Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          uqYCIPEvN/fvoBDcrOf/rmJg++vrnCuntTic57cDP/U=
Subject key identifier:   0B:8B:A5:11:2E:29:34:4B:C0:CD:86:51:71:77:65:FB:CB:AD:56:B7
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          020C
Signing time:             Sun 19 Oct 2025 04:36:02 +0000
Manifest this update:     Sun 19 Oct 2025 04:36:01 +0000
Manifest next update:     Sun 26 Oct 2025 04:36:01 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: ZXjN+Y5t2onHpu1Z4WqugMS43os2S50ZPnDnTa8o8N0=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Oct 19 04:36:01 2025 GMT
            Not After : Oct 26 04:36:01 2025 GMT
        Subject: CN=68f46ab2-9ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:65:bf:ee:f2:65:6a:b6:49:29:ff:de:d0:
                    eb:83:3d:ab:4e:d4:56:0e:ec:7b:fd:f5:61:f0:21:
                    da:ba:12:17:aa:ad:cf:0f:aa:dc:84:51:6c:29:31:
                    a4:2d:a7:db:0c:c3:8a:3a:20:d8:79:d5:48:64:e9:
                    c2:4f:8c:10:42:bb:ed:89:13:83:b2:e4:7f:f0:9b:
                    ad:8f:9d:7b:0f:a4:df:14:60:04:a1:d2:6f:a8:40:
                    a8:10:37:4b:e2:4c:52:9b:d9:b5:a4:63:13:4f:fe:
                    e3:01:4b:71:f3:c5:62:6e:0a:2b:0b:42:9c:a5:f2:
                    97:c5:04:f3:7c:7e:7d:04:d0:b6:25:6c:70:f3:a1:
                    60:c5:8f:44:0d:62:ac:08:06:a5:d5:c0:63:db:16:
                    19:56:ff:a4:26:e5:15:89:f7:1b:b2:a2:e7:fd:5d:
                    ae:e6:85:61:32:8d:d5:fa:81:8c:1e:fb:a7:a9:f3:
                    29:55:8b:e2:af:1d:20:b0:dd:70:0e:87:90:6f:91:
                    51:d2:58:b1:00:a6:b4:7f:67:19:a1:fb:f8:02:46:
                    54:59:48:48:6e:21:28:2d:62:aa:1f:ca:4f:fa:b7:
                    7e:fd:4d:f3:d2:c5:7b:53:6c:45:b2:72:99:30:00:
                    78:4d:ed:38:5e:ce:70:77:e7:d8:1a:a1:82:51:f9:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:A5:11:2E:29:34:4B:C0:CD:86:51:71:77:65:FB:CB:AD:56:B7
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:ca:90:75:9a:9d:bb:56:d6:b4:4f:0c:92:ee:24:84:8a:
         6e:07:d1:43:f1:0d:a6:5c:98:06:e9:bb:6c:e5:4e:ba:e0:37:
         8c:2d:e7:7f:28:b9:fe:bb:35:48:3d:67:03:03:0f:65:14:64:
         4b:95:86:db:fb:43:cb:c5:15:97:08:36:e4:1c:7d:1c:9d:f3:
         20:b8:64:f3:44:68:c0:41:95:84:b3:82:eb:eb:10:bd:c3:1c:
         5f:58:c7:3f:53:03:68:58:15:37:96:ad:67:86:7a:2b:f7:e2:
         00:70:33:84:f9:f7:65:74:6c:b8:40:35:f4:20:d5:cd:01:fe:
         80:58:a3:8d:55:8e:0e:dd:3a:d1:ca:e1:11:cc:10:77:47:f7:
         4a:14:f3:82:fd:ba:b3:12:00:0a:0a:5d:2f:2d:43:62:cb:e0:
         03:03:20:de:40:c9:7d:87:da:38:41:e6:1c:63:68:1b:9d:00:
         06:4a:fb:58:7b:f3:ff:d6:f9:55:62:82:2c:76:3a:f3:96:ab:
         a6:c4:63:84:2c:4c:c8:46:62:3a:07:cd:57:2c:67:01:57:16:
         e6:48:86:a1:f8:7d:7b:03:a3:6e:9f:ba:b9:e2:f8:af:96:57:
         e6:89:c8:a4:3e:02:2f:30:9a:61:a6:b5:44:38:75:43:23:45:
         d9:e1:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:17 2025 by rpki-client