Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
File:                     efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json)
Hash identifier:          qAijZpTeBDEUSmC7xLCQqlY6FytLs0E/o/OCwxYNrbs=
Subject key identifier:   A7:40:59:4F:05:39:22:B1:E0:94:3E:4F:FB:CD:31:AD:18:BD:50:42
Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
Certificate issuer:       /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
Manifest number:          77
Signing time:             Sun 19 Oct 2025 10:06:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:06:21 +0000
Manifest next update:     Sun 26 Oct 2025 10:06:21 +0000
Files and hashes:         1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: ZEVzXRTt2Cc7DTMXebT54EyConcmSifZIZKETKBuevo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
        Validity
            Not Before: Oct 19 10:06:21 2025 GMT
            Not After : Oct 26 10:06:21 2025 GMT
        Subject: CN=68f4b81d-6a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:ea:ef:bf:05:e0:b0:fe:ea:d1:bb:72:e5:
                    33:bd:20:fa:56:8e:b8:ab:5e:b8:97:e2:ed:7f:c1:
                    53:e4:e6:90:59:43:e4:e8:9f:cd:29:2f:62:eb:1e:
                    1e:72:d5:0f:96:6a:b2:af:6b:8e:96:e6:fd:e2:72:
                    e8:e4:70:be:d1:a6:a7:99:0a:62:75:70:b8:7c:22:
                    07:cc:6c:f9:4f:47:11:36:56:ec:a0:44:36:02:95:
                    e8:86:ac:8b:ea:f8:93:62:d4:67:76:b6:94:39:2f:
                    5f:d2:05:b6:21:af:c5:f3:98:72:75:41:8d:77:d0:
                    db:4a:d6:bf:fa:66:8e:61:a4:8d:ba:01:55:1a:3a:
                    48:b4:f0:03:b5:f6:bd:c4:bf:3b:d9:f2:29:00:3f:
                    a9:4d:1b:1c:ee:d7:ca:c6:67:45:4d:19:6f:58:d6:
                    bc:b5:b4:ef:02:f6:68:f1:92:16:d9:28:87:5f:77:
                    1f:97:45:a8:d4:89:67:cf:7b:86:61:6e:26:51:e1:
                    fe:18:bc:92:4c:7a:ff:89:64:65:ca:21:d5:aa:9f:
                    09:c0:58:a7:ed:59:1e:2d:98:39:d7:3d:a6:21:6b:
                    91:e1:a6:24:a3:3d:02:ef:b5:7c:2c:94:5d:00:d8:
                    78:66:ef:d9:05:9e:86:fc:d9:71:9b:54:f9:13:c2:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:40:59:4F:05:39:22:B1:E0:94:3E:4F:FB:CD:31:AD:18:BD:50:42
            X509v3 Authority Key Identifier:
                keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:f6:db:9f:b8:b7:0d:f1:70:b4:6a:c0:60:02:52:16:84:
         b9:5e:87:71:fa:f4:a0:b5:d2:aa:0a:08:05:95:65:07:53:d4:
         21:91:5d:e8:bd:8f:1d:20:57:b1:b2:81:e7:85:6b:0d:70:4e:
         0d:8b:7f:da:50:e2:2b:16:e6:d3:38:35:d1:fd:bc:c1:96:f1:
         c1:cd:bb:be:1c:d1:eb:97:25:5e:03:1e:62:4f:d9:68:f9:93:
         70:c7:3e:76:34:98:d8:de:45:c2:cd:37:d5:8e:10:f4:1d:f0:
         96:73:da:a0:16:d6:4c:93:ab:9e:1e:e8:7c:53:5a:03:da:ec:
         de:ee:72:c8:bd:79:ee:b6:a7:11:10:f3:b1:a8:d9:a6:91:64:
         75:95:a7:45:02:be:99:7c:89:92:14:4a:4b:0d:f7:0b:c1:b7:
         cc:57:ae:d8:32:32:3e:63:8d:8a:31:0f:0d:b7:99:07:ff:fb:
         29:ba:d4:68:66:3e:85:60:ff:d1:c4:23:5a:1c:ce:e7:75:6d:
         62:aa:ce:43:63:6e:8d:21:ca:55:77:20:55:3b:3f:15:a9:2c:
         64:b7:b8:62:14:30:6d:58:07:b8:7d:a9:4c:01:d9:f9:80:cb:
         fe:e4:e9:5d:1a:56:0f:dd:1b:52:89:1b:82:4f:c7:f6:7a:29:
         e1:ef:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:41 2025 by rpki-client