Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
File:                     _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json)
Hash identifier:          dEkz2E0GzvOE6ibgV+VlntfZ6NU4Xru09MmvO24W65I=
Subject key identifier:   8D:4A:63:8C:B6:2F:98:02:8D:CE:08:CB:1E:B9:AC:3D:E2:36:74:14
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
Manifest number:          0217
Signing time:             Mon 03 Nov 2025 02:11:02 +0000
Manifest this update:     Mon 03 Nov 2025 02:11:02 +0000
Manifest next update:     Mon 10 Nov 2025 02:11:02 +0000
Files and hashes:         1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: 60sdHBfq+Q3DLgs7niE0+W3cfdRKgzaYO/H0K1Dmehw=)
                          2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: 24GbMLp8DMTZ3h6VXw3inwkNu/B522DsUckUsbm7BTg=)
                          3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: onrdwOUBSMf30DMB2gEtxkD8C7GCfvol8JynThaYBqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
                          rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369, serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Nov  3 02:11:02 2025 GMT
            Not After : Nov 10 02:11:02 2025 GMT
        Subject: CN=69080f36-43e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:7e:b2:fc:56:dc:05:7a:54:fc:c1:74:cc:
                    15:9d:a4:42:1a:48:73:e0:06:63:c4:87:7b:a1:f5:
                    67:2e:0b:36:21:d2:6c:8a:cf:ea:c6:75:f0:1a:00:
                    76:d8:91:8d:38:81:50:30:a0:1d:51:75:b6:03:eb:
                    56:a8:48:0f:8c:a7:b0:20:d2:5a:e1:e2:f8:83:9d:
                    00:95:a4:0d:c6:c2:db:6c:fc:19:cb:21:c1:a5:83:
                    62:ce:d1:38:37:9d:40:e4:24:be:bc:52:a2:a8:44:
                    90:46:56:b9:14:b4:f2:72:23:38:a5:a0:d1:9a:b2:
                    62:cd:53:dd:29:0c:f2:d7:de:a5:f7:2f:82:86:bd:
                    68:33:70:51:a9:5b:7b:8d:be:9f:4e:53:fa:9d:c0:
                    2b:32:3b:88:51:88:d5:a2:71:f5:f1:e6:45:cd:66:
                    19:2f:57:6b:85:bd:78:38:ef:2e:49:e3:39:a6:59:
                    e2:53:cc:dd:65:92:b5:ab:9d:d9:f0:63:cf:36:99:
                    54:4e:48:46:7e:b1:20:3b:55:95:3e:73:74:2a:5c:
                    8f:13:55:d9:08:c7:d4:e9:5e:7d:19:fd:1a:4a:33:
                    d4:f9:77:9b:17:c0:c9:5a:1f:ea:64:37:42:c7:01:
                    23:be:ad:a3:4d:1d:55:6d:72:34:d5:0c:52:18:54:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4A:63:8C:B6:2F:98:02:8D:CE:08:CB:1E:B9:AC:3D:E2:36:74:14
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:89:49:2e:bc:0a:62:44:b6:c7:b8:84:55:bf:15:3f:d8:3d:
         9d:a4:02:8a:f2:65:29:4e:1a:5b:99:0c:f9:8b:cf:fd:6b:7c:
         45:ab:70:49:f9:df:4f:58:7f:14:7f:35:a4:b2:b6:11:fd:e6:
         f3:40:22:0b:80:ac:43:c7:1a:36:61:17:77:64:61:e3:54:a6:
         5b:56:ce:27:85:c4:77:86:f2:9e:6b:02:c1:67:fc:d1:4d:2e:
         f2:c3:de:a5:2f:db:9a:8d:a4:84:9a:07:57:3c:0b:86:48:29:
         93:57:35:c2:7e:a3:b1:d0:06:1f:28:03:f2:f1:91:6e:5b:a2:
         f6:29:60:4d:24:e0:c7:ed:b5:6a:cd:43:e2:92:3b:05:63:b3:
         e1:10:5e:e9:ae:29:91:90:9b:e2:59:df:0e:30:95:6a:55:1f:
         9e:87:ac:2b:2f:e6:64:ad:c6:53:ef:5e:1f:94:47:7c:20:0b:
         d0:a6:63:5a:ba:aa:db:ea:66:9f:ec:bc:83:63:1b:ee:fc:0d:
         26:37:66:76:1e:44:1e:f9:13:13:67:c2:32:02:b9:fe:b5:2e:
         65:8e:ed:2f:bd:8d:1a:e2:54:a1:36:a4:27:29:dd:ce:d7:43:
         0a:32:ea:14:11:ec:39:d1:91:df:0a:48:7e:a1:72:f1:4f:a1:
         38:fb:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:29 2025 by rpki-client