Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
File:                     6_FxbSSrM1DAvAcLRejf29D88b8.mft (raw, json)
Hash identifier:          DjBWnAOeR3GEQVboYkl1aOclb//hPOzz0NdQj1OzX2k=
Subject key identifier:   B0:32:9C:D1:6D:08:5D:A8:B1:29:62:87:14:4A:E6:9D:D6:4D:27:06
Authority key identifier: EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF
Certificate issuer:       /CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
Certificate serial:       2791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
Manifest number:          2791
Signing time:             Tue 04 Nov 2025 15:43:03 +0000
Manifest this update:     Tue 04 Nov 2025 15:43:03 +0000
Manifest next update:     Tue 11 Nov 2025 15:43:03 +0000
Files and hashes:         1: 6_FxbSSrM1DAvAcLRejf29D88b8.crl (hash: XVAegU9vJFTKvm0mHjo/jcsoKsNj7zJ+64ZFLnngaI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10129 (0x2791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
        Validity
            Not Before: Nov  4 15:43:03 2025 GMT
            Not After : Nov 11 15:43:03 2025 GMT
        Subject: CN=690a1f07-f24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:3a:17:87:40:7b:5e:fc:4d:2a:75:6d:7d:
                    ef:c3:49:03:ff:fe:67:8e:26:8d:46:9e:5e:d3:6a:
                    70:70:61:26:1d:f3:ad:c7:be:8c:8d:c0:02:08:4c:
                    77:23:11:75:21:58:3a:30:87:fe:58:e5:98:56:30:
                    7b:9c:11:cd:c9:f6:37:e5:47:c8:86:3f:4f:bd:c8:
                    a9:18:55:38:12:c2:97:31:29:63:bf:38:a0:15:fc:
                    b7:0f:83:74:44:05:fe:d9:96:45:ae:ad:88:a6:c4:
                    29:ee:69:ac:55:7e:8a:17:8b:09:b6:0e:8d:73:88:
                    35:9d:ba:7b:a6:03:72:11:82:e8:2f:e4:a1:62:34:
                    8c:83:9a:37:b5:68:34:47:53:41:ba:1e:a1:47:c1:
                    10:9e:6a:f4:86:16:8f:6d:bc:13:88:dc:19:4c:cf:
                    d9:ea:98:6e:be:9a:cd:26:57:4d:b0:2a:41:21:3e:
                    dc:aa:d3:cf:40:4d:2b:2d:00:51:b0:3e:f5:45:22:
                    2b:69:0c:7e:dc:50:45:bd:56:8c:1b:f0:ef:80:a3:
                    64:2f:98:ae:1a:3b:a9:39:d8:8a:30:74:c9:99:c4:
                    13:a4:79:ca:18:fa:b3:30:6a:20:2b:f6:65:5e:c0:
                    48:d8:2a:e5:78:26:89:54:26:2d:49:6d:10:61:ca:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:9C:D1:6D:08:5D:A8:B1:29:62:87:14:4A:E6:9D:D6:4D:27:06
            X509v3 Authority Key Identifier:
                keyid:EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:5a:9a:80:03:c6:03:6d:3b:49:b4:12:26:4d:1c:d9:99:
         13:0d:d2:f6:ee:17:81:78:31:c9:26:98:15:b2:9e:f5:79:54:
         ae:2e:1a:37:ee:86:86:26:e3:7b:53:ce:e9:92:61:63:7b:d3:
         ca:59:7b:4e:3f:a1:c7:34:4c:a1:0a:e8:61:c6:94:cd:bb:88:
         73:cf:4f:e1:00:c4:3f:7f:58:51:5f:d9:21:2f:c4:61:5c:ef:
         54:ae:f8:57:d0:d6:c1:57:a7:6b:7a:0f:eb:51:0d:7c:43:90:
         b2:92:48:0b:cb:c3:69:b1:0b:f8:c7:19:12:8d:91:3b:30:32:
         e5:bc:b0:04:06:9b:ac:83:f8:1e:57:2c:14:7a:bc:34:9f:e6:
         7e:31:0e:7d:b4:ab:86:ba:98:18:60:ae:5b:bd:33:0a:3d:59:
         43:cb:f4:4a:d5:a0:21:bd:db:e2:77:70:fa:10:f2:94:12:89:
         bc:35:e7:92:90:f3:10:fc:d1:34:1d:ef:50:26:d0:2c:ea:0c:
         72:51:20:39:49:04:8b:d1:3b:31:ae:00:ed:02:2e:6d:10:c2:
         6d:97:be:25:e0:e7:d3:68:91:fa:c8:63:d8:cd:69:e2:aa:0e:
         a7:3e:79:3e:17:5e:f8:29:ff:9c:6f:2e:9e:ca:29:26:91:e8:
         ab:7f:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:05 2025 by rpki-client