Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          6MgKADokQcgzSFPN3W7NhTCfo46zRC5otQ+7LIiy34c=
Subject key identifier:   C7:0D:76:DA:9E:54:E7:0C:A5:E5:07:63:B0:F0:B7:80:1A:91:EA:44
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          0136
Signing time:             Mon 27 Oct 2025 06:32:19 +0000
Manifest this update:     Mon 27 Oct 2025 06:32:18 +0000
Manifest next update:     Mon 03 Nov 2025 06:32:18 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: Ifdw2p7hdFANUhdVbLkfN+/DrCCSrt3y/U1rXMCn2H0=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 06:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Oct 27 06:32:18 2025 GMT
            Not After : Nov  3 06:32:18 2025 GMT
        Subject: CN=68ff11f3-611a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:89:47:2a:28:16:8c:c7:03:14:2e:64:a0:
                    85:a2:28:d9:9d:c6:8f:f0:b8:3b:94:c6:57:56:03:
                    24:30:31:33:81:8b:fc:bf:55:3d:9a:d7:3c:86:f9:
                    e6:32:a9:a6:66:5f:53:4f:92:13:8b:42:17:b3:cd:
                    b2:a5:8d:b4:50:d6:7b:35:66:a2:f4:18:dd:38:a5:
                    1b:47:f3:fd:e9:a6:12:1d:2b:25:4e:45:a0:3a:42:
                    e1:60:50:71:e6:97:18:6e:86:50:90:e1:28:c3:96:
                    e8:d9:b3:03:f4:3a:a4:b2:51:36:96:65:ce:51:b0:
                    22:24:d5:53:68:c6:66:bc:ad:06:eb:d5:cf:46:cf:
                    f1:34:a0:e8:99:17:94:82:19:88:b1:a7:aa:1f:bb:
                    be:9f:36:1c:e3:14:f8:be:64:55:c6:c6:35:ea:91:
                    53:c0:3d:47:e5:76:7f:95:16:94:5a:f4:b0:3a:77:
                    3f:0d:e0:6a:65:04:02:a6:f3:84:a5:f1:69:b4:8d:
                    08:12:6b:75:69:96:e2:4a:e2:32:b7:ff:62:f0:57:
                    fe:7f:b0:d4:cc:5f:c4:ae:61:4d:0e:56:44:0f:9c:
                    3f:c4:56:62:4c:96:b3:ab:ac:e7:fd:3a:9c:b5:48:
                    7f:14:26:47:f8:2e:2c:75:01:70:5b:04:fb:10:7c:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:76:DA:9E:54:E7:0C:A5:E5:07:63:B0:F0:B7:80:1A:91:EA:44
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:fa:e3:09:bb:79:d3:c5:cf:8e:f9:c3:a6:9b:ab:4f:2a:
         f4:b6:09:36:e2:81:5d:53:06:22:54:b7:5f:b3:19:a8:c6:98:
         22:6b:89:a8:ed:1a:b3:72:88:ef:09:78:d3:95:ef:28:94:2a:
         5d:fe:cd:58:60:12:d9:f8:98:c2:04:79:32:ab:0c:f7:3d:62:
         a6:79:6b:b2:cc:6a:cc:1c:91:67:0a:84:1b:0d:7b:f3:1a:8b:
         57:b2:64:63:4c:9b:92:b4:a3:eb:1b:4d:ff:5e:64:37:9a:51:
         9b:ea:8c:8d:a4:cb:15:b7:6c:0b:31:27:f0:2e:cb:b4:80:95:
         c3:61:28:41:0a:e5:fd:0a:6d:31:d7:ad:58:95:b8:c5:cf:ae:
         63:eb:94:83:ef:54:3e:17:3b:a5:2f:63:9b:37:78:45:d1:aa:
         df:e6:f9:ce:2b:8a:fd:25:da:b5:89:a1:e4:4d:fd:49:8b:d0:
         72:fa:03:b4:3d:27:3a:46:9e:fe:7c:94:91:fc:e7:ad:7d:c0:
         bb:0d:4b:22:40:fc:8c:b0:fc:d8:21:f8:e4:74:36:1e:c7:1d:
         4d:76:db:e5:6d:b0:00:f1:75:b8:d2:7d:92:90:23:60:7d:fa:
         3b:df:3a:24:7e:07:a9:f4:b7:c1:a2:df:48:a5:d0:69:de:6f:
         41:4f:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:15:33 2025 by rpki-client