Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File:                     -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier:          vnht+K0UL1vkDJ3CXozhdnXSWo+vCqDtaiAQwYiuTpk=
Subject key identifier:   6C:19:4E:03:F9:E0:8F:DE:FB:B8:0A:35:B8:04:C4:EA:89:9C:02:AF
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer:       /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number:          51
Signing time:             Sun 19 Oct 2025 10:38:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:38:13 +0000
Manifest next update:     Sun 26 Oct 2025 10:38:13 +0000
Files and hashes:         1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: W+WUabgXKAwsCLdZVu9ZqbSOs9MeySKmrEnAC1uH7/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
        Validity
            Not Before: Oct 19 10:38:13 2025 GMT
            Not After : Oct 26 10:38:13 2025 GMT
        Subject: CN=68f4bf96-4317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:ef:ea:af:20:f7:5d:19:53:6a:05:45:93:
                    51:b1:a5:7f:a3:08:f8:cc:c2:26:05:de:80:93:25:
                    25:e4:c5:94:a4:cc:8a:49:e3:b1:cf:50:98:d4:13:
                    06:93:24:03:67:4c:7d:0e:51:72:d0:7f:1b:d5:be:
                    1c:eb:11:ed:9a:fb:24:a1:cd:d7:4e:fe:1a:7c:27:
                    e8:a7:cc:fc:69:23:15:dd:41:3f:bf:04:df:df:27:
                    9f:bd:28:05:bd:d8:5f:4b:2c:fe:2d:fc:b9:3b:2d:
                    da:47:a6:82:20:96:98:11:b4:ac:f8:6a:91:d2:80:
                    6a:91:c1:24:c8:96:4c:91:65:bc:d3:90:6c:9c:ce:
                    aa:3b:18:c6:8c:f9:45:29:a2:4a:41:3d:0f:80:18:
                    a9:6a:89:fc:d4:15:14:12:d6:ee:e7:c6:d9:4d:44:
                    c4:65:4d:dd:5b:a3:68:cf:bf:f7:db:9e:0b:53:3b:
                    e8:c1:74:af:59:84:df:a2:33:42:b1:aa:ee:46:ec:
                    f1:3e:86:6d:ff:84:7a:1e:17:44:c9:f1:e3:67:a7:
                    26:a6:dc:55:bf:f3:c2:4b:48:92:37:8f:f6:a3:3f:
                    e8:39:dd:dc:07:e0:51:ff:22:ba:c8:ca:e5:57:ff:
                    a1:1e:a1:d2:53:22:85:c3:b1:f9:b3:4c:ba:bc:7d:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:19:4E:03:F9:E0:8F:DE:FB:B8:0A:35:B8:04:C4:EA:89:9C:02:AF
            X509v3 Authority Key Identifier:
                keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:51:8f:06:c7:08:bd:d8:a1:be:1a:9c:da:e7:c0:6e:d9:bd:
         d4:df:0c:f2:6b:22:a7:0d:8b:90:a3:c5:10:5d:ed:2e:2e:be:
         13:a2:b3:e4:3c:90:18:43:45:ae:d2:b5:22:65:23:0f:a3:32:
         26:95:64:e3:51:a1:3d:5a:31:9c:6a:91:c1:9e:b7:69:e5:4c:
         a8:70:e8:f3:21:e6:fd:56:a0:14:28:4d:86:b1:a5:3d:7c:ce:
         19:9d:a9:c9:16:a1:43:57:8d:b7:42:29:70:4f:f7:b2:d2:9e:
         63:97:af:b6:d6:82:60:9b:a4:ce:73:b5:a9:9f:e0:12:c0:86:
         cb:2b:df:a6:76:f0:2a:99:2b:66:dc:e9:bc:24:5c:ac:6e:8f:
         46:86:29:56:b9:e5:62:b8:e6:e5:28:51:49:3b:ff:b9:91:28:
         09:9b:66:ee:11:bd:92:6e:e6:28:ce:00:09:f0:a6:40:aa:42:
         34:78:e4:32:11:e8:94:45:b1:16:4d:b8:df:4b:06:cb:9e:8b:
         18:cb:87:dd:00:d4:7c:f3:b6:b8:c6:a6:fe:19:d1:28:48:ae:
         47:1c:cc:1b:a2:ac:81:3e:af:3e:15:5d:f5:20:d8:ab:81:e4:
         e7:ab:46:da:61:f1:fc:ee:57:0f:89:7d:a6:18:0e:c7:c9:9b:
         d1:76:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:45 2025 by rpki-client