Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          GWL7WDzn3r1u77tDTsCv/VaJayCRcz1LjrRDCklJo2o=
Subject key identifier:   37:0E:F9:D1:9B:44:A7:6B:27:07:37:74:E5:A7:5C:C3:EC:ED:E2:A5
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          FB
Signing time:             Sun 19 Oct 2025 08:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:02:25 +0000
Manifest next update:     Sun 26 Oct 2025 08:02:25 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: 8KqZ+e6nF2n4xkPAaml27t2eFAUcIi997xrFM7TPqf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: Oct 19 08:02:25 2025 GMT
            Not After : Oct 26 08:02:25 2025 GMT
        Subject: CN=68f49b12-790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:fd:98:e4:12:f6:82:7d:97:b2:e6:c6:7d:
                    d3:1a:98:a9:d3:cb:1a:a7:2c:bc:02:02:0d:1a:c3:
                    a2:b5:d7:40:eb:e6:c8:8c:3f:07:64:94:88:c2:3e:
                    6c:bb:d8:3a:b0:2b:eb:b0:7a:ed:43:1a:23:4b:ce:
                    18:ee:8c:da:34:ce:42:c6:f2:0d:7d:d0:5c:13:21:
                    83:5d:e4:96:1f:ee:99:cd:e3:51:2c:30:15:88:81:
                    32:86:31:15:95:33:b8:61:3f:be:34:74:53:72:5d:
                    c3:ed:f2:af:ac:ed:7d:f2:35:7d:61:86:cb:c5:a9:
                    de:2a:79:ac:ae:fb:9a:e8:2d:98:2a:4f:a1:21:80:
                    29:82:fc:70:b8:2a:27:39:58:c7:f4:b3:4b:99:25:
                    ab:a4:21:3c:3f:da:5a:90:d7:8c:e3:ce:fe:72:5f:
                    3a:2e:20:78:6d:5c:93:e4:a7:cb:10:ca:e8:60:48:
                    b5:ea:3c:0b:fa:66:86:c9:bd:bb:5d:8a:76:e4:f1:
                    3e:1c:79:d9:9f:96:3b:10:86:b6:37:72:f8:47:4d:
                    0a:ae:a9:42:fd:a4:fd:80:09:cf:e6:28:db:78:01:
                    ff:5e:21:df:bc:5f:bf:16:67:0b:04:80:07:d8:78:
                    10:96:6d:60:74:f8:f5:e3:57:22:d7:69:97:97:4c:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:F9:D1:9B:44:A7:6B:27:07:37:74:E5:A7:5C:C3:EC:ED:E2:A5
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:c4:a9:0f:98:3d:7d:fc:34:ec:5b:c6:c0:d5:ff:cc:2e:
         a0:0c:11:d4:0c:6c:98:75:d8:d4:98:de:8e:e2:d9:a4:56:a0:
         e3:26:37:38:41:ea:a8:84:d6:c7:e8:35:53:61:03:c3:09:f4:
         d4:4b:d2:a3:01:a1:76:a8:bc:bc:69:0e:60:2e:26:60:6f:3f:
         3c:b7:4c:15:b8:37:a2:f4:93:57:25:34:50:bd:3e:55:a4:b5:
         15:d6:55:df:3f:11:63:9c:bc:08:64:78:04:09:d1:83:b9:c6:
         ed:c1:cf:c4:ee:60:a2:45:95:de:04:c3:fc:42:fc:ae:d7:37:
         56:43:e8:b8:2f:40:46:43:a5:2f:e8:85:45:00:8e:73:06:4b:
         ce:c0:30:d5:cd:bf:ef:78:f1:37:b6:e5:9c:bf:4e:b8:38:92:
         ad:91:e9:d0:7d:fc:db:2b:77:bd:b0:e7:d3:cc:df:b0:42:76:
         1f:b0:2e:5e:76:c4:74:98:6a:01:17:c5:9d:d9:bb:c9:db:bb:
         c1:7a:bc:9e:95:67:1c:a7:f3:88:53:8c:99:f0:5c:16:e2:7a:
         de:8e:43:f1:3b:13:08:a8:4b:57:57:5d:c5:db:2d:30:6d:15:
         b3:6c:a0:56:f7:37:e2:de:1b:f5:0f:74:14:1f:55:2c:96:1a:
         90:e3:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:15 2025 by rpki-client