Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          oALZFAl+VRGs/gGDvn1Yt9nqUNrxyT7rMZurBaPLCSs=
Subject key identifier:   71:D7:74:A0:F8:C6:DA:C9:F8:A4:B0:4A:A2:A6:BE:61:EA:6F:A2:25
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          04E6
Signing time:             Sat 11 Oct 2025 01:51:28 +0000
Manifest this update:     Sat 11 Oct 2025 01:51:27 +0000
Manifest next update:     Sat 18 Oct 2025 01:51:27 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: 9nALmo1bQHZxKAN9YDNSDvlZMZ7Z8q6lT9CmxTzM55I=)
                          2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 8TfJONOc+HpxVfcksRvftex3Ciph8ayPUCuCYT6BQmw=)
                          3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: 52o4HNktFr0bXb5sV5nUe5yHOLWbl8q2+aJRz9GqXmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 01:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Oct 11 01:51:27 2025 GMT
            Not After : Oct 18 01:51:27 2025 GMT
        Subject: CN=68e9b820-5b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:ff:33:ef:c5:c0:0b:00:99:74:d5:4a:0c:
                    45:3d:e2:e2:86:dc:3d:87:ed:12:d4:14:e7:0a:d0:
                    d4:df:ff:d6:54:ab:66:c7:d6:2d:2b:9f:f9:2f:56:
                    a9:50:82:d7:9a:81:55:fb:be:81:62:0d:c6:37:6b:
                    a5:56:4d:69:18:d8:04:a4:22:cd:84:0e:0a:37:d0:
                    ba:ea:89:e8:4d:cd:ab:5c:69:72:c0:20:17:34:82:
                    ea:63:bc:bd:28:b3:20:74:3f:cc:c2:cd:a8:16:1d:
                    98:22:28:94:2b:3a:3a:1f:af:c7:a1:fd:9d:3c:80:
                    08:db:a0:d9:1b:58:a8:7a:40:68:72:01:4b:c2:b5:
                    ed:47:75:fa:34:9a:38:a1:74:9e:50:65:95:fd:10:
                    f0:9e:99:c8:51:5a:85:c6:e9:39:0d:e2:c5:13:79:
                    11:52:ea:10:71:6f:dc:cb:82:79:1d:9f:ae:a8:da:
                    c3:a0:be:21:d6:99:a6:92:8a:13:5c:83:cd:42:07:
                    e1:e2:47:e9:d1:54:ef:22:34:55:09:ec:b8:0a:c5:
                    c8:be:28:1a:31:a2:97:91:6c:23:ff:ab:8a:ff:b3:
                    da:49:9f:5f:e4:eb:07:a7:9a:8a:6b:c9:3d:18:bf:
                    e2:94:f4:f8:47:c2:8e:4f:17:5d:4c:d2:55:95:23:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D7:74:A0:F8:C6:DA:C9:F8:A4:B0:4A:A2:A6:BE:61:EA:6F:A2:25
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:de:1e:66:8e:1f:ab:98:ec:ed:44:f4:c4:79:88:51:29:65:
         ff:20:0f:a1:20:45:f1:46:83:d1:c2:0b:ab:82:3b:22:cd:57:
         0f:c3:98:14:86:1d:72:ad:58:1d:3d:01:e3:56:2e:65:50:4a:
         cb:26:f4:0b:51:ea:ff:da:78:2c:73:d3:f8:84:26:4b:31:d6:
         63:cb:4e:6d:d7:6d:df:46:32:d1:2e:ed:b0:57:f0:da:3f:bd:
         b7:39:5c:0d:cf:d9:78:b3:ed:a2:d3:95:c9:4e:e0:df:d3:d2:
         76:01:78:d0:55:5c:c3:66:d3:ec:d7:70:d9:51:54:03:da:4b:
         cd:ac:49:dd:07:9a:9c:e2:ec:27:77:26:0b:9e:fc:dd:c0:19:
         49:8f:8f:f0:00:b0:a7:96:39:25:9a:7d:4b:ba:ce:b9:ac:74:
         d4:df:c5:d6:d5:56:04:41:69:ac:15:3c:46:6b:ee:85:82:66:
         c4:da:8b:1b:4f:70:7c:fd:35:3d:2f:b9:ce:8c:b2:65:28:0f:
         ff:da:ca:d9:41:39:d2:7d:dd:e7:b2:dd:cf:e3:16:d5:ce:e6:
         51:9b:35:13:87:8f:28:c8:2d:ba:3e:ce:eb:76:fe:6a:b2:3b:
         e8:ec:a6:d3:02:44:a5:81:33:fa:b1:bb:ae:d8:9a:6f:4d:cb:
         73:78:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:45:42 2025 by rpki-client