Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
File:                     P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json)
Hash identifier:          DqJ88NsD07W36YxxZYnaM/JUZuMpql92svi5UgrOM8E=
Subject key identifier:   3F:E2:19:FA:67:C2:3D:25:5A:EE:CF:24:3C:65:43:47:F5:F7:02:A4
Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Certificate issuer:       /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
Manifest number:          83
Signing time:             Sun 19 Oct 2025 09:56:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:56:02 +0000
Manifest next update:     Sun 26 Oct 2025 09:56:02 +0000
Files and hashes:         1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: 0U3qCS8+5oivacJFvNfUoqbqFA6XM0vQBEzxSQVci54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
        Validity
            Not Before: Oct 19 09:56:02 2025 GMT
            Not After : Oct 26 09:56:02 2025 GMT
        Subject: CN=68f4b5b2-af62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:4f:b6:d6:af:02:84:d0:35:4e:02:fd:97:
                    9b:54:93:65:ce:82:86:96:4b:70:36:ea:66:e9:5e:
                    2e:5d:f7:1a:dd:e9:14:43:a1:74:59:a4:e8:da:e7:
                    73:7b:a9:44:5c:ed:ed:f9:d1:ec:d2:2b:6e:6a:e6:
                    c5:53:89:28:c0:19:5b:be:29:11:77:88:61:ac:81:
                    50:8a:5e:ac:84:f5:ad:3a:1e:c3:22:8e:7b:b7:99:
                    73:aa:e2:a0:a2:a6:30:84:64:c1:71:68:36:4a:f3:
                    fd:ce:c0:0c:a8:c0:c7:3c:c5:3d:2a:38:fd:e1:88:
                    ae:8f:94:cb:f3:d0:20:68:02:08:f2:65:53:62:02:
                    e8:51:4c:1d:d2:82:ac:0d:57:51:4d:da:85:92:60:
                    7e:33:e1:30:9e:8e:9e:df:64:e7:9e:84:9c:a7:47:
                    59:29:b5:96:57:9c:52:27:e9:7a:10:32:69:4a:ee:
                    20:6d:f0:1a:37:06:dd:4d:81:f8:e9:08:ef:fa:4d:
                    8f:fb:34:81:58:14:15:29:71:e2:8a:53:66:af:a6:
                    53:24:ff:05:06:8a:83:a3:e4:44:87:e9:1e:c0:4f:
                    3c:83:ab:0d:0a:a7:34:cf:26:2f:65:57:36:80:50:
                    77:9f:ed:31:de:f9:aa:55:28:2a:28:1e:0f:2d:bb:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E2:19:FA:67:C2:3D:25:5A:EE:CF:24:3C:65:43:47:F5:F7:02:A4
            X509v3 Authority Key Identifier:
                keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:30:92:e2:52:67:cc:46:a9:74:5e:2d:ee:38:51:8b:72:
         fa:5c:17:8f:65:3e:33:8f:36:24:88:8f:8b:33:ae:6c:6e:14:
         fb:fb:a4:64:ea:9a:c7:19:e0:1f:f6:0d:88:63:62:3d:c2:58:
         00:45:6d:ff:72:89:56:c2:f4:fc:9e:4a:e0:c9:5f:bd:a8:ce:
         62:f2:8d:98:08:1d:ca:f6:34:2c:16:0d:ce:fe:de:99:e8:ae:
         96:b1:be:a5:5a:8c:c0:4e:be:96:3d:28:98:a7:6f:d2:de:ec:
         94:7e:e5:3b:ba:ef:cb:17:1f:03:0a:a6:23:00:7a:c3:9a:db:
         06:d1:47:92:3b:fc:52:23:24:e5:81:ec:bc:f3:88:f0:cd:98:
         09:e9:d1:23:5d:96:42:6e:a2:80:51:ea:93:93:16:1b:dd:35:
         19:34:fa:dc:b6:eb:23:7e:84:94:5c:85:ff:0a:9d:c4:ad:60:
         d1:5e:e8:dc:35:9a:6d:2b:3d:f9:fd:da:9e:fa:44:1b:3a:85:
         96:f4:1d:4e:f8:45:81:13:62:ba:d8:65:58:55:7d:91:7c:94:
         c3:62:d9:74:4f:0d:44:78:28:4e:d7:9c:66:b9:c8:97:8b:37:
         76:bb:b0:d3:8a:7b:8b:70:40:0d:df:46:9a:aa:8e:be:7f:e1:
         04:18:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:46 2025 by rpki-client