Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File:                     42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier:          Pd9mvANZPT6XHxYQzlHBI5jjY+yZ9tSHBHzqKVXuMME=
Subject key identifier:   F5:54:A3:48:60:96:38:22:55:E6:C5:45:7E:27:0D:27:2B:91:56:BE
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer:       /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number:          7F
Signing time:             Wed 29 Oct 2025 06:33:32 +0000
Manifest this update:     Wed 29 Oct 2025 06:33:31 +0000
Manifest next update:     Wed 05 Nov 2025 06:33:31 +0000
Files and hashes:         1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: UIu1lnGK15SRU+8NCXLGYckv5gooyhUIaydt0TkriDI=)
                          2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
                          rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 06:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
        Validity
            Not Before: Oct 29 06:33:31 2025 GMT
            Not After : Nov  5 06:33:31 2025 GMT
        Subject: CN=6901b53c-840a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:46:2f:c7:69:f5:cd:58:d4:58:a9:4a:e0:
                    85:22:d3:4d:19:1b:5d:5e:77:46:b2:ac:17:f2:01:
                    7e:c5:9e:6c:8c:65:6c:97:c4:af:bc:71:b5:ea:ce:
                    96:5e:fe:ab:f4:f4:92:64:fb:1a:04:9d:a3:ee:e1:
                    90:d8:93:00:fa:aa:47:a8:5a:5c:32:4c:27:6b:cb:
                    c7:63:77:4f:ea:2e:4c:f2:54:16:41:36:10:a4:12:
                    9d:95:b5:b4:1f:12:4e:8a:ab:62:82:9c:ad:ad:6c:
                    84:a6:d0:82:69:11:2e:56:cb:98:a3:d0:cb:90:9b:
                    55:cf:68:68:64:ab:12:26:c6:62:12:5a:28:83:f3:
                    41:65:80:6a:78:bf:f6:94:66:ad:62:1f:d3:19:17:
                    8d:c8:f4:a5:32:69:83:b4:6a:66:d7:04:f0:1f:ba:
                    82:68:42:39:2d:3e:aa:68:b4:af:11:fe:f6:73:4f:
                    26:84:9c:ae:a2:ca:4f:a0:00:d4:67:12:e8:d3:5e:
                    27:42:91:0e:01:17:50:6e:d6:33:48:6e:e0:1b:c7:
                    2c:d0:92:00:aa:d1:58:80:bb:f8:27:f1:c0:99:70:
                    96:8f:cc:5d:73:e6:9a:3f:e4:d5:21:d5:44:68:1f:
                    57:48:0c:a0:88:57:ea:eb:22:05:1c:cb:77:8d:23:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:A3:48:60:96:38:22:55:E6:C5:45:7E:27:0D:27:2B:91:56:BE
            X509v3 Authority Key Identifier:
                keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:66:fd:92:43:40:36:ce:3f:ca:14:0c:c5:d4:0a:96:d4:
         1e:e3:40:83:b8:da:9e:01:3a:6d:1f:e2:12:40:bc:d0:ce:29:
         e9:d6:fa:87:3b:e6:8e:c1:2a:85:47:c1:be:07:dc:08:2d:3e:
         03:40:fb:7d:4e:ed:f7:17:87:d8:21:d5:e1:09:cd:8c:15:b4:
         88:f6:8d:a2:6f:d7:91:78:31:3a:7d:e9:35:ae:be:31:22:36:
         1c:4b:a1:85:44:05:c2:de:70:f0:da:59:4a:3c:2c:a2:4e:45:
         eb:c6:62:30:eb:ca:bd:59:04:d9:03:20:41:91:4d:65:32:b3:
         71:e1:fa:a7:74:a1:37:f8:41:69:c1:d7:10:1c:39:c9:d2:33:
         64:94:bd:c4:26:de:3d:1d:3e:40:43:22:13:9a:be:04:ea:20:
         a0:30:3a:a8:e4:79:eb:d2:71:f4:46:d1:66:0f:3d:50:73:1b:
         fb:04:21:f6:27:4a:fc:12:cc:40:84:6b:4d:da:1a:31:e5:7a:
         96:72:97:4f:e2:68:a2:89:c3:7d:9a:68:95:4c:c0:f6:30:4b:
         9b:da:1c:cd:62:41:0b:a9:1c:b8:4c:3d:e9:a8:e6:7b:57:56:
         d9:b7:0a:12:dd:3f:9c:62:c4:47:f3:7a:eb:b7:c5:43:2d:b8:
         89:c2:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:18:05 2025 by rpki-client