Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File:                     KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier:          Jy2Odz5zPigQ1BPfFAE8wuFRxBo9IUVs+HPvigSpRUo=
Subject key identifier:   E9:FE:F5:B2:3B:B0:FD:87:F6:FA:70:C8:38:F5:DB:50:C6:67:2E:03
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer:       /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial:       07C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number:          07B4
Signing time:             Sun 02 Nov 2025 21:21:13 +0000
Manifest this update:     Sun 02 Nov 2025 21:21:13 +0000
Manifest next update:     Sun 09 Nov 2025 21:21:13 +0000
Files and hashes:         1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: JH3Cf4stBe859yNDjs212rPcnRgQvtNaVUME/bKTJBI=)
                          2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=)
                          3: FF7010DCAE9811F081180758C4F9AE02.roa (hash: dcjW8tb18sprYtlqQuwATsQiWyTAdpnnMw5dfO30D4A=)
                          4: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=)
                          5: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
                          rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
        Validity
            Not Before: Nov  2 21:21:13 2025 GMT
            Not After : Nov  9 21:21:13 2025 GMT
        Subject: CN=6907cb49-f712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:64:4b:5a:04:ad:46:e9:85:8f:8c:a4:b7:
                    e2:a0:02:51:d6:79:4c:b4:0d:e9:75:6a:3e:2a:e2:
                    8f:00:8e:35:0c:32:c5:c6:52:38:63:20:cb:de:24:
                    35:8b:d9:7c:fe:32:df:da:64:f7:29:aa:55:14:2c:
                    05:dd:b1:8b:ee:66:5c:6f:10:16:a8:77:e6:94:13:
                    82:0b:cf:c4:7a:a2:90:29:a4:95:d4:5d:47:d3:88:
                    ae:38:6a:c1:d1:6f:37:f4:e2:7d:47:2e:25:18:90:
                    68:5a:f5:52:9f:c1:1c:5c:b9:d7:d1:55:83:8e:d5:
                    ad:89:9b:83:0b:28:e0:00:f0:9b:d1:5e:39:bd:2e:
                    ea:fd:8d:e5:12:64:e1:61:3f:81:31:74:a9:a3:66:
                    18:d4:6f:e7:75:b2:da:c1:f0:fa:10:89:16:f9:05:
                    bc:93:a1:49:ca:e1:f1:c9:b9:e9:bd:12:3b:3a:8a:
                    67:eb:a6:7a:33:5c:3b:f0:e7:7e:ad:78:42:4f:35:
                    98:4a:d7:d4:95:8e:3c:2f:5e:35:93:d1:72:80:67:
                    10:0b:04:6c:03:20:82:e0:46:e8:05:5a:05:d1:18:
                    a7:69:3c:dd:7a:46:65:84:29:b3:11:cb:85:c2:38:
                    e2:f3:e2:9a:52:50:a1:9e:8d:f8:c1:9e:bd:a5:30:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:F5:B2:3B:B0:FD:87:F6:FA:70:C8:38:F5:DB:50:C6:67:2E:03
            X509v3 Authority Key Identifier:
                keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:1a:49:62:3e:b9:68:73:2b:91:40:21:f2:38:c9:07:96:
         c1:6e:f3:54:5e:3b:a6:9c:d1:a0:33:71:ef:3e:70:b0:c5:b6:
         95:aa:fb:c4:26:43:59:ff:bc:64:f1:49:22:64:cc:6b:6b:41:
         b8:40:18:50:4c:96:5a:87:58:6a:76:c1:fb:11:ec:da:c2:28:
         24:9d:33:5d:d7:2f:cf:9d:c5:bd:ed:48:47:b9:5d:e2:8c:31:
         5f:6f:09:15:a4:76:94:1e:32:ba:42:8b:e0:b5:bc:82:61:09:
         16:40:fe:85:35:c6:2b:5f:99:da:cf:44:2e:fd:cb:ca:ac:0f:
         ee:d0:be:b9:9c:bf:0b:fc:d6:70:ca:0c:3b:59:04:95:8a:81:
         40:2a:65:6c:35:60:e7:b0:da:9b:03:9c:7b:c7:df:23:15:83:
         89:f3:b8:5d:b4:ad:04:89:bb:be:fe:11:63:2f:e8:f8:09:f4:
         e3:08:45:a8:19:6b:06:6e:7c:08:7f:39:df:d5:8e:34:4b:50:
         4e:54:50:ca:d8:ba:9b:8c:d5:a8:9f:99:81:80:0a:08:fe:68:
         80:85:93:8d:58:b5:28:85:9b:82:58:06:e0:66:c4:da:e9:8e:
         4c:08:f5:13:7d:14:78:58:66:62:82:65:0d:a3:c8:b9:67:bd:
         14:1f:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 10:17:59 2025 by rpki-client