Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File:                     xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier:          0JuUqwA4Hobzfo3/Wz55CqK97YXs7xcA4Yq2nKoii8U=
Subject key identifier:   B5:6A:E4:15:D9:CF:88:67:EA:60:32:3C:14:B9:7C:F8:52:C1:ED:C3
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       34DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number:          34DC
Signing time:             Sun 16 Nov 2025 14:59:38 +0000
Manifest this update:     Sun 16 Nov 2025 14:59:38 +0000
Manifest next update:     Sun 23 Nov 2025 14:59:38 +0000
Files and hashes:         1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: 4jQRRYc1ln1DoGZ7Cjc13fJP1lypWZqgG+kB4t0PJow=)
                          2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: Q9ud5C2PueaEyRNijwK1h4U4bisaCbUXdttrkniJbss=)
                          3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: owjQd/y0K+1QjQbktYj1tVC3ALtGMr1qBu3Du7tFJyA=)
                          4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: J503cZhaiiJSxMHav6qZ788g7bhn3L0xd5BjwqEz4mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Nov 2025 14:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13535 (0x34df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Nov 16 14:59:38 2025 GMT
            Not After : Nov 23 14:59:38 2025 GMT
        Subject: CN=6919e6da-128b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:8a:11:91:77:27:e9:12:4d:84:56:67:56:
                    05:a0:bf:5e:8c:f3:78:d2:bc:f4:db:0f:6f:42:44:
                    d2:32:51:0b:61:f9:86:60:7b:f7:cf:ba:c3:c9:48:
                    a9:99:fa:55:ce:44:29:0b:df:06:17:55:bd:56:81:
                    e8:c5:9a:6f:56:47:56:06:43:67:15:ec:ed:d3:be:
                    98:e1:3b:ab:26:bc:b0:bb:04:d7:86:99:5d:6a:09:
                    a6:15:25:b0:31:95:75:6b:00:99:c8:13:1e:f4:e0:
                    84:38:15:6e:6c:2f:3e:47:bf:09:61:eb:ad:2f:b2:
                    49:d8:7a:b1:f2:77:23:5f:48:00:93:b4:19:28:fe:
                    29:22:8c:de:d0:46:72:18:cc:f7:38:5b:70:46:ec:
                    90:b2:0b:6f:92:02:ef:f5:bd:27:e4:40:d3:37:c6:
                    e6:7a:bb:59:65:54:79:e4:3d:0b:e0:c0:25:d8:55:
                    82:55:0c:87:3f:60:c7:78:47:19:26:60:a7:20:60:
                    c1:20:53:87:50:8d:63:fd:10:49:a6:90:0e:6d:65:
                    80:37:71:f4:d4:ee:59:a5:d4:ad:44:b9:f1:08:50:
                    ad:1e:c0:88:1b:89:14:aa:72:0f:48:84:5c:ee:49:
                    ae:f2:a5:be:5c:8c:a2:70:91:28:15:8d:69:8e:36:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:E4:15:D9:CF:88:67:EA:60:32:3C:14:B9:7C:F8:52:C1:ED:C3
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:96:4d:f3:f4:6d:51:cc:f3:90:95:68:09:fd:ce:97:47:
         7d:20:10:14:1c:bc:0e:69:bc:1a:42:3b:d6:45:38:37:d2:1b:
         be:6e:0c:cb:1d:01:81:03:12:7c:15:ec:56:a1:96:19:be:34:
         7a:e0:11:43:2a:85:ca:80:3a:8f:46:36:3e:e3:fd:37:2b:20:
         8e:96:cb:bc:9b:bc:24:28:33:51:18:bc:2d:d1:98:98:bd:1a:
         e3:79:1c:8b:e1:44:6e:60:0e:08:d7:98:27:93:96:f3:ea:7b:
         c6:7c:8e:1c:56:8f:9a:67:92:70:48:26:4f:68:e0:28:35:20:
         99:45:c4:ac:51:3b:2f:ad:a9:14:79:f9:32:1d:29:ad:e0:52:
         8e:47:77:31:65:1f:36:03:db:4f:e6:1f:b5:2b:64:62:37:22:
         04:35:91:11:87:ba:4d:05:c7:cc:72:7d:3a:9d:c6:e4:03:cd:
         98:b9:33:19:ed:e9:31:24:a7:8f:f4:73:9d:bf:69:56:97:0c:
         a8:3a:dd:7d:e8:e3:38:29:96:80:6d:84:c7:cc:8c:62:75:8a:
         ed:80:9b:83:b7:17:49:95:c1:47:9d:74:00:17:8b:db:ba:49:
         e3:36:d5:77:4c:bc:50:5d:de:80:02:d6:9a:47:88:bf:bd:ed:
         09:4a:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:02:49 2025 by rpki-client