Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File:                     mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier:          Y7Bu/PXV4sOR8VPUuFbKhLRNOogx61bUvpVVXUOdQr4=
Subject key identifier:   2E:4B:26:83:16:99:68:E9:D2:30:6D:91:FB:8E:37:36:E7:B3:18:C2
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer:       /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial:       2581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number:          A061
Signing time:             Sat 18 Oct 2025 14:32:59 +0000
Manifest this update:     Sat 18 Oct 2025 14:32:58 +0000
Manifest next update:     Sat 25 Oct 2025 14:32:58 +0000
Files and hashes:         1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: gJAZabbj8WK0sBhuwVau6lBnRecAuiLW5mft7qsKVz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9601 (0x2581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
        Validity
            Not Before: Oct 18 14:32:58 2025 GMT
            Not After : Oct 25 14:32:58 2025 GMT
        Subject: CN=68f3a51a-898d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:1d:c0:4d:e3:b7:4d:32:3b:2d:0c:29:1e:
                    b1:65:5b:9e:b5:79:a3:44:f7:d6:92:e5:c9:1e:85:
                    c1:8f:41:53:9a:a0:fd:40:0a:c7:ba:12:0f:cb:5e:
                    5f:43:62:fe:67:c6:10:b8:93:bb:90:4d:3d:d1:4f:
                    15:b9:38:6c:c7:d1:ba:18:7f:5c:02:33:87:23:4c:
                    b2:a8:e5:60:cd:c7:44:6b:e8:3a:0a:5c:df:ac:73:
                    34:05:47:d2:0f:b6:9f:d1:a0:ba:b4:14:2c:68:d1:
                    df:42:a8:e1:24:da:28:29:5a:71:5b:b9:6d:1b:5a:
                    45:5e:da:c3:0d:32:7e:e3:e6:24:39:50:4c:25:72:
                    da:a5:2f:af:47:df:a6:b7:6a:de:35:81:a5:dc:ee:
                    41:f3:2d:11:0c:ae:de:a0:b9:13:41:ff:7f:34:41:
                    8d:4c:4e:c4:ba:66:3c:14:c1:b2:d5:b6:9b:84:dd:
                    87:ac:c0:77:3c:4b:89:f4:08:e5:6f:05:51:57:96:
                    93:8f:54:ac:ae:9b:4c:42:5a:9c:0d:b3:66:86:aa:
                    02:7e:bf:d3:28:f2:43:02:e8:99:12:20:f5:3b:0a:
                    6b:34:87:da:d0:1e:d0:de:30:2f:74:29:f4:d3:dc:
                    eb:1a:e5:27:bc:6e:0f:06:e7:4a:b4:74:08:98:4e:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4B:26:83:16:99:68:E9:D2:30:6D:91:FB:8E:37:36:E7:B3:18:C2
            X509v3 Authority Key Identifier:
                keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:8c:f0:5b:7f:ee:75:07:a0:18:c1:1d:d9:36:28:2d:c1:
         18:f2:9b:c4:07:b9:88:de:fb:88:62:91:7d:23:23:1e:41:7d:
         30:3c:a4:a4:f4:eb:a7:a2:19:95:0f:5b:6c:f8:e4:d3:a7:5a:
         43:f1:f3:6f:4d:4f:2b:52:a3:5e:bb:3c:07:23:5a:e3:10:03:
         69:69:c6:74:31:1d:11:d4:f4:f5:33:0e:1f:6a:7f:16:79:8c:
         e3:31:98:a1:23:fd:74:bc:74:f8:54:ae:a7:0d:35:26:65:21:
         48:b1:63:0d:52:cf:b0:89:f7:ea:85:b7:a1:09:1e:71:e0:21:
         62:4d:8b:f8:18:5d:99:99:1e:7c:e9:a3:05:80:c8:a7:45:8f:
         f3:c8:cf:ad:ff:34:bb:c9:2f:ba:c8:c4:af:a4:56:53:e4:82:
         1d:b9:3f:07:70:4e:61:81:c3:9c:e9:df:35:4e:2d:8b:f0:0a:
         f8:aa:92:06:60:e3:3e:1f:94:4b:3b:4c:ae:f3:02:83:eb:98:
         9c:61:57:36:55:ab:26:ec:9e:0e:4f:4c:2e:db:f6:f3:4c:20:
         31:f3:9d:b7:bf:13:e7:ba:24:e5:23:e2:c6:85:61:aa:15:92:
         ea:16:e1:09:56:b9:b2:bb:d1:c8:ea:0e:99:82:20:a1:71:8d:
         88:33:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:10 2025 by rpki-client