Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
File:                     7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json)
Hash identifier:          iAsq/7owqShu23HK0Xqa3LBdbEBtZ9EPhbRcGsz2fWE=
Subject key identifier:   40:0F:DA:FF:74:E1:CB:79:21:6B:A2:65:B5:CE:70:06:3E:BB:5C:5A
Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70
Certificate issuer:       /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
Certificate serial:       0DB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
Manifest number:          13CF
Signing time:             Sat 18 Oct 2025 18:34:35 +0000
Manifest this update:     Sat 18 Oct 2025 18:34:34 +0000
Manifest next update:     Sat 25 Oct 2025 18:34:34 +0000
Files and hashes:         1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: 7ui+dGYz9yx9LMv3lVEDKkpDmtMPEw9HUF0oR79AbeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3512 (0xdb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70
        Validity
            Not Before: Oct 18 18:34:34 2025 GMT
            Not After : Oct 25 18:34:34 2025 GMT
        Subject: CN=68f3ddbb-32e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:d8:4c:e4:79:dc:1a:e0:8c:a7:d5:0b:dd:
                    a5:d5:fa:44:cc:c8:9f:1a:4c:03:5c:7a:5c:b8:c4:
                    18:ef:f9:04:6b:c4:fd:a0:b4:7a:2c:b0:22:2a:59:
                    3d:f3:58:30:77:65:12:b2:07:af:66:2e:3a:82:d1:
                    1a:dc:c4:ff:d7:70:2d:a8:6f:8f:5d:e6:cc:a9:49:
                    8d:2c:f5:c5:32:ed:7e:b8:fb:cb:6e:72:23:85:da:
                    f6:fc:76:ef:ae:d1:de:69:db:e5:ab:cf:8c:80:8e:
                    6b:7a:a4:89:b4:5f:f0:2c:0d:cc:0a:23:b2:50:38:
                    f7:d1:c1:c5:72:91:c8:05:f5:6a:64:99:16:c8:28:
                    5c:56:42:54:bb:e4:55:71:fa:0f:8f:ae:c1:6d:04:
                    48:71:8d:94:4f:38:69:ec:d7:5a:94:d2:88:86:4a:
                    8a:90:4b:bb:4d:69:41:59:68:ce:9e:3f:d9:16:dd:
                    50:6d:8e:9d:42:8e:af:4f:4c:a6:68:1e:08:5b:5c:
                    e2:59:27:3e:62:07:72:fc:2f:c4:44:d7:46:84:04:
                    1b:56:f3:4c:3c:5e:26:0d:44:65:59:a0:34:71:62:
                    fc:aa:70:90:5c:1a:7a:41:f8:26:85:29:23:35:50:
                    2b:a2:12:e0:b0:35:09:05:22:2b:64:66:31:b4:aa:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0F:DA:FF:74:E1:CB:79:21:6B:A2:65:B5:CE:70:06:3E:BB:5C:5A
            X509v3 Authority Key Identifier:
                keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:7d:5c:37:ed:25:b1:d1:1e:de:63:40:c4:97:de:64:e4:
         ef:a6:f5:95:85:c4:b2:30:e6:de:2d:4c:c3:6d:fa:5b:97:6e:
         e1:e5:f8:b0:b2:3a:c3:e0:89:f7:e1:31:30:fb:ba:c0:c5:bb:
         1d:ab:67:7f:42:25:6c:4d:91:71:19:69:af:18:52:6e:11:86:
         65:2d:e9:d2:77:7c:53:31:55:56:d4:aa:0e:94:c9:47:e3:eb:
         0d:7a:5e:1c:b1:c8:30:34:90:cb:f0:3b:b3:93:ca:ba:ba:6d:
         9b:d7:e6:0c:c6:66:c2:ec:c5:29:9e:f6:9f:0b:02:ca:d3:1f:
         1c:ef:b8:19:26:b0:d2:50:6f:6a:e7:a3:1d:b0:bf:fd:de:de:
         c9:bf:af:d8:10:e9:80:ae:6b:6a:94:3b:98:96:cc:a3:d0:37:
         3b:ed:53:25:20:20:0e:ab:a4:25:b6:48:22:ae:2a:60:33:8b:
         aa:79:8b:fa:91:bf:31:b4:41:2c:07:72:36:dc:59:54:d8:89:
         f2:78:a2:a3:8b:57:25:79:05:70:ee:de:0b:96:c1:a6:82:32:
         59:6a:4d:5b:07:d9:58:7b:13:8e:f3:24:80:08:be:91:b4:f5:
         8d:14:bc:13:c8:82:4e:df:dd:08:84:22:bc:49:0f:1c:87:a6:
         72:c8:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:46 2025 by rpki-client