Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
File:                     daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json)
Hash identifier:          pdsGft57IpD0ioAgtKvubG5KHvloWDJrPxyVsU2H4CA=
Subject key identifier:   E7:22:7F:97:B6:19:B9:20:F1:32:A6:F9:77:D4:CB:50:1C:75:4A:0E
Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93
Certificate issuer:       /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
Certificate serial:       0695
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
Manifest number:          0695
Signing time:             Sat 18 Oct 2025 15:13:31 +0000
Manifest this update:     Sat 18 Oct 2025 15:13:30 +0000
Manifest next update:     Sat 25 Oct 2025 15:13:30 +0000
Files and hashes:         1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: iXLVsr5V4AyToZmZX7R9wMcBqX4l1RcZTdauzr5F99s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl
                          rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D626, serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
        Validity
            Not Before: Oct 18 15:13:30 2025 GMT
            Not After : Oct 25 15:13:30 2025 GMT
        Subject: CN=68f3ae9a-14c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:a5:48:95:0d:97:09:8b:ea:47:ec:06:ea:
                    9c:e0:20:06:53:1a:c9:1f:9e:9f:78:69:68:95:27:
                    1a:7b:ff:01:89:30:1c:7f:cd:9b:d6:29:e9:3d:4f:
                    9d:15:5b:70:f4:a3:a3:60:85:10:f4:60:4d:79:c0:
                    99:41:32:2e:c9:ce:57:a9:63:65:ea:4a:cc:5d:09:
                    1a:42:f9:d9:d8:d6:21:f7:56:c5:ea:11:c3:47:d7:
                    b9:0b:09:6a:4e:7e:d2:69:0f:c2:04:e8:88:0c:b4:
                    fd:f7:1c:92:f7:fa:24:60:b1:55:1a:c2:50:74:2b:
                    22:4c:d3:b2:e2:1d:33:39:95:b8:97:9d:1e:ba:9c:
                    62:12:e1:09:7a:af:f7:65:49:a6:3d:e5:2a:3f:b2:
                    a7:67:fb:13:f1:20:9c:ef:10:09:f6:ca:f3:0c:9c:
                    20:2e:8c:31:cd:4b:8e:24:ac:43:ba:8b:95:f2:09:
                    5b:79:a4:66:ce:7f:45:77:42:ea:a8:f4:59:b9:fd:
                    bc:2b:72:98:a0:03:c5:88:c6:20:d5:ac:b2:a9:b1:
                    6e:91:88:52:82:f8:7a:8d:13:18:de:3c:28:cd:9d:
                    7b:0b:91:83:3a:42:11:67:49:37:94:eb:6f:06:19:
                    2d:db:83:fa:81:63:e3:30:dd:20:1a:d3:9f:5c:9a:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:22:7F:97:B6:19:B9:20:F1:32:A6:F9:77:D4:CB:50:1C:75:4A:0E
            X509v3 Authority Key Identifier:
                keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:6e:fe:a4:13:7c:89:8d:14:ae:5c:c2:fc:18:a2:7f:31:
         41:a3:90:dc:ea:25:d5:29:8e:1e:98:e2:df:99:bc:d6:f7:56:
         48:66:ff:a6:74:8e:7a:91:2b:04:dc:ef:ed:ff:60:73:c4:86:
         e6:53:ec:05:6b:5e:f6:29:37:c0:d7:05:df:3a:21:1e:ea:a0:
         7a:e4:bd:dd:c0:8e:77:bb:cb:ff:ce:52:e9:47:7d:e0:10:64:
         12:4e:1c:e5:a2:fc:86:fb:8b:ab:e7:eb:33:20:41:f9:a2:e9:
         e5:d4:00:2f:8d:c3:da:56:a6:17:c3:f3:75:51:0e:00:ca:01:
         f1:2f:b9:9c:e2:4e:d8:39:aa:fa:ef:21:11:d3:fa:4f:34:27:
         cd:74:08:6c:8d:0d:a1:a9:d8:aa:28:77:49:d9:0e:2e:1e:73:
         b6:01:e8:dd:f4:0f:d2:02:ce:22:dd:bc:32:09:17:cf:f2:b6:
         9f:29:c1:46:15:b7:51:b2:55:0c:6f:53:66:a5:13:a7:30:2f:
         0e:fa:02:5f:3a:9e:b8:56:21:e0:1b:91:90:b6:df:d8:94:39:
         33:d9:c6:50:07:e8:9e:f1:5a:29:09:da:cd:33:ce:19:7d:33:
         5a:88:b4:23:5d:26:dc:0d:1e:15:dd:10:29:20:be:72:a0:77:
         f9:ab:8c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:30 2025 by rpki-client