Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File:                     Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier:          refSfqO60HBaTfhJXOb+QGKx5AyuJMj80MV30iGCZ5k=
Subject key identifier:   BD:1E:FA:94:ED:EA:1E:76:13:AC:87:BA:F6:3B:0E:7F:CC:A1:4B:06
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer:       /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number:          06
Signing time:             Sun 19 Oct 2025 11:39:41 +0000
Manifest this update:     Sun 19 Oct 2025 11:39:41 +0000
Manifest next update:     Sun 26 Oct 2025 11:39:40 +0000
Files and hashes:         1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: be6/FvdjBNs1QszNhpTsx8t2KyBPMK1mkkBVTOr7D7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
                          rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
        Validity
            Not Before: Oct 19 11:39:41 2025 GMT
            Not After : Oct 26 11:39:40 2025 GMT
        Subject: CN=68f4cdfd-b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:0f:1a:63:b4:5a:77:44:ea:e6:af:87:bc:
                    e8:bb:a5:d0:bf:95:13:0c:5f:6a:a5:75:35:c3:c0:
                    b9:51:8a:b8:8c:37:12:d7:8b:70:1c:ed:3b:1c:2e:
                    14:75:ea:ca:65:23:49:22:33:45:0d:af:7f:48:d8:
                    96:b7:8f:13:70:d2:fd:ae:05:05:8d:56:14:d7:27:
                    28:94:77:3e:97:2d:e4:5e:08:5f:c8:54:3d:e6:38:
                    24:a3:e3:4b:44:2b:52:66:76:2d:30:23:f1:1c:16:
                    e0:1b:1a:b4:98:25:a9:0e:08:37:24:d3:e3:99:c9:
                    29:bf:22:b6:ee:b8:41:fe:02:82:83:42:84:28:a7:
                    f1:0e:6d:f8:4d:7e:79:c0:87:68:f2:6b:7b:e1:d6:
                    35:5e:45:fa:5f:42:7c:33:1e:56:0c:e6:35:51:d2:
                    44:aa:68:d0:9c:a6:16:59:6d:2d:47:2a:7f:cd:9d:
                    a4:de:a3:e9:9b:3d:d9:37:69:06:2f:ab:f1:84:a5:
                    43:fd:0f:b6:44:ed:21:87:75:1d:fe:dc:72:6c:e3:
                    b3:9f:69:33:ee:40:2a:2e:d8:88:e7:5e:3b:f9:57:
                    60:f6:b1:56:9f:6b:32:ad:f1:b2:e7:bd:cf:b5:14:
                    6f:5f:7d:7b:fd:40:fe:17:0d:9e:aa:e5:0d:a2:a6:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1E:FA:94:ED:EA:1E:76:13:AC:87:BA:F6:3B:0E:7F:CC:A1:4B:06
            X509v3 Authority Key Identifier:
                keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:2a:e8:f4:10:63:5c:9a:42:17:a2:97:44:77:7e:9d:67:
         bd:22:44:97:a2:5b:95:41:bf:01:cb:c9:22:2c:cc:33:cf:0a:
         c2:8a:f3:41:3b:5d:60:0f:ea:9a:b2:7f:43:43:b7:5e:66:4f:
         11:09:61:e2:37:25:81:49:a0:a1:3b:80:25:50:8f:71:11:cd:
         30:38:42:05:14:30:bb:15:61:59:87:10:79:bf:e7:3a:46:34:
         ef:9b:c0:56:f7:b7:54:fd:0b:56:14:91:d8:90:ec:69:9e:0a:
         7e:7f:44:1c:c0:e0:18:04:ca:15:ce:27:6c:0f:96:27:2c:34:
         ec:07:53:b8:ce:eb:cf:8a:80:41:ad:74:9d:66:19:b5:71:77:
         45:d1:df:c3:01:40:6e:01:6d:55:94:88:dc:4c:39:42:43:c2:
         72:e9:e2:7e:bd:38:4a:e6:3e:5a:35:8c:41:b4:2d:f8:8d:f7:
         b7:5a:78:eb:1c:0b:c6:c9:cf:b7:c9:6c:93:54:cc:08:bb:31:
         a6:7e:20:a4:99:19:5d:e6:69:5b:92:35:c1:ee:6f:8e:e8:e0:
         09:d2:b2:fd:e7:33:66:dd:23:07:d1:52:dc:58:de:27:71:3c:
         e0:23:ce:77:56:3f:a9:4e:9f:a3:a8:ff:e7:86:2a:c9:42:93:
         34:fe:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:16 2025 by rpki-client