Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
File:                     61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json)
Hash identifier:          MtycPyNwUde9LS8y3bgHemeo1Wbwc7DOpKryQWBaE74=
Subject key identifier:   33:64:C5:AE:0B:49:11:C5:B8:EE:DD:5E:F1:A2:88:3C:D9:94:1B:4B
Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08
Certificate issuer:       /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
Certificate serial:       069F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
Manifest number:          069A
Signing time:             Sat 18 Oct 2025 23:49:10 +0000
Manifest this update:     Sat 18 Oct 2025 23:49:09 +0000
Manifest next update:     Sat 25 Oct 2025 23:49:09 +0000
Files and hashes:         1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: UEwGcDT0idK0NZdkaDwraOErVKGrlS8lk2Fmy43/Zj0=)
                          2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: Lx0/5acw/rTT+uCYraQZRnT94tjJt0V2khH4PhiByaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08
        Validity
            Not Before: Oct 18 23:49:09 2025 GMT
            Not After : Oct 25 23:49:09 2025 GMT
        Subject: CN=68f42776-6d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:13:fc:c1:a2:cc:4d:c6:1f:c1:2b:e0:21:
                    1d:57:50:93:5f:85:2d:c4:59:af:26:ad:ea:a3:fd:
                    7f:32:f7:ad:18:74:64:79:cf:29:26:00:52:21:02:
                    72:d6:03:bf:6c:dc:c5:ca:17:09:19:77:a7:dd:e6:
                    e1:fc:4a:b0:b3:02:56:ad:79:9c:5a:3c:fc:25:be:
                    33:44:e4:95:3e:3e:69:0f:fd:b0:b3:32:d7:e8:40:
                    c7:72:57:ac:f2:02:97:d7:2b:95:dc:e4:4f:9e:8d:
                    c1:a4:76:0c:18:ce:cf:46:58:16:cf:3c:f1:96:b0:
                    51:9f:6d:c4:0c:b7:6c:cf:d2:19:a3:e2:54:5f:b2:
                    a2:19:97:e1:d0:b5:77:57:54:e6:99:f6:19:e9:c5:
                    ac:4d:74:db:c7:25:59:99:1d:46:93:df:8e:ce:66:
                    c1:b8:3a:9e:b4:a4:0e:12:d5:58:5c:44:dd:d2:0e:
                    dd:54:60:f8:3f:63:4e:0a:41:c0:0f:7f:84:a4:08:
                    9b:91:ca:f5:86:48:43:ee:ca:4f:43:f4:a0:fa:97:
                    2b:f3:cd:20:01:1c:99:a9:6a:51:db:bd:86:42:80:
                    8a:64:59:50:dc:24:96:19:bf:3c:03:78:ec:bd:b9:
                    15:5d:20:47:05:e8:db:f0:d2:90:e7:2d:50:ed:5d:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:C5:AE:0B:49:11:C5:B8:EE:DD:5E:F1:A2:88:3C:D9:94:1B:4B
            X509v3 Authority Key Identifier:
                keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c4:0b:39:8f:de:53:f9:3e:84:94:d1:84:f9:4a:70:bb:88:
         05:0a:38:67:93:1b:56:4f:1f:b0:71:fd:2b:36:57:5c:0b:78:
         04:2c:94:1b:3f:0b:e5:a1:c6:1b:2d:c3:56:57:6d:58:81:d2:
         6e:81:54:2f:18:0b:27:6a:31:f3:1a:9a:41:59:fe:c4:f5:79:
         b9:79:96:00:30:1e:3f:57:62:f8:c6:3d:d7:d3:f4:f2:29:76:
         ff:a9:0b:83:cd:48:f1:79:ba:56:72:4c:37:08:4a:c0:b5:56:
         d0:82:44:2e:13:6b:f6:4a:49:08:fe:1c:0e:1d:50:08:a5:87:
         42:7d:88:ab:c1:41:93:b9:18:96:30:8f:b8:1e:fe:41:fb:51:
         1d:e0:a9:c6:ca:66:5d:7d:62:a3:43:2e:f5:d5:fc:3b:0d:8e:
         e4:e3:fa:da:9d:d2:5b:38:02:f0:0c:b3:d8:e9:0b:14:4b:f9:
         13:3f:e4:35:8b:00:fc:2a:f3:29:35:e1:dc:e3:e2:96:99:eb:
         4d:61:d1:fb:48:5c:44:92:bf:73:f7:ca:47:f9:3f:e9:64:06:
         84:e0:93:87:42:87:75:fc:c3:38:80:79:b7:5e:ab:ee:2b:cc:
         27:36:a5:04:30:a7:d3:4c:08:8e:81:10:5e:17:bb:4e:e7:85:
         2e:a2:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:23 2025 by rpki-client