Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          zPRkBM+LiNqHwIx9W8RlD+K9xfh4eLRY7YYRl34CvVM=
Subject key identifier:   87:3F:5D:53:B8:77:E8:BD:8F:F6:2C:28:57:50:56:E4:C5:E2:9A:EF
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          012D
Signing time:             Mon 03 Nov 2025 04:36:31 +0000
Manifest this update:     Mon 03 Nov 2025 04:36:31 +0000
Manifest next update:     Mon 10 Nov 2025 04:36:31 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: w+FnX5hAxEXgF9tVxHuJzOm4DCWAA/vYtf2aH2AIcG8=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Nov  3 04:36:31 2025 GMT
            Not After : Nov 10 04:36:31 2025 GMT
        Subject: CN=6908314f-b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:1f:70:27:e4:e9:51:32:d5:e5:a6:34:01:
                    3a:b8:ec:96:77:4d:8d:92:d9:55:d3:4a:fc:76:b6:
                    b4:f5:37:df:5b:e9:1d:d9:d9:6f:c9:c6:9f:b2:05:
                    e1:64:1e:b8:d2:56:3c:df:0b:61:04:c8:e1:f0:3d:
                    d9:50:da:85:df:6f:8e:56:8d:c0:7c:c7:0b:d3:2a:
                    46:a1:ee:6e:fd:78:c5:e9:38:85:82:a8:d2:4f:63:
                    5b:dc:d1:73:09:15:61:73:06:09:e2:fa:05:ad:13:
                    f0:c7:02:6c:36:cc:0d:36:1f:b8:18:77:8d:97:a2:
                    fa:a5:f6:b7:af:3b:f5:ee:3e:6c:7c:ca:4c:f4:5b:
                    9a:9c:b1:d6:b8:9a:cd:83:de:61:b0:8d:58:cb:97:
                    0e:e9:f7:ca:54:ac:23:3b:18:e7:37:c2:25:3e:8c:
                    88:50:d1:8d:ed:3c:6f:db:5b:81:64:83:30:4f:98:
                    22:68:f8:c5:86:84:b5:92:ef:24:f7:21:83:81:fc:
                    c0:57:86:e2:25:47:81:5a:86:0e:56:77:14:3f:e9:
                    99:31:c0:f9:9a:73:30:32:cd:70:06:3c:20:4c:0e:
                    f7:6e:14:8d:6d:ce:7e:ce:f5:40:de:2c:31:52:f6:
                    81:02:3e:a5:9b:ba:25:27:70:e8:4b:72:ee:04:e8:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3F:5D:53:B8:77:E8:BD:8F:F6:2C:28:57:50:56:E4:C5:E2:9A:EF
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:80:f9:6f:d5:ab:42:f8:64:3c:66:20:9f:a5:2e:d7:06:
         7c:95:e5:e7:e9:45:07:9a:46:12:45:99:22:02:9a:00:1a:a2:
         54:56:cb:f6:5b:3f:55:cd:a2:49:b6:cf:3d:94:c8:b4:c7:a7:
         86:b5:8a:7b:5c:42:6c:2c:74:98:31:64:62:9d:ed:1e:ab:f5:
         da:81:da:d6:60:0a:41:9c:ff:40:7f:96:c4:da:bc:16:e1:35:
         6f:4f:c9:57:b6:1f:0c:2b:19:58:0c:14:7a:20:52:ba:cd:95:
         61:4c:3c:2d:a3:11:f5:a0:ea:c1:a6:14:a2:97:8d:29:0e:22:
         5f:37:82:5f:8f:b8:dd:d2:55:fa:92:e2:0d:a2:df:c1:f7:d1:
         44:d5:ac:2e:83:11:58:8e:9b:ed:ff:9b:c3:69:e1:82:0b:c7:
         48:17:d5:3b:a7:ec:e5:23:bb:d5:9e:bc:54:08:6c:51:b8:63:
         e3:6f:27:d7:63:bd:c7:e1:dc:c4:f3:53:9d:2c:5c:64:9a:23:
         93:51:31:bf:df:33:66:d1:72:7c:ee:9a:46:db:91:76:bf:10:
         78:75:66:c4:96:b1:2a:f6:33:94:18:da:d6:66:65:df:1e:8a:
         02:55:e7:f5:b3:f0:28:04:2b:25:7f:89:6a:69:14:f2:dd:8c:
         17:34:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:03 2025 by rpki-client