Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
File:                     sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json)
Hash identifier:          /uUtZLNBlgKCLDb8hUSn2q0ZpvpfXBAiKsV2WgTxGKw=
Subject key identifier:   15:1F:94:D5:DE:3D:84:3D:16:29:F0:8E:8D:3E:D0:28:59:CE:30:09
Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
Certificate issuer:       /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
Manifest number:          036D
Signing time:             Sun 19 Oct 2025 02:56:33 +0000
Manifest this update:     Sun 19 Oct 2025 02:56:32 +0000
Manifest next update:     Sun 26 Oct 2025 02:56:32 +0000
Files and hashes:         1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: xwftj/4R2AZx3xYKCCp9Z/h0OOmGtsweVgOyhANVTO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
                          rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
        Validity
            Not Before: Oct 19 02:56:32 2025 GMT
            Not After : Oct 26 02:56:32 2025 GMT
        Subject: CN=68f45360-1fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:89:ee:1f:9f:f4:04:6d:ef:66:47:30:54:
                    34:44:1f:23:f5:6e:b7:da:ec:70:8e:73:69:1b:0c:
                    c6:fe:97:b9:d2:bb:52:9b:12:6f:a3:74:e6:e3:59:
                    d6:71:46:74:f5:5a:6e:de:01:d5:0b:d6:53:73:f7:
                    fd:96:81:29:de:aa:86:cf:7b:6b:85:0e:98:de:87:
                    3d:50:e4:b5:78:56:7a:f8:36:82:0b:72:de:e9:57:
                    e8:2b:ce:55:a8:11:65:b5:58:d7:b3:e9:14:cc:97:
                    a2:43:d4:f1:db:6c:27:9a:cb:39:c5:96:6d:f5:02:
                    2f:cd:d9:b3:38:9e:9c:1e:5e:a3:b4:8c:61:98:1c:
                    da:e1:e2:36:b0:e2:01:78:17:1d:2d:e1:85:fd:8f:
                    68:4f:4c:b6:9c:72:4b:e8:b9:8e:a9:94:b9:5a:e7:
                    70:ba:19:1a:d7:be:1f:7f:79:29:c3:9c:c1:06:df:
                    7c:74:16:c7:af:5e:0c:a1:8e:cf:26:56:e3:aa:bf:
                    9a:64:ee:44:46:aa:42:d9:b3:31:c7:35:35:a3:0f:
                    77:28:d1:cf:08:d6:8a:57:6c:70:40:f3:74:33:3d:
                    03:3d:81:87:45:f5:d4:af:ef:41:2c:ec:e1:ba:84:
                    85:26:8e:05:bd:2c:d2:ed:21:16:c3:17:ee:21:ab:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:94:D5:DE:3D:84:3D:16:29:F0:8E:8D:3E:D0:28:59:CE:30:09
            X509v3 Authority Key Identifier:
                keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:fa:b1:8e:7d:d2:f3:35:99:b3:d9:6a:18:0a:33:87:48:d9:
         6e:1e:f7:f1:37:5a:03:f1:ec:74:da:ad:c8:76:08:8b:56:da:
         45:7f:b8:45:18:60:63:4b:95:be:b4:29:bd:3e:6d:66:c5:5b:
         56:eb:c3:29:84:3b:b9:dd:59:20:e4:82:cc:45:bd:15:2a:bc:
         1b:36:f5:cb:16:6a:5e:b1:22:a2:d5:c8:91:4e:6c:68:7b:01:
         b0:45:67:09:35:e0:c3:92:fc:b8:66:7c:e9:9b:38:31:fe:81:
         c2:67:67:61:6f:bb:b3:ea:18:56:24:fd:c8:9e:a4:aa:d4:d0:
         9f:ad:08:7c:2a:33:c8:2e:11:91:04:4e:ca:5e:c9:53:00:af:
         80:6a:0c:91:49:78:22:98:be:cf:9a:f6:67:dd:ed:c0:72:b6:
         6c:5c:70:90:c0:82:8b:93:e2:a9:ef:c8:01:1a:1a:be:5c:bf:
         12:2b:b2:eb:c8:69:4b:32:ff:c0:97:c7:6c:58:9e:94:f7:73:
         80:f6:7c:bf:ac:85:b9:77:44:95:0e:b7:dc:6a:f4:74:44:3c:
         c2:c7:5d:57:08:ed:a2:eb:1a:5d:cd:8b:8c:e1:fe:96:1b:20:
         3c:cb:74:1d:05:05:35:37:b4:f4:ec:94:a3:ca:b4:90:32:17:
         29:eb:18:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ1NkUxMTAvBgNVBAUTKEIwNEI3RkIyMEUyNUQ2RDc1ODdGMjZGRDc1NzI3NEI5
RDNFRTNFOTUwHhcNMjUxMDE5MDI1NjMyWhcNMjUxMDI2MDI1NjMyWjAYMRYwFAYD
VQQDEw02OGY0NTM2MC0xZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSuJ7h+f9ARt72ZHMFQ0RB8j9W632uxwjnNpGwzG/pe50rtSmxJvo3Tm41nW
cUZ09Vpu3gHVC9ZTc/f9loEp3qqGz3trhQ6Y3oc9UOS1eFZ6+DaCC3Le6VfoK85V
qBFltVjXs+kUzJeiQ9Tx22wnmss5xZZt9QIvzdmzOJ6cHl6jtIxhmBza4eI2sOIB
eBcdLeGF/Y9oT0y2nHJL6LmOqZS5Wudwuhka174ff3kpw5zBBt98dBbHr14MoY7P
Jlbjqr+aZO5ERqpC2bMxxzU1ow93KNHPCNaKV2xwQPN0Mz0DPYGHRfXUr+9BLOzh
uoSFJo4FvSzS7SEWwxfuIasPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUflNXe
PYQ9Finwjo0+0ChZzjAJMB8GA1UdIwQYMBaAFLBLf7IOJdbXWH8m/XVydLnT7j6V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU2RS82RkMzMjlDQ0NC
NjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0ZFlmeWI5ZFhKMHVkUHVQ
cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NFdF9zZzRsMXRkWWZ5YjlkWEowdWRQdVBwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDU2RS82RkMzMjlDQ0NCNjgxMUVDOEEzRjQ1ODJDNEY5QUUwMi9zRXRfc2c0bDF0
ZFlmeWI5ZFhKMHVkUHVQcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDg+rGOfdLzNZmz2WoYCjOHSNluHvfxN1oD8ex02q3IdgiLVtpFf7hF
GGBjS5W+tCm9Pm1mxVtW68MphDu53Vkg5ILMRb0VKrwbNvXLFmpesSKi1ciRTmxo
ewGwRWcJNeDDkvy4Znzpmzgx/oHCZ2dhb7uz6hhWJP3InqSq1NCfrQh8KjPILhGR
BE7KXslTAK+AagyRSXgimL7PmvZn3e3AcrZsXHCQwIKLk+Kp78gBGhq+XL8SK7Lr
yGlLMv/Al8dsWJ6U93OA9ny/rIW5d0SVDrfcavR0RDzCx11XCO2i6xpdzYuM4f6W
GyA8y3QdBQU1N7T07JSjyrSQMhcp6xhP
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:07 2025 by rpki-client