Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File:                     8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier:          1VDmK+pzWbgwywEs2hsYDk0VysvswN+hLuqcJSZ4C0k=
Subject key identifier:   96:A8:59:9C:88:F0:7F:7E:7B:CB:29:29:8B:58:E3:4C:83:1A:16:DC
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer:       /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial:       0A40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number:          0A3A
Signing time:             Sun 02 Nov 2025 19:40:54 +0000
Manifest this update:     Sun 02 Nov 2025 19:40:53 +0000
Manifest next update:     Sun 09 Nov 2025 19:40:53 +0000
Files and hashes:         1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: mQ2DjGnmdr4QQcW6HKbYFZS5C1Q83a6axaxJgb4V9ao=)
                          2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
                          rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624 (0xa40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
        Validity
            Not Before: Nov  2 19:40:53 2025 GMT
            Not After : Nov  9 19:40:53 2025 GMT
        Subject: CN=6907b3c6-bc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:13:97:78:8c:84:88:9b:4a:4b:29:b3:19:
                    db:91:16:9d:26:a4:bd:26:c9:31:77:d0:63:62:8e:
                    04:ae:39:14:c2:90:07:6d:ba:9a:e0:03:23:0a:0d:
                    45:e2:36:f7:50:b9:c8:9c:21:20:8f:d0:47:b6:46:
                    41:52:4c:f9:b1:ff:76:3a:42:74:ab:b2:10:b0:9c:
                    15:02:a0:1a:c7:bc:cb:6f:7d:fa:b1:e0:1f:1d:a3:
                    b8:03:9f:90:5a:6d:9b:68:d9:2a:30:c3:29:70:9f:
                    d0:fd:58:19:85:bf:f5:61:54:45:9e:53:2e:cc:42:
                    4f:5c:04:01:dc:49:a5:53:9e:a8:6a:38:03:ab:5f:
                    cb:06:ea:14:e5:41:be:58:d7:aa:78:61:85:9a:7c:
                    50:64:c4:36:fb:b8:72:9b:1e:17:60:9b:a7:d5:7e:
                    4b:7d:52:05:78:e5:36:f5:79:d8:58:47:6e:22:ed:
                    79:39:3b:70:9c:75:18:2e:aa:c3:5d:93:e8:3b:3b:
                    5f:ae:a2:f7:9e:2d:5d:9f:0a:d3:fa:8d:4c:2e:c7:
                    c7:0e:20:3b:5c:38:12:9d:92:91:25:b0:4f:36:fd:
                    d4:cb:ce:c2:7b:38:3e:57:f7:9b:5a:29:e6:cf:f3:
                    0d:a7:99:9e:ec:54:b0:b5:20:aa:ac:2a:9c:3e:21:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:59:9C:88:F0:7F:7E:7B:CB:29:29:8B:58:E3:4C:83:1A:16:DC
            X509v3 Authority Key Identifier:
                keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:17:08:8a:af:0f:ef:75:14:68:18:14:7b:f2:0f:28:9f:
         c5:60:95:68:23:31:52:ec:df:33:09:e2:ef:a4:1a:10:70:bc:
         7b:b8:35:0b:1c:b9:4c:a1:cc:bb:30:e3:e5:88:8b:62:60:98:
         16:6e:e7:61:c9:8f:fc:e5:7c:19:ff:36:98:9a:e8:f1:63:b9:
         94:af:63:1c:87:0a:b0:76:06:69:20:ac:33:55:c9:b6:f0:4d:
         2f:b5:82:53:30:c6:18:25:c7:18:2d:bb:a2:ed:79:8d:16:d9:
         69:92:87:e3:4c:73:f5:a1:89:b6:63:a9:b3:8e:f3:6c:3c:a1:
         27:26:6e:90:58:ff:f6:7a:f9:dc:6a:9f:d4:14:d1:12:b6:20:
         28:ef:25:ba:66:93:f3:0a:47:49:5c:ba:0b:7b:ed:b1:db:a8:
         86:3b:2b:c9:87:8a:8c:99:ed:ab:a2:f7:db:b8:05:f4:da:37:
         de:9a:4a:83:cf:80:7a:c6:e2:b7:e7:a7:83:4c:32:9f:e2:a4:
         ac:18:c9:92:f8:07:f7:1e:5d:75:93:e5:61:2d:f8:d6:3f:d8:
         da:cf:b6:d8:af:f3:c7:77:84:56:40:f1:b5:e2:50:d7:dc:39:
         81:09:01:34:89:ff:76:b8:1d:fc:14:04:4e:07:66:7b:d3:33:
         5b:d8:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:28 2025 by rpki-client