Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
File:                     Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json)
Hash identifier:          EJy/8txnVMh7MOvCuZ7qUpI22NUR9I5asLR+ZGi2RDY=
Subject key identifier:   56:09:4E:60:48:E7:3B:CC:36:5D:55:D2:79:3C:B0:73:5D:F5:58:A6
Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E
Certificate issuer:       /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
Manifest number:          013B
Signing time:             Sun 19 Oct 2025 07:11:44 +0000
Manifest this update:     Sun 19 Oct 2025 07:11:43 +0000
Manifest next update:     Sun 26 Oct 2025 07:11:43 +0000
Files and hashes:         1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: ddxSJUbezpNFJWOeSm1exH8oZOptcUqmcPDUF9GGv4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl
                          rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E
        Validity
            Not Before: Oct 19 07:11:43 2025 GMT
            Not After : Oct 26 07:11:43 2025 GMT
        Subject: CN=68f48f2f-df2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:3a:34:fe:97:a1:cc:40:3e:b0:f5:d0:33:
                    5e:b9:40:b8:1a:bc:2b:fa:1a:63:53:ef:4b:d9:90:
                    77:d1:7e:04:42:fa:11:e4:16:2a:a3:82:1c:ca:81:
                    9f:fd:21:09:10:fd:74:19:e0:08:4d:d5:25:a2:69:
                    98:c2:f8:b0:39:2d:0b:3f:9c:ef:b9:06:2b:f1:d7:
                    7f:e7:35:bc:14:ba:72:d9:28:70:d4:9b:87:5c:02:
                    9a:13:de:93:42:e8:f0:22:c9:47:06:c5:72:87:cb:
                    fa:d5:77:ad:08:40:a2:f8:db:7d:c3:6e:67:4e:2c:
                    fb:5e:3d:fa:c1:89:69:02:f5:dc:aa:3f:8c:f5:50:
                    c9:93:c0:9c:98:c0:1d:ad:2b:bd:70:d7:65:98:2f:
                    41:ea:75:55:85:2c:4d:66:f9:2b:da:63:0b:a1:c0:
                    ba:10:24:f0:b1:a2:ba:ce:58:6f:4b:13:2f:f6:3c:
                    ed:3d:c0:40:2b:8c:9a:5d:2f:ae:a7:e8:c8:11:9b:
                    8c:eb:06:70:ec:af:83:5e:99:d2:91:0d:0b:42:15:
                    e1:54:99:c2:6e:fa:48:cb:d3:bd:c6:38:96:01:28:
                    5c:9f:88:b4:7f:35:78:72:a8:94:a4:77:5b:47:c4:
                    68:57:58:bc:40:ad:ec:b0:97:6c:60:50:46:6d:84:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:4E:60:48:E7:3B:CC:36:5D:55:D2:79:3C:B0:73:5D:F5:58:A6
            X509v3 Authority Key Identifier:
                keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:a6:52:8e:fc:55:a6:de:f4:a1:ad:56:db:b5:bd:27:5b:
         18:e3:05:fe:81:0a:77:ae:ef:9f:72:29:74:9e:49:0d:08:ae:
         49:2c:a0:70:9f:7c:56:31:05:6a:88:8a:fa:29:d1:d0:fe:d1:
         9b:01:13:0e:4b:94:57:1b:e0:6a:04:60:e5:97:b5:26:e0:94:
         79:c4:62:0b:e8:26:a5:7d:17:ed:1a:91:c9:79:a3:b6:d3:02:
         a5:df:53:3e:84:cf:2a:56:49:a1:c3:10:95:7e:db:6e:4d:f4:
         1d:76:79:53:a8:89:e0:d9:c6:eb:f7:eb:36:87:7b:c2:69:0b:
         1d:1f:89:92:dd:0d:7e:10:c6:8a:23:37:c3:5e:dd:16:8e:0a:
         b7:ce:9e:21:b4:65:55:31:4e:b6:40:73:b9:dc:d6:4e:3f:e4:
         34:2d:dd:32:62:dd:71:64:88:39:8f:95:17:40:21:1a:bd:3c:
         1a:54:88:7e:dc:8f:8a:97:72:5c:d8:d3:7d:a0:ae:26:93:8c:
         e3:28:96:94:5d:f6:13:81:50:be:e7:d5:ec:63:72:59:03:de:
         0c:5c:fe:d3:e8:08:64:77:87:1e:70:26:06:ca:3e:28:c3:b8:
         ce:c2:5c:94:04:c4:d4:35:2b:2b:bb:c5:84:9e:4d:55:44:20:
         ed:18:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:27 2025 by rpki-client