Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File:                     -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier:          fYVQpPApatX+VLC9ncI+X0sXRDeIG8OvkLc1fUkD68E=
Subject key identifier:   93:4C:95:AA:12:91:17:00:7D:7E:B0:1C:76:78:BE:77:EF:A4:4E:E9
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number:          90
Signing time:             Sun 19 Oct 2025 09:47:30 +0000
Manifest this update:     Sun 19 Oct 2025 09:47:29 +0000
Manifest next update:     Sun 26 Oct 2025 09:47:29 +0000
Files and hashes:         1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: 3NSyQglrO+xxzWjnah6//g1fqvm2hB5ZP51nnnKizgg=)
                          2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Oct 19 09:47:29 2025 GMT
            Not After : Oct 26 09:47:29 2025 GMT
        Subject: CN=68f4b3b2-7a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:c2:e3:65:bf:ba:3f:0a:1f:f4:7b:74:a9:
                    36:aa:4f:97:a5:bf:17:aa:6e:1a:f5:72:8b:e7:2c:
                    35:1d:2f:e0:8c:c9:c5:fb:e2:a0:03:58:d3:45:97:
                    c1:52:bd:46:ca:b8:54:2e:cf:63:ad:c8:89:97:8b:
                    e8:32:6c:0c:4c:bc:82:75:3a:e5:fc:ed:e8:59:9a:
                    e0:0b:b5:c7:86:ed:5a:4b:a2:a9:39:22:fc:06:40:
                    f2:48:2f:07:33:9a:40:61:9c:c4:bd:ab:ef:72:a3:
                    c5:c7:41:3c:7e:bf:b8:2d:d0:88:d3:5d:a5:40:dc:
                    19:3b:04:3d:5b:a9:1c:4b:1d:fd:ca:ba:84:ea:89:
                    81:6c:14:6b:0b:ab:0d:c8:d3:31:5f:ba:8d:d0:a2:
                    d9:e8:3e:14:69:d1:a7:6a:22:98:07:90:be:de:2a:
                    e6:c4:cf:24:b5:27:05:88:db:3b:40:db:9f:53:6e:
                    c8:28:0a:3f:b5:8f:96:df:a4:81:35:d1:b4:eb:d4:
                    3d:af:0f:7d:5d:71:11:fd:32:46:f8:09:58:99:b7:
                    8c:31:4b:08:bc:6c:66:31:f6:12:1a:3d:18:25:3c:
                    ee:3f:e2:21:dc:74:36:6d:98:4f:01:7f:c6:49:f5:
                    af:70:14:71:db:47:3a:28:69:1b:6f:a8:8b:6a:e4:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4C:95:AA:12:91:17:00:7D:7E:B0:1C:76:78:BE:77:EF:A4:4E:E9
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:70:c6:ce:8f:4a:22:3d:9c:2c:30:2d:76:30:7e:26:e4:
         a8:d0:6b:5a:88:1f:de:a9:43:cb:5c:74:3d:62:5e:4b:7d:fd:
         18:a1:fa:84:fc:32:02:c6:98:62:9a:0e:a7:22:07:9f:12:20:
         01:23:b7:61:37:6a:4d:27:9c:01:68:9d:e3:57:9a:e9:3d:b0:
         b1:d3:84:ce:11:c3:6c:94:bd:bd:59:75:4e:8d:db:58:fe:5c:
         4f:7f:5a:ff:3b:7b:0a:0f:d8:59:09:bb:52:28:17:f5:b5:cf:
         f5:23:e0:f3:40:14:1a:69:f3:d8:76:ec:65:b0:33:47:04:05:
         07:c9:40:b4:dd:87:1a:4f:74:61:94:71:b1:85:bd:8c:74:71:
         f6:ae:51:db:b3:46:87:62:ec:b1:71:19:9f:22:c3:f7:c3:f4:
         1a:76:1d:2b:00:81:b6:c8:74:b0:69:f1:2b:fa:b1:50:e0:95:
         d4:20:c0:66:08:14:90:0c:0c:a7:22:16:5e:82:8b:13:c2:3a:
         22:51:c7:21:77:75:94:3f:8b:07:1f:b1:fc:73:56:72:81:e3:
         3e:d4:95:4a:b9:21:f1:33:2c:16:de:8a:6e:fc:80:66:af:c7:
         ff:de:93:87:5e:c6:62:74:71:a1:c6:b3:ed:d6:e0:c7:3b:62:
         af:b4:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:34 2025 by rpki-client