Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          Z/1JF1zZ/lst3qCkSCXuN9sb4umfTkJ5fs0R9a7U+Ec=
Subject key identifier:   D7:95:5B:1C:56:46:B1:83:4F:E1:27:21:89:A5:E3:53:06:69:54:00
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          7C
Signing time:             Sun 19 Oct 2025 10:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:51 +0000
Manifest next update:     Sun 26 Oct 2025 10:02:51 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: FwPjvzH3p3hOJdCD7NWI2yPtCc8zyzMBP6Itg2MdRJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Oct 19 10:02:51 2025 GMT
            Not After : Oct 26 10:02:51 2025 GMT
        Subject: CN=68f4b74c-ef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:d7:97:18:b6:81:ca:ef:25:ad:67:9c:de:
                    53:62:e8:5b:3a:17:aa:c6:28:dc:ef:06:1d:5d:ac:
                    a2:3d:bf:79:72:a7:4a:76:4d:99:74:25:e8:f7:6a:
                    8c:93:fa:d8:3c:2c:ef:81:f8:d3:6b:fc:92:c6:12:
                    e1:10:82:d5:cf:fd:91:fe:b4:8f:f2:77:7e:b2:21:
                    81:02:cc:50:ac:6b:37:ee:d4:02:83:d6:2a:1b:20:
                    e3:1d:fa:d7:59:c6:e1:d7:ed:5d:5e:f1:c6:7b:29:
                    13:c4:80:34:29:c6:2b:a6:01:8f:b8:81:a7:ac:46:
                    c0:13:e9:cc:cc:03:7c:d9:15:3c:39:fd:37:c5:3e:
                    7d:48:3c:4a:6a:d0:74:73:fc:e9:01:39:41:1d:a5:
                    57:40:7b:dc:c2:0b:f4:bd:29:89:4c:af:27:b6:2a:
                    96:7b:f8:f0:cd:07:76:d8:eb:cc:bd:5e:60:31:b6:
                    e5:93:da:7b:e1:59:d3:de:49:0b:0c:4d:fe:c3:61:
                    07:36:57:b5:2e:1a:e6:bf:0e:d5:78:12:fa:85:dd:
                    2d:b9:d9:ad:be:19:47:49:3f:2e:14:49:47:12:5b:
                    ff:87:11:d4:15:6f:59:bc:87:43:52:2a:33:b5:e9:
                    77:84:7c:90:ac:d6:5a:b5:e6:2a:d0:bb:d7:99:ad:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:95:5B:1C:56:46:B1:83:4F:E1:27:21:89:A5:E3:53:06:69:54:00
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:8c:33:30:31:a3:4b:26:1b:71:52:bf:e6:ad:b8:7e:8d:
         8b:a5:8d:26:b7:97:24:af:76:aa:5f:7b:24:0e:20:de:b2:ef:
         5e:51:be:86:ee:2f:7a:78:78:a4:f0:de:51:a5:07:4c:f9:de:
         3d:66:db:a9:78:b9:cc:cb:32:23:ec:80:c7:aa:09:4b:06:9f:
         7e:bc:60:7e:03:57:28:09:7a:30:64:09:78:25:ea:72:00:8e:
         91:29:5b:19:c2:14:6c:e9:4a:2c:eb:4e:b8:db:dc:a1:31:97:
         3d:62:e3:ae:56:54:ef:8e:76:e9:f2:04:be:a4:90:c0:b1:b3:
         62:67:01:4b:8d:cc:0b:42:4d:da:60:4d:9d:9d:ff:31:44:2a:
         5b:fb:37:0f:18:8b:2e:50:df:a7:ce:53:34:86:de:41:dd:47:
         a5:b2:4e:58:52:97:bf:18:63:9a:b3:5f:01:47:63:bd:49:ec:
         9c:56:29:08:5a:df:c3:f4:d8:a6:94:cf:50:2b:93:2e:9b:97:
         7a:07:4a:b2:56:bc:67:95:b8:5a:ea:0d:1f:9f:d4:04:ac:89:
         7d:29:bb:a0:6d:28:1b:98:c2:93:46:1f:f9:d9:b7:35:06:70:
         6b:6c:e3:1b:c3:63:ce:bf:d6:26:e9:64:be:7f:98:aa:8e:ed:
         6e:38:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:48 2025 by rpki-client