Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          ntToKiYYUV3CO9RxJMRUwiqyM58ymeau7GFC3xcBYyY=
Subject key identifier:   A3:3B:EE:F3:9E:FB:1D:80:B5:CF:BC:A8:53:FB:E5:0B:0A:CF:12:D6
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          7B
Signing time:             Tue 07 Oct 2025 07:00:39 +0000
Manifest this update:     Tue 07 Oct 2025 07:00:38 +0000
Manifest next update:     Tue 14 Oct 2025 07:00:38 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: dLL2BdBRmnmwRVqp64HL9sDTiUad8yJE3Kljn5eh7/Q=)
                          2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=)
                          3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=)
                          4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Oct  7 07:00:38 2025 GMT
            Not After : Oct 14 07:00:38 2025 GMT
        Subject: CN=68e4ba96-af83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:8e:80:b5:1c:44:ed:79:79:fa:c2:41:6c:
                    7e:2b:07:c0:32:19:97:18:1e:f3:a9:61:22:81:60:
                    b7:66:1e:00:f7:bf:1e:43:05:d4:22:38:64:88:d8:
                    cf:b4:be:7f:c0:89:ff:e0:e4:33:76:f0:9b:28:1d:
                    93:87:6c:57:a3:fc:1f:11:fd:34:e7:1d:84:1e:bb:
                    f0:ca:bb:0c:19:d7:fd:50:37:24:9c:be:fe:b8:02:
                    b8:17:70:a6:04:49:78:db:bb:2d:43:10:05:a2:be:
                    ba:32:4a:d1:36:1e:8b:15:ee:a3:8c:60:ee:50:6e:
                    5e:e0:8f:10:43:69:81:2c:c5:2b:2c:9a:64:96:5f:
                    f4:c7:9c:80:8d:b3:f4:e8:dd:f9:20:3f:0d:4f:5f:
                    ac:19:9e:29:40:1f:24:00:9d:f7:f1:ff:d5:f5:b7:
                    ad:97:dd:e8:05:d7:81:88:52:bb:34:5d:45:c5:42:
                    f0:73:98:d5:bf:ec:f3:11:79:5d:97:0e:91:75:c6:
                    da:81:9b:b3:0e:f3:16:fd:e3:1f:5a:01:b5:e9:24:
                    22:8e:bb:10:a5:2b:95:f1:fb:d5:59:0f:5d:11:6a:
                    02:d3:ec:52:bd:86:97:3d:2e:d7:b2:6e:75:7e:27:
                    94:f8:bf:8e:f4:be:81:ac:ac:fb:f2:64:fe:be:40:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:EE:F3:9E:FB:1D:80:B5:CF:BC:A8:53:FB:E5:0B:0A:CF:12:D6
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:57:b4:d4:89:4e:1c:62:ef:cc:d1:c5:26:08:04:29:e4:c4:
         3b:8b:1c:fc:dc:d0:a0:c4:58:51:69:09:0f:32:ed:09:9d:e4:
         c1:c6:6d:0c:73:2c:72:b1:a9:94:97:80:d6:72:1b:7c:a9:3d:
         1e:c1:a5:5d:b5:ce:8b:5f:cf:1a:97:c1:c8:4a:cf:5d:e9:a2:
         cf:99:37:0e:c0:a2:ca:07:59:1b:b8:63:e2:d8:b3:a5:af:f0:
         ad:c5:77:24:79:c4:6e:26:24:58:8d:4f:e6:52:9e:03:de:b1:
         d9:ef:c4:37:08:bf:60:af:89:ae:5d:59:75:26:ec:42:b9:b8:
         fd:13:86:61:08:6e:5a:13:c9:ce:4c:e3:04:04:69:f4:38:6e:
         71:70:93:a6:51:98:a9:31:6f:5f:f3:64:cf:87:1c:15:8e:7f:
         42:cf:bb:b4:b1:f9:d8:ad:35:94:0f:0f:f2:27:9b:3c:8f:d0:
         a6:70:15:97:d8:36:3c:3f:11:de:9f:b2:69:d9:cb:21:9d:26:
         22:25:c9:2f:4c:44:c2:fd:34:79:aa:26:c6:d9:18:7d:44:e0:
         1a:d2:5e:df:08:2e:55:0a:0d:80:ee:ed:2d:f1:0c:79:05:63:
         ca:7b:5c:3a:8c:dd:cc:63:8f:f6:6d:6f:19:76:8d:df:b4:23:
         01:57:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:06 2025 by rpki-client