Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
File:                     1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json)
Hash identifier:          77TTfs3+2abq4t1zQDOn3iZhiTEBpCtlQuJALDriXAc=
Subject key identifier:   53:2A:12:48:5A:03:D6:DC:AF:F0:AC:68:2D:B8:02:D7:89:DE:C2:B2
Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99
Certificate issuer:       /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
Manifest number:          0198
Signing time:             Wed 05 Nov 2025 03:31:44 +0000
Manifest this update:     Wed 05 Nov 2025 03:31:44 +0000
Manifest next update:     Wed 12 Nov 2025 03:31:44 +0000
Files and hashes:         1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: PIXR0cKhpoD2RuEJTb0btU+1PWril6aiuTCvo90O47Q=)
                          2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: CcqSmSm4lCpqTwyfkGRpqe+7Fg7ZeSpS7rkbNOQEqeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl
                          rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA9E, serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
        Validity
            Not Before: Nov  5 03:31:44 2025 GMT
            Not After : Nov 12 03:31:44 2025 GMT
        Subject: CN=690ac520-559e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:38:2d:9c:a3:ad:38:dc:75:98:79:25:3c:
                    cd:f1:87:77:5f:98:25:8c:26:3a:3d:04:c9:7e:60:
                    62:dc:a6:1e:2a:01:a7:fa:cf:8c:64:d8:64:a3:8a:
                    a9:a6:33:6c:d5:57:b1:81:3e:f4:fc:61:17:d5:c7:
                    3c:b8:97:2d:17:cf:c1:91:1f:fc:77:f3:55:0e:14:
                    d4:75:4c:ee:7c:52:2a:70:c2:13:fd:cf:80:42:c3:
                    45:0a:7a:1e:0e:3e:f1:87:98:72:af:c2:11:ad:f2:
                    1d:aa:f3:63:43:89:b9:24:40:d4:a6:0c:32:6e:d4:
                    8f:78:bd:a7:69:d4:3a:77:57:4a:3e:1d:88:ea:af:
                    71:bf:a2:01:ff:0b:0a:89:5c:40:70:a2:ae:56:34:
                    d5:f6:6c:28:f7:65:06:85:af:fc:7f:e0:ac:d7:e5:
                    9a:86:55:2c:a9:38:96:c4:c0:76:7c:18:c6:0e:15:
                    a2:44:e9:1d:17:82:43:90:34:b6:04:fc:0b:56:fa:
                    fb:a7:53:6e:18:1b:d4:26:a3:b8:9e:44:9d:34:d0:
                    ce:4a:68:5b:07:ef:58:ff:21:f2:da:02:10:df:71:
                    75:82:62:5a:e7:61:42:61:28:24:6d:85:59:c3:ef:
                    ea:b2:c7:ae:e9:d9:b9:72:a4:b0:a8:da:3d:1d:3f:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:12:48:5A:03:D6:DC:AF:F0:AC:68:2D:B8:02:D7:89:DE:C2:B2
            X509v3 Authority Key Identifier:
                keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:ce:2e:ef:c7:42:80:ff:40:a5:0d:12:c0:ce:a2:d8:40:
         67:3e:99:2e:79:8f:23:d9:09:35:9c:e8:73:9f:49:7d:de:4e:
         d3:6a:a1:9b:33:2b:c7:9b:28:8f:e9:b0:7d:00:81:81:a1:71:
         ff:a5:64:a7:b3:34:fb:a3:75:c7:d4:78:ce:84:49:1a:8c:c9:
         d8:05:e9:bb:c1:ee:92:cf:9a:bb:06:b9:f2:34:94:8a:f9:00:
         50:1c:25:22:37:4a:82:ab:1a:72:de:04:68:2f:c0:07:f1:ae:
         ab:03:90:9d:6c:31:e2:fd:d5:1a:60:fd:bc:b5:e3:4c:f8:5a:
         f1:4e:cb:b7:30:36:ad:d1:79:c9:85:b5:5b:b2:3e:ef:d1:69:
         0b:c9:93:8c:df:87:83:24:ca:f2:d8:40:c9:bf:dc:78:10:c9:
         fa:75:b0:cd:07:de:e0:58:df:c9:d5:c7:fe:ca:7e:b9:d1:73:
         25:00:6e:8a:a4:1e:76:a2:e6:05:df:9e:94:7b:bd:de:b0:77:
         af:6b:a4:f0:51:8d:ab:01:f8:6c:b3:43:ff:2d:60:0e:a8:ab:
         2f:e4:ab:0a:c0:1f:5b:fc:8a:e4:d6:e6:b6:fa:99:7d:72:d7:
         e4:11:f9:fe:3e:d1:25:5f:a4:de:dd:07:88:bc:64:6c:00:e5:
         06:4d:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:04 2025 by rpki-client