Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
File:                     SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft (raw, json)
Hash identifier:          jSKjeZXPjyKeVlsWpGiApOcNtcli/42KNYpZSaRNGQM=
Subject key identifier:   72:52:C2:E1:67:5E:31:71:8D:D4:32:6F:7D:4F:D3:84:1C:F0:91:AB
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0E67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
Manifest number:          0E51
Signing time:             Sun 02 Nov 2025 17:46:41 +0000
Manifest this update:     Sun 02 Nov 2025 17:46:41 +0000
Manifest next update:     Sun 09 Nov 2025 17:46:41 +0000
Files and hashes:         1: SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl (hash: Y6uEe39RAl2d2MxOQ4g88DVdLkpNmDGFK2nhj+OsCj0=)
                          2: 28BC5490487F11EAB8C7545FC4F9AE02.roa (hash: S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=)
                          3: AE14DBAA997711EAB12AD74CC4F9AE02.roa (hash: iA04EyF3JdExva3/idlBuWytZyJRag874pO7pySXwJg=)
                          4: DB87E692ADB211E99AAEE879C4F9AE02.roa (hash: 2kXWl4Cs1R/aPiAdtvMJLAsl+3ClYTwwDDVh+n0Dv2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3687 (0xe67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Nov  2 17:46:41 2025 GMT
            Not After : Nov  9 17:46:41 2025 GMT
        Subject: CN=69079901-2f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:64:c0:89:f4:1c:95:9c:66:4b:80:8c:4d:
                    8a:a5:d4:9e:4b:60:64:12:82:49:a7:df:18:39:e1:
                    a1:10:03:cd:29:2b:40:6e:92:d0:06:41:29:58:8c:
                    db:ed:f3:f0:ba:f8:5c:e9:d0:ab:31:0d:c8:55:e9:
                    8c:c8:bf:ab:70:a1:d4:a1:45:58:a0:7d:2f:5c:8e:
                    bb:5c:cd:09:4f:17:37:0a:a8:08:88:11:13:d5:5b:
                    26:8b:07:0f:08:e9:e5:af:78:9a:0c:4d:1e:01:12:
                    da:53:c8:f2:37:b1:4a:5b:ef:74:64:30:fa:9f:fa:
                    5d:71:e5:1f:3d:64:65:d0:ba:10:fa:d6:ad:d6:65:
                    9e:a8:18:ba:1f:89:1b:c5:72:4b:93:71:7c:a1:03:
                    26:6c:41:7d:87:67:ae:4a:a4:2b:10:4d:59:aa:40:
                    33:14:d6:30:75:8a:8a:f5:aa:81:b4:a6:2c:55:1e:
                    d7:1d:b6:d9:13:4a:8b:3e:68:1b:8e:86:c5:5d:ef:
                    6e:aa:8a:59:65:e2:3e:8f:77:93:25:99:6c:99:52:
                    71:6f:51:ba:b1:65:20:5d:79:04:0a:ee:3d:2b:7c:
                    d1:7b:9e:01:ef:b1:97:9a:c4:b6:3d:50:ed:a6:a4:
                    c9:f0:f3:0e:83:b6:6a:b2:70:59:87:a2:2d:ef:10:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:52:C2:E1:67:5E:31:71:8D:D4:32:6F:7D:4F:D3:84:1C:F0:91:AB
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:79:03:7b:51:9a:ec:19:f8:3b:75:47:0f:fd:84:19:93:7d:
         17:df:9b:b2:d6:1f:56:6f:80:b2:b0:c5:fe:a6:11:d6:88:9e:
         a1:2c:42:91:10:c7:4e:7f:d8:d9:12:69:4e:a8:04:c0:39:56:
         8d:03:cf:0e:0c:bd:41:2c:1c:a3:3a:cf:b1:96:6f:95:95:58:
         dc:f4:4a:03:45:2d:72:c4:8c:d1:07:f6:4f:71:f6:f8:32:40:
         10:fe:83:e1:09:c9:57:3a:37:13:9c:70:5f:9a:c9:0a:a2:b1:
         b7:0f:bd:52:4e:2a:e8:9a:2a:ae:9d:de:14:09:86:20:43:58:
         11:9c:e6:1a:20:1a:79:47:35:d3:64:b5:5c:56:08:c0:de:6f:
         13:42:76:f6:bc:1b:e0:9b:03:a7:62:2c:3e:1d:72:0e:7f:73:
         93:4a:b0:24:2c:f2:b7:4e:3a:bb:df:45:f4:fb:ab:5c:a8:70:
         68:58:80:42:6c:c3:b7:88:15:5e:77:85:57:eb:da:2c:4f:04:
         af:57:02:e5:2b:e2:f2:bd:9f:09:d7:93:e4:32:94:cf:03:b2:
         61:dd:7d:db:6c:de:fe:44:22:bb:8a:86:14:59:00:27:07:62:
         7f:af:3b:e9:c2:84:6e:d2:bf:ea:44:c8:44:1e:fe:6e:14:4d:
         c5:6d:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:00 2025 by rpki-client