Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File:                     9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier:          YCq+Wj5SVsgk2xtQVnacOs7VRfaozGxqMCdx2igT54w=
Subject key identifier:   14:EB:A2:97:64:E9:51:96:39:13:9E:71:0C:F0:C7:F5:F6:85:23:18
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer:       /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number:          81
Signing time:             Sun 19 Oct 2025 09:56:55 +0000
Manifest this update:     Sun 19 Oct 2025 09:56:55 +0000
Manifest next update:     Sun 26 Oct 2025 09:56:55 +0000
Files and hashes:         1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: k2nMRpDuqkeGO/UVxmu34nxDsofNXL+BoT826ls+Ius=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
                          rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
        Validity
            Not Before: Oct 19 09:56:55 2025 GMT
            Not After : Oct 26 09:56:55 2025 GMT
        Subject: CN=68f4b5e7-329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:9c:be:60:ff:fc:26:ab:3b:ab:e3:1c:8d:
                    2f:04:fc:01:9d:d2:72:59:6d:b8:48:cc:1a:6e:47:
                    6b:97:10:08:5d:0a:71:5e:d9:f5:38:0c:a3:a7:95:
                    ce:45:d2:dc:98:fe:cd:0a:2d:37:71:7c:d7:51:21:
                    33:97:fe:eb:49:4a:2a:cd:9c:4d:d0:e5:f6:49:d8:
                    a5:a4:30:2e:b3:22:d8:ec:ff:d9:6f:87:7e:51:f6:
                    bb:35:31:52:d3:ce:d5:49:d7:c2:b9:65:b9:8c:91:
                    d5:09:2b:f1:99:83:21:6e:dd:50:9d:f3:0e:b0:58:
                    2e:67:67:b5:f8:38:45:00:94:ad:ec:a5:5e:36:f0:
                    aa:07:98:13:06:a4:68:dd:2d:9a:ea:c1:ad:81:ed:
                    99:a0:19:f4:1f:70:a3:6c:f6:7d:ff:0b:cb:d9:1a:
                    cd:19:52:92:27:61:2a:71:75:9c:b1:b3:21:e4:cb:
                    47:b0:d4:8b:84:4b:25:73:ba:fc:d0:c9:9f:f3:c4:
                    65:31:f6:69:8e:29:a3:c1:fe:b1:5e:47:b1:4f:05:
                    b8:d7:66:f7:00:cd:14:65:d9:4e:68:6b:dd:d3:18:
                    3a:a4:b5:90:81:da:19:23:6d:90:17:44:14:e1:d6:
                    de:b1:ed:57:6c:38:d9:4d:f4:45:f4:cd:bd:d5:b9:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EB:A2:97:64:E9:51:96:39:13:9E:71:0C:F0:C7:F5:F6:85:23:18
            X509v3 Authority Key Identifier:
                keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:41:d2:8f:f1:08:42:84:ad:98:40:ce:a7:a3:9b:e8:b7:
         46:fa:65:c8:e8:73:e7:6f:0a:ff:a1:60:0a:c2:26:f8:de:02:
         12:3f:d2:40:c4:8c:0e:68:88:a2:85:12:57:d0:0d:ee:ed:c4:
         ad:4c:21:35:c0:41:09:a2:de:ce:df:65:38:12:1b:4f:66:ee:
         43:9a:44:ca:77:a5:21:8e:58:4c:a0:69:ed:3e:de:75:40:9c:
         e8:f8:59:ac:53:c4:9b:cd:7b:0a:c0:31:e9:78:ea:78:69:e9:
         e6:59:a7:1e:b1:83:c4:50:40:d9:b0:f4:35:ed:fc:e2:fa:34:
         ad:00:7d:9b:75:3c:30:e9:df:01:74:e8:0c:ee:c1:c9:f0:2c:
         01:96:d9:a3:12:52:c9:e0:12:ad:d3:c5:07:c5:8f:94:0e:ba:
         bf:e0:79:f0:04:63:ad:a9:22:76:41:dd:67:14:47:0e:24:37:
         45:f1:80:d3:38:a1:25:8b:9d:de:9f:19:8b:93:16:de:4d:b3:
         be:59:7f:1e:cb:d9:b5:83:22:96:da:af:10:5b:8c:80:88:82:
         7d:70:b4:1e:05:83:b3:0e:67:20:22:50:5c:85:9d:ba:cc:83:
         96:97:fd:e7:82:70:4d:b1:c4:79:61:1a:6a:33:6e:cf:b5:91:
         64:2b:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:09:49 2025 by rpki-client