Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File:                     HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier:          Bu3ptIfimzdf6QhlnEN1Fj3kRQyFbFU4HroJclSmMWQ=
Subject key identifier:   91:5F:45:74:DC:D5:0E:5C:1B:C6:F6:21:50:29:E4:7B:FE:FD:E5:C5
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer:       /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number:          91
Signing time:             Sun 19 Oct 2025 09:43:37 +0000
Manifest this update:     Sun 19 Oct 2025 09:43:36 +0000
Manifest next update:     Sun 26 Oct 2025 09:43:36 +0000
Files and hashes:         1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: Zy3esLferIrGMpYxHFWK9aV2VuB7Qa08pcCkWaKqqWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
        Validity
            Not Before: Oct 19 09:43:36 2025 GMT
            Not After : Oct 26 09:43:36 2025 GMT
        Subject: CN=68f4b2c9-7d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:8e:82:b7:97:70:37:82:23:99:ac:b9:94:
                    a6:75:85:d9:c3:fd:56:d2:15:50:48:f4:c6:b9:a4:
                    0f:a5:80:9e:c4:29:bb:74:2c:09:a1:29:35:1d:58:
                    75:12:c4:81:03:ea:55:2f:cf:9d:00:e7:6e:0a:d9:
                    96:8f:9f:d7:e9:51:6e:6c:41:e8:ea:a1:37:54:17:
                    a3:d0:4d:77:dc:61:39:18:37:69:d0:94:76:e2:50:
                    a7:2c:82:75:ac:05:1c:7b:8b:3b:12:1a:4c:cb:58:
                    64:aa:36:b9:41:c0:7b:47:91:73:59:46:b8:0d:c9:
                    aa:27:97:6d:1b:02:8c:c7:0b:e3:8e:db:d0:1b:4f:
                    b9:ec:1e:d1:e9:3b:95:42:01:37:bb:eb:5e:0e:95:
                    70:0f:32:87:16:0a:5a:6c:7e:5c:e3:86:b3:a5:4a:
                    af:15:48:f3:bb:47:fd:ff:12:a1:bc:91:ca:83:2c:
                    11:33:ed:d2:43:5f:68:b9:15:63:34:52:61:63:1c:
                    d8:9e:90:e8:9f:70:69:c3:b9:f3:a4:67:c0:03:b7:
                    7c:ac:85:06:92:72:60:2d:df:c3:ba:19:8b:e3:3a:
                    36:88:63:9a:21:5c:c4:0f:82:79:22:ed:f6:73:5f:
                    e0:73:d8:83:9c:b1:93:a1:c0:10:a1:f6:cf:73:58:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5F:45:74:DC:D5:0E:5C:1B:C6:F6:21:50:29:E4:7B:FE:FD:E5:C5
            X509v3 Authority Key Identifier:
                keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:1e:40:43:48:3c:f3:21:d3:c7:77:1e:3a:0c:b9:02:08:
         51:c3:ce:ee:b2:d6:2b:c2:2f:ef:3f:2f:d4:0b:16:c9:74:19:
         d4:4e:ca:f8:c3:dd:46:4c:4d:9f:0b:ce:fa:19:d2:75:ef:fe:
         dd:f2:15:17:50:f8:ae:23:69:8e:b3:2b:ae:1f:a0:e5:9d:b1:
         34:c5:a3:95:5f:37:a4:fd:15:2a:21:a4:5e:99:51:bf:eb:5a:
         2f:8d:62:21:7c:da:c2:9d:6c:2e:c5:a2:d9:53:73:1e:21:8e:
         c1:b9:4b:b5:0b:f2:bf:f9:00:16:51:aa:e9:29:10:78:bd:c8:
         eb:57:24:67:44:03:2f:c5:2a:e0:25:8b:4b:16:33:80:4a:9b:
         bc:50:d5:16:f3:28:eb:47:37:aa:ac:2f:77:e4:90:09:27:c3:
         fc:b6:a6:fa:2a:fd:9d:5d:e1:f1:17:2d:73:1e:06:80:89:91:
         86:a1:ee:12:63:11:5f:a9:1d:7b:3b:60:bd:89:60:b9:60:3b:
         65:e4:6f:a9:2d:70:26:05:5a:64:ca:65:5b:c1:3b:21:40:cf:
         f5:9d:ef:ee:c4:92:ba:be:bb:03:8b:b8:a1:8d:8c:32:1d:a1:
         6e:87:1c:20:30:73:a2:ba:9b:95:f4:18:fa:4d:2c:b0:c7:32:
         c8:b7:75:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1NzgxMTAvBgNVBAUTKDFFOUIwRDE2M0NFMEFBMTFFOTFENTU2MEY1QTNDQzY2
OUUzMjkxRUYwHhcNMjUxMDE5MDk0MzM2WhcNMjUxMDI2MDk0MzM2WjAYMRYwFAYD
VQQDEw02OGY0YjJjOS03ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyE+OgreXcDeCI5msuZSmdYXZw/1W0hVQSPTGuaQPpYCexCm7dCwJoSk1HVh1
EsSBA+pVL8+dAOduCtmWj5/X6VFubEHo6qE3VBej0E133GE5GDdp0JR24lCnLIJ1
rAUce4s7EhpMy1hkqja5QcB7R5FzWUa4DcmqJ5dtGwKMxwvjjtvQG0+57B7R6TuV
QgE3u+teDpVwDzKHFgpabH5c44azpUqvFUjzu0f9/xKhvJHKgywRM+3SQ19ouRVj
NFJhYxzYnpDon3Bpw7nzpGfAA7d8rIUGknJgLd/DuhmL4zo2iGOaIVzED4J5Iu32
c1/gc9iDnLGTocAQofbPc1gFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFfRXTc
1Q5cG8b2IVAp5Hv+/eXFMB8GA1UdIwQYMBaAFB6bDRY84KoR6R1VYPWjzGaeMpHv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wOTUzMEE4Q0NG
M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3FoSHBIVlZnOWFQTVpwNHlr
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtlOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDU3OC8wOTUzMEE4Q0NGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3Fo
SHBIVlZnOWFQTVpwNHlrZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9sx5AQ0g88yHTx3ceOgy5AghRw87ustYrwi/vPy/UCxbJdBnUTsr4
w91GTE2fC876GdJ17/7d8hUXUPiuI2mOsyuuH6DlnbE0xaOVXzek/RUqIaRemVG/
61ovjWIhfNrCnWwuxaLZU3MeIY7BuUu1C/K/+QAWUarpKRB4vcjrVyRnRAMvxSrg
JYtLFjOASpu8UNUW8yjrRzeqrC935JAJJ8P8tqb6Kv2dXeHxFy1zHgaAiZGGoe4S
YxFfqR17O2C9iWC5YDtl5G+pLXAmBVpkymVbwTshQM/1ne/uxJK6vrsDi7ihjYwy
HaFuhxwgMHOiupuV9Bj6TSywxzLIt3Uo
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:20 2025 by rpki-client