Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File:                     P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier:          /4O8ah3AmXCpSexB7p7qUh8ayoepY23EYBCzVluOYs0=
Subject key identifier:   6A:10:A6:4A:AB:F6:AA:0C:A9:40:FD:05:E9:5F:1D:14:F3:19:E3:87
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number:          030F
Signing time:             Thu 23 Oct 2025 02:33:40 +0000
Manifest this update:     Thu 23 Oct 2025 02:33:39 +0000
Manifest next update:     Thu 30 Oct 2025 02:33:39 +0000
Files and hashes:         1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: 7oJRmwvDWC/kdNtOnJJ9kxFbA50AeB14VkRf8SIPZdg=)
                          2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: cwVG6skd3N1RIYsEuEG8iHXyP7x6WSmLSEaSXVtQaYU=)
                          3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: /I66GwSb6b8OKFWqoS4US5PTjIDfLyd4Pk4hVzRDLQU=)
                          4: 6A347A8E6E0711F0B4073D1DC4F9AE02.roa (hash: WLJSC8F2beVFwk5wQF2XhiW8o1W05YWVEl7Z6TS1RpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 02:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Oct 23 02:33:39 2025 GMT
            Not After : Oct 30 02:33:39 2025 GMT
        Subject: CN=68f99403-353e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:e4:b8:25:62:85:a9:95:c1:39:4b:7e:f8:
                    73:fc:0d:f5:cb:56:bc:ba:8e:96:b7:2b:8f:50:32:
                    84:f6:a3:3a:14:fa:09:b9:fb:c5:8c:64:06:90:55:
                    a0:23:5d:dd:82:26:3f:4d:11:65:bf:09:44:44:7a:
                    2d:ae:99:1f:e0:80:92:46:41:fb:1f:70:95:85:3d:
                    8c:18:cb:9c:88:02:f0:62:1e:fd:68:c9:9c:05:6a:
                    94:e2:be:a1:07:ae:f2:c1:66:c6:58:3a:39:b6:e2:
                    f7:f3:8e:4d:9f:8a:06:bc:df:82:2d:8d:9c:f5:70:
                    fe:f9:12:c8:06:37:99:25:16:d6:06:68:ce:61:f6:
                    16:d9:a3:68:dd:80:aa:78:96:33:77:b7:75:9e:6d:
                    d6:5d:2c:59:38:ac:e8:32:a7:54:0b:9a:d4:9f:71:
                    4b:0e:8d:1b:be:ad:d3:c0:50:c3:ec:0e:b0:cf:d7:
                    53:3f:25:54:e1:53:ae:cb:57:e8:77:03:a7:e0:a4:
                    83:dc:0f:ca:d6:69:11:8b:29:ae:4d:94:f9:f5:65:
                    1e:73:11:c5:cb:ae:86:3e:34:09:07:83:b6:e0:07:
                    b3:93:be:5d:3c:41:82:aa:0f:0b:52:c1:8a:5e:9b:
                    5a:83:f4:d3:0a:b3:83:73:43:2b:c5:0b:3d:f0:c9:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:A6:4A:AB:F6:AA:0C:A9:40:FD:05:E9:5F:1D:14:F3:19:E3:87
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1c:2e:26:3a:cb:64:f0:6e:4c:74:25:2c:40:8a:83:1d:ff:
         87:30:fc:31:e8:f9:d7:46:02:fb:58:2e:d3:36:b1:de:dd:96:
         0b:10:24:ea:77:79:f5:88:66:94:cb:22:c2:f1:fc:78:0d:9d:
         69:4b:69:13:a8:cf:cb:cf:ac:08:96:11:49:63:a9:a2:04:77:
         7e:3b:d7:cd:91:fd:ec:99:04:30:c0:c0:ab:d1:89:72:1e:39:
         8a:20:9b:dd:49:15:6b:2d:97:74:9d:9d:9a:cf:e3:8f:17:0b:
         f7:e7:8d:bb:cc:b5:df:45:90:8f:17:be:12:46:56:92:54:c2:
         dd:e0:2f:85:17:f4:73:e0:44:0f:ea:bc:30:4a:67:eb:10:9f:
         60:c7:eb:5e:e0:fc:46:97:ff:6f:9a:d8:b7:92:eb:fb:42:55:
         5c:66:81:fd:c2:f8:e8:34:e9:37:5e:f4:d3:1f:10:4c:3a:7d:
         79:4b:8a:a4:3f:ca:e0:db:b0:01:3f:1c:d2:48:cc:88:cb:3b:
         44:bd:fe:2b:7b:28:63:48:1b:d7:87:eb:e0:5c:5c:98:cc:b8:
         b3:e5:98:47:18:15:52:79:a9:fb:6f:27:84:b8:a1:dc:39:cb:
         45:d1:97:3f:cd:4f:ef:47:ca:6b:ad:a8:59:2b:c0:40:14:be:
         05:28:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:07:45 2025 by rpki-client