Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          KpY7s+glEcQmWse2o0OePn0tOA6119fiSQvGRAy46iE=
Subject key identifier:   EB:9F:F4:1C:41:EE:4A:F8:E9:DA:37:CE:2C:97:69:8F:06:44:A7:EB
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0C5C
Signing time:             Sat 18 Oct 2025 19:19:53 +0000
Manifest this update:     Sat 18 Oct 2025 19:19:52 +0000
Manifest next update:     Sat 25 Oct 2025 19:19:52 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: Rb4iDWVrgLv+WCBd9/DVHuFg09/MvhuS8I8Aw1sudfY=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Oct 18 19:19:52 2025 GMT
            Not After : Oct 25 19:19:52 2025 GMT
        Subject: CN=68f3e858-94ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:bb:84:4c:d9:d9:74:24:fb:bf:7e:59:9f:
                    50:49:55:80:e4:1d:fd:89:1a:25:cf:45:34:55:24:
                    44:fc:d1:2b:7f:91:cd:0f:f3:78:6d:9a:e8:60:11:
                    6f:bc:b4:d6:6d:15:7e:e2:dd:2a:31:eb:e6:d1:01:
                    79:a3:7b:dc:23:88:02:8f:61:05:24:bc:cd:27:1f:
                    22:be:24:0a:b0:66:cd:fe:32:b1:a2:d7:e0:83:00:
                    ab:61:60:d6:dd:18:7e:96:3a:c1:57:69:b1:4d:2b:
                    e8:47:be:e6:ef:d0:a2:45:b4:fb:dc:78:be:59:ae:
                    82:1e:ef:e7:97:61:bf:1b:cf:8e:5e:39:3c:f6:4c:
                    e3:31:c2:53:eb:5a:05:d8:bd:3a:ad:cb:26:f0:46:
                    0a:42:ed:2e:ac:8c:d0:d9:f4:eb:42:0e:64:a8:31:
                    8b:f2:c1:b8:c1:64:2a:41:e6:cf:ab:96:f9:37:08:
                    f6:bf:65:e5:0d:3f:20:4f:17:1f:78:21:36:a8:3a:
                    1d:e7:08:0d:ee:e0:0f:37:a1:f4:10:65:d2:4d:46:
                    dd:95:93:aa:8d:5f:77:e4:89:42:f1:db:3e:3b:8d:
                    17:51:08:69:de:21:e0:67:f5:44:72:22:ac:14:92:
                    51:f3:78:e4:5a:c2:7f:6f:8d:f3:2f:9d:c1:4a:94:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:F4:1C:41:EE:4A:F8:E9:DA:37:CE:2C:97:69:8F:06:44:A7:EB
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:98:cf:e0:c9:ff:9d:d3:1c:f8:14:dc:28:70:a9:a9:9f:19:
         d8:80:21:50:e9:3e:0b:0d:4e:eb:b5:53:05:b4:62:61:e0:c2:
         d1:54:a2:7d:06:b9:48:cf:53:f3:f6:91:97:aa:32:af:1d:3c:
         b7:54:9d:ad:ad:02:63:75:2a:eb:95:a5:28:e8:da:f1:b0:9c:
         2a:8e:38:83:65:e4:e3:b2:55:50:64:67:dc:42:42:12:77:e1:
         7e:1e:6b:66:d0:51:0b:70:be:10:2a:37:9d:4c:58:e6:5b:2f:
         d4:5d:b6:e3:4d:ed:52:1c:a2:81:c5:f8:3b:0a:b7:42:74:c1:
         f1:ca:56:67:d8:b8:71:f8:c6:36:32:7e:4a:15:e5:96:ec:43:
         6e:6e:13:b6:c1:bd:1d:4c:a4:26:3f:08:f4:14:c9:6e:34:77:
         ab:22:91:6b:1f:a5:8e:ff:8f:c4:83:60:5b:73:d5:b4:10:c9:
         ab:56:7d:5e:63:e2:a9:bf:27:c1:e1:89:27:4d:8e:1e:bc:51:
         e5:24:13:9e:3f:49:0a:bf:1e:1e:78:f5:9b:42:39:04:a5:4c:
         43:f5:fd:50:d2:65:56:fd:8e:a8:50:cd:4a:81:98:34:17:c3:
         08:4c:c4:d6:33:f7:e4:1f:f3:f1:7c:dd:43:86:d0:19:21:16:
         9a:52:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:07 2025 by rpki-client