEJ1BOYti3Tq+2OBzJVYMFhnt9mMJyZ8piSdT5x3g7tZrkkqHNR+9M0H1+
ubahrQVswOI6Y3IQ3WerFn517N9Ltbo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:24:05 2025 by rpki-client