Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File:                     -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier:          ZDdA8aWeoHImwfHuYZtmpft4LVIn2VmJiL5UK1B4WE8=
Subject key identifier:   37:C0:E2:B2:9C:31:A2:24:0A:02:B6:E6:45:47:F6:59:5F:B9:80:CD
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer:       /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number:          58
Signing time:             Mon 03 Nov 2025 07:08:43 +0000
Manifest this update:     Mon 03 Nov 2025 07:08:42 +0000
Manifest next update:     Mon 10 Nov 2025 07:08:42 +0000
Files and hashes:         1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: +ccogcZZhjDvgPHmxfmsTMTPBcUVunBC+iRGQW6J7cQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
        Validity
            Not Before: Nov  3 07:08:42 2025 GMT
            Not After : Nov 10 07:08:42 2025 GMT
        Subject: CN=690854fb-122a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:3d:fd:bf:d3:c2:e7:2b:22:1b:f7:3e:d7:
                    7a:ec:97:c0:19:c2:7e:ba:07:18:41:b7:77:27:4e:
                    7b:df:18:2b:37:44:bd:f2:a5:2d:2e:67:79:93:61:
                    3f:3c:10:12:85:dc:f9:c8:6d:de:8d:be:6f:87:35:
                    b8:6a:29:19:ee:97:05:84:9e:ae:6a:19:6e:1d:af:
                    0e:b8:59:bd:4f:d4:6f:18:5c:20:ff:80:53:4f:1d:
                    36:37:05:6b:be:f9:2b:ce:93:94:2c:69:7a:7d:47:
                    cd:7d:be:a5:21:c9:17:46:2c:a3:63:d4:13:63:9e:
                    51:e3:e4:14:48:12:3c:93:98:2c:6d:0a:21:63:94:
                    81:6a:32:f9:db:01:fd:83:e7:34:bb:20:1c:ad:26:
                    a2:a7:73:ab:49:a5:5b:5e:14:74:ad:9e:3b:c5:00:
                    ef:d6:ed:72:bc:13:3b:bb:c8:42:13:fc:ef:6c:8f:
                    08:fd:f6:78:60:fd:a4:ff:ff:3b:1e:8f:cb:7e:6e:
                    4e:13:23:cd:f1:1e:f7:96:90:ef:e9:69:df:df:c9:
                    be:6d:ee:cd:9a:ce:91:ae:ba:a8:0c:4a:bb:92:7e:
                    6e:3b:f5:e3:dd:53:bc:4e:b6:4f:d1:ee:98:b5:3a:
                    1e:e3:b7:f6:2b:63:23:42:ca:42:32:d8:5c:91:bd:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C0:E2:B2:9C:31:A2:24:0A:02:B6:E6:45:47:F6:59:5F:B9:80:CD
            X509v3 Authority Key Identifier:
                keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:87:42:8e:21:fd:bb:48:f3:d5:28:52:aa:c9:59:78:a8:99:
         ae:28:aa:76:a7:d3:8c:7c:99:65:43:46:20:86:47:a1:fe:bf:
         68:88:28:f0:f6:de:29:65:89:4e:d1:4c:ac:3a:12:90:2a:51:
         af:62:76:fc:12:ba:69:a8:89:c2:56:82:70:80:d3:5d:2d:d2:
         fc:cf:d5:23:27:38:27:55:9f:64:8e:b9:52:c8:30:68:9d:e9:
         56:78:08:11:db:3a:1d:05:32:ee:01:4e:cd:6a:36:0b:56:f0:
         28:c8:af:96:03:ec:9a:0b:02:fc:40:86:b9:00:81:36:59:76:
         3a:7a:2b:25:be:c1:5d:c4:40:31:45:0b:62:8b:39:7c:b3:7c:
         82:6f:4a:bb:89:b4:67:d5:08:55:0d:7c:1f:00:92:e0:ee:64:
         47:a2:a5:87:24:74:89:fd:37:23:3b:1c:fc:ac:4e:e3:2e:c7:
         a0:66:51:4a:10:b3:dc:6d:3d:c1:cb:0c:0a:43:3a:63:43:ad:
         65:86:71:e3:13:ba:95:48:9a:82:6e:d5:fc:c7:a7:a7:f9:58:
         81:8b:19:16:23:70:ab:5b:b3:0f:45:e7:d1:1f:ff:1e:10:09:
         73:ad:34:cd:e9:0b:6c:28:df:0f:14:27:77:a7:e3:5d:6e:5b:
         15:cd:a0:ce
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDIwNDExMC8GA1UEBRMoRkFDNDU1NUZCRTMxQTM4MDk2OTBFRTE4Nzg1RDdBQkJF
MkE3MjdBMzAeFw0yNTExMDMwNzA4NDJaFw0yNTExMTAwNzA4NDJaMBgxFjAUBgNV
BAMTDTY5MDg1NGZiLTEyMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK7D39v9PC5ysiG/c+13rsl8AZwn66BxhBt3cnTnvfGCs3RL3ypS0uZ3mTYT88
EBKF3PnIbd6Nvm+HNbhqKRnulwWEnq5qGW4drw64Wb1P1G8YXCD/gFNPHTY3BWu+
+SvOk5QsaXp9R819vqUhyRdGLKNj1BNjnlHj5BRIEjyTmCxtCiFjlIFqMvnbAf2D
5zS7IBytJqKnc6tJpVteFHStnjvFAO/W7XK8Ezu7yEIT/O9sjwj99nhg/aT//zse
j8t+bk4TI83xHveWkO/pad/fyb5t7s2azpGuuqgMSruSfm479ePdU7xOtk/R7pi1
Oh7jt/YrYyNCykIy2FyRvTa1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN8Dispwx
oiQKArbmRUf2WV+5gM0wHwYDVR0jBBgwFoAU+sRVX74xo4CWkO4YeF16u+KnJ6Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MjA0LzRDNUQyRURFMzAw
OTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXNSVlg3NHhvNENXa080WWVGMTZ1LUtuSjZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
MjA0LzRDNUQyRURFMzAwOTExRjBBMEFBN0QzREM0RjlBRTAyLy1zUlZYNzR4bzRD
V2tPNFllRjE2dS1Lbko2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADWHQo4h/btI89UoUqrJWXioma4oqnan04x8mWVDRiCGR6H+v2iIKPD2
3illiU7RTKw6EpAqUa9idvwSummoicJWgnCA010t0vzP1SMnOCdVn2SOuVLIMGid
6VZ4CBHbOh0FMu4BTs1qNgtW8CjIr5YD7JoLAvxAhrkAgTZZdjp6KyW+wV3EQDFF
C2KLOXyzfIJvSruJtGfVCFUNfB8AkuDuZEeipYckdIn9NyM7HPysTuMux6BmUUoQ
s9xtPcHLDApDOmNDrWWGceMTupVImoJu1fzHp6f5WIGLGRYjcKtbsw9F59Ef/x4Q
CXOtNM3pC2wo3w8UJ3en411uWxXNoM4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:04:49 2025 by rpki-client