Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          vc87ZVPeRcsR6Eo836EyBUfbARdB65YfBd/gTORUBiU=
Subject key identifier:   38:29:77:EC:A8:CB:9C:96:41:3B:42:FF:62:AC:50:B1:09:33:3B:11
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       1169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1E10
Signing time:             Sat 18 Oct 2025 17:46:28 +0000
Manifest this update:     Sat 18 Oct 2025 17:46:28 +0000
Manifest next update:     Sat 25 Oct 2025 17:46:28 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: 90MZKIiOnX2I+0gBAJLRVCZDy9WJFrcdIzP069eQjE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Oct 18 17:46:28 2025 GMT
            Not After : Oct 25 17:46:28 2025 GMT
        Subject: CN=68f3d274-f481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:8f:9f:a0:30:92:77:91:1e:fd:ba:64:6c:
                    35:ee:21:3c:86:c5:cb:81:c9:1f:34:3e:34:21:b6:
                    1c:f9:28:ca:fc:89:71:ff:0d:82:b1:de:b3:52:43:
                    6c:6b:c6:d4:82:78:73:46:09:49:98:11:2e:65:3a:
                    c5:e9:ff:61:0a:f2:71:9b:cd:58:f3:35:bf:2d:83:
                    f2:9e:68:7f:2c:d8:63:41:f0:65:a7:e2:5f:04:81:
                    4a:05:8e:58:62:48:6e:64:84:2c:a6:c6:7f:e9:35:
                    0a:23:51:b4:50:e4:d4:11:86:3f:c0:34:ad:97:5b:
                    40:be:66:20:8b:18:4f:6c:c7:8e:89:a4:4b:17:de:
                    4d:91:aa:ba:70:f0:dc:ae:d3:44:de:a9:c7:23:9c:
                    94:9b:d9:7c:75:5d:7f:cc:e4:0f:5b:5b:10:5a:11:
                    a4:13:ab:e0:87:92:b5:ae:50:c5:24:89:f0:fd:95:
                    72:4a:cf:4a:2a:5c:dc:ae:38:e4:e0:05:c7:bb:0e:
                    61:aa:aa:46:d0:8d:23:24:89:b7:3a:8a:c8:96:3e:
                    d8:9e:45:dd:ad:e3:87:64:46:a1:59:8b:cf:6b:8a:
                    cc:d7:eb:64:c7:ad:26:1f:62:41:74:14:6f:65:c4:
                    37:5c:b9:f7:8f:a7:7b:ef:54:24:11:53:9f:51:07:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:77:EC:A8:CB:9C:96:41:3B:42:FF:62:AC:50:B1:09:33:3B:11
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:cc:b7:7e:2b:f4:db:74:58:f5:63:12:d1:9f:b3:36:48:
         d0:1d:50:e8:1f:a8:5a:a9:a7:bd:35:cb:72:54:58:6d:4b:d2:
         11:1f:9f:cd:66:e3:36:84:73:d2:d0:04:d2:73:97:4c:a2:63:
         74:ca:63:20:25:be:ff:a3:df:09:7b:89:20:91:2d:fc:29:f6:
         e6:bb:cd:5a:f9:5f:05:78:1d:d8:08:b7:09:b5:1e:d4:7a:61:
         2a:61:f7:bb:f2:fa:77:9c:c1:98:79:5e:4e:f7:dc:6b:f8:2a:
         ef:53:22:29:4b:5f:f3:03:a0:a6:41:f0:02:8b:a2:1b:fb:ce:
         26:a9:e7:2a:98:19:ff:fa:fb:e0:2f:11:f2:97:f9:bb:c6:a2:
         1f:55:3d:1b:51:3f:45:e4:99:9d:48:d8:a8:c6:a8:5a:1d:b1:
         d7:c5:d7:b4:87:9d:49:73:9a:f7:ee:ab:41:5b:11:cc:fc:f6:
         25:6e:36:36:b3:ef:82:a5:32:77:30:59:64:9f:af:a7:4e:07:
         7a:c3:37:82:ba:40:63:7c:6a:c6:b6:3d:a8:b2:92:80:a8:fb:
         e2:f9:92:e6:df:4f:4a:e7:28:ff:c2:0e:43:82:d0:53:30:c6:
         66:2a:1a:7e:d1:8a:64:d7:0d:22:0d:92:b6:c4:ad:30:12:52:
         0f:9c:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:22 2025 by rpki-client