Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
File:                     edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json)
Hash identifier:          A//SBW19GNB28mIp2TyQ4bHJYKBsnaRznCkW+t2GSWo=
Subject key identifier:   7A:12:9C:DA:3F:AF:E1:3D:B2:E5:67:8E:25:27:6A:8C:7E:4A:D8:FF
Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB
Certificate issuer:       /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
Manifest number:          8F
Signing time:             Mon 03 Nov 2025 06:31:12 +0000
Manifest this update:     Mon 03 Nov 2025 06:31:12 +0000
Manifest next update:     Mon 10 Nov 2025 06:31:12 +0000
Files and hashes:         1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: DyFqJBhaxa+uNGgTJBKIIo2gosV9C787BvXuRx8j9Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl
                          rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E299A, serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB
        Validity
            Not Before: Nov  3 06:31:12 2025 GMT
            Not After : Nov 10 06:31:12 2025 GMT
        Subject: CN=69084c30-bc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:0f:38:cb:56:b7:ca:cd:a6:88:bd:47:73:
                    ae:0b:df:37:60:71:97:3f:de:7a:cf:05:7a:0d:55:
                    aa:98:55:86:be:cc:95:6f:e0:1b:f4:09:e1:74:f8:
                    b0:40:54:6c:0f:71:63:44:1b:b8:ec:4c:6e:2d:f9:
                    ef:9f:77:4f:60:2b:ec:8e:29:36:97:cb:67:cf:44:
                    0d:d9:6d:93:4c:d3:a4:29:21:9b:ad:0d:5b:e3:99:
                    57:39:22:b7:b1:cc:4a:5b:d9:65:dd:52:6b:71:e0:
                    ac:4d:9e:af:a6:b8:08:ef:68:e7:ac:67:61:3e:2e:
                    36:3a:84:ca:be:cc:17:fa:49:d7:50:44:15:a4:92:
                    96:93:54:43:69:fd:e8:f5:ee:dc:06:33:39:56:17:
                    0d:c2:1c:e8:0e:f8:e2:05:5d:ef:94:48:98:01:d6:
                    78:24:b8:44:5e:ac:d4:2d:04:d3:d9:82:38:29:95:
                    ad:98:cc:d3:83:f6:ee:53:e8:68:47:1a:64:71:8b:
                    cf:58:b2:ef:28:44:86:5a:55:df:e6:71:5e:7b:df:
                    a4:e9:ae:97:41:e4:75:4f:4c:95:d1:06:c8:b0:0d:
                    30:44:0a:57:ca:1d:c4:92:d9:5a:e6:9b:1f:0b:bc:
                    d2:2c:06:55:2a:f1:b8:9e:e0:10:a6:76:c6:32:41:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:9C:DA:3F:AF:E1:3D:B2:E5:67:8E:25:27:6A:8C:7E:4A:D8:FF
            X509v3 Authority Key Identifier:
                keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e7:1f:00:db:f1:f5:9f:a4:be:7c:b8:df:ba:9d:c8:00:c0:
         69:d6:94:16:6c:d2:40:78:79:fd:3f:14:4e:f9:23:00:4b:14:
         08:7d:aa:97:de:d0:4c:b8:a1:08:df:80:d8:b7:44:3f:de:c5:
         5a:05:e7:b5:76:c6:89:9b:1c:c4:9a:df:ed:de:56:a4:64:e4:
         4c:70:ab:af:6c:df:a2:ed:ec:1a:15:9f:f2:d6:dc:f5:a6:3a:
         4a:b3:39:4d:c1:78:96:48:5f:44:27:9d:af:06:b7:36:47:9d:
         8e:32:b7:02:e6:30:19:e7:18:94:eb:2a:1a:73:7d:e5:ba:85:
         19:51:5a:a8:d9:22:92:bd:2e:55:86:72:77:2d:a4:4b:bc:6b:
         08:3a:f7:e3:b5:8c:cc:a6:33:bf:1f:2f:93:22:41:9f:df:68:
         27:c4:e0:dc:cc:68:ea:6c:49:12:3a:b7:ad:c6:73:33:3a:af:
         7f:2f:e5:6a:aa:5d:1b:ff:e8:3b:1d:55:44:27:59:a4:49:74:
         f5:a8:81:9c:08:fe:6c:5a:40:39:82:08:fc:7e:f1:28:b2:d8:
         dd:18:da:76:08:3c:de:29:52:1b:f4:50:3d:99:65:8e:5d:bc:
         4a:7e:b7:da:8d:ed:a8:b5:4a:52:9b:49:05:4c:ab:3d:e0:e4:
         53:5f:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:02:27 2025 by rpki-client