Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File:                     2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier:          JVRXNzZo0IzEmZVXU8cvkq3d3eR8vWDc36TlqSj8RQI=
Subject key identifier:   A9:0B:4A:8E:62:1F:A8:92:4F:B7:61:A1:67:2E:E4:F0:21:35:DC:4A
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number:          04
Signing time:             Sun 19 Oct 2025 11:41:18 +0000
Manifest this update:     Sun 19 Oct 2025 11:41:17 +0000
Manifest next update:     Sun 26 Oct 2025 11:41:17 +0000
Files and hashes:         1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: OV1iRO9vwg6Fcq64C8A0tAplB/iSjyWnKGsSmGO1XHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Oct 19 11:41:17 2025 GMT
            Not After : Oct 26 11:41:17 2025 GMT
        Subject: CN=68f4ce5e-cf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:95:43:92:ef:52:28:48:bf:3d:98:dd:5a:
                    c5:20:d6:10:fa:19:9e:16:6c:92:ff:cf:67:b0:69:
                    a2:9f:a4:01:a0:14:0f:59:45:e6:64:4e:22:b4:df:
                    b0:66:7e:20:95:bb:fb:26:44:ab:66:80:9e:1d:29:
                    51:04:bd:4e:d8:0c:bf:06:66:e0:26:44:0e:1e:21:
                    7f:c9:12:f4:02:1b:51:8a:84:61:23:94:45:32:fa:
                    b5:84:7f:14:e0:1a:c2:47:34:b8:db:39:99:51:54:
                    c3:e2:3c:fd:45:15:da:27:e0:39:1b:fa:d7:ca:1a:
                    34:41:8e:7f:65:83:95:4f:60:88:07:dd:57:c2:1a:
                    ae:53:ed:72:36:de:2f:28:2d:fe:1b:8e:12:e4:ca:
                    0e:53:5c:c3:02:4a:ba:f9:b2:7e:ab:4f:8d:8a:fa:
                    2c:75:d4:67:57:0b:b8:0f:37:82:0c:b0:99:a5:12:
                    90:2c:7d:15:42:c9:a8:2c:e0:4d:81:c2:b2:ae:93:
                    f9:bb:bb:c6:05:e8:b0:7a:98:a2:85:f7:4f:c3:47:
                    da:8e:da:07:59:4f:55:f4:9f:46:e0:7b:1b:0f:af:
                    34:dc:a6:0f:ff:ec:46:c3:ff:b8:0d:bd:1d:93:d8:
                    91:74:db:6f:86:58:d3:cf:d1:45:8d:f8:5a:92:23:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:4A:8E:62:1F:A8:92:4F:B7:61:A1:67:2E:E4:F0:21:35:DC:4A
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:af:2d:91:fa:b9:55:0d:d8:8d:6a:43:9a:fc:a5:9b:d4:
         9b:c3:dc:cc:9e:41:0d:17:36:2a:87:47:a2:54:7e:a1:5d:43:
         9a:01:38:5e:a8:a8:29:70:34:c6:68:41:94:0c:af:9a:44:ca:
         ac:0b:06:9f:71:ba:c7:c8:fb:86:93:c1:be:36:03:3a:26:c5:
         26:5c:43:f6:59:2e:30:82:32:48:4c:06:f8:97:81:d4:e0:c5:
         31:0b:20:0c:36:58:9f:13:c7:13:da:da:02:7f:87:14:a8:fb:
         93:42:b9:d7:cf:6a:ca:03:0e:6e:18:29:f3:32:79:b0:62:6e:
         75:c6:c6:d6:7a:82:8c:55:4d:c6:72:98:6b:98:99:75:23:df:
         da:bc:94:d3:a2:73:60:81:0e:7e:06:ed:dc:74:08:a4:d5:c6:
         04:17:0c:ce:1f:a2:3f:53:e3:84:d9:43:c9:a0:5c:68:ad:ba:
         41:b2:b9:65:9c:da:9f:71:ca:89:6b:8e:5c:83:72:80:41:25:
         26:c7:4f:cd:5d:2b:b2:d9:06:ba:76:0e:c1:a6:73:e5:7b:97:
         cf:a1:82:8c:7a:62:ec:b2:72:21:2f:45:b2:e8:32:f3:94:e3:
         4b:f0:8d:88:4a:2b:f5:c3:6a:5f:dc:c0:03:34:fd:ca:a6:cc:
         7f:3c:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:13 2025 by rpki-client