Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          OZuS7bx4HRKy3WGGA67tLXxx6VIscfGjrIAOEzZNFxQ=
Subject key identifier:   8A:66:2B:99:9C:FD:6D:FC:70:22:B0:FD:D5:00:CE:EA:B5:26:50:77
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          085A
Signing time:             Sun 02 Nov 2025 20:39:47 +0000
Manifest this update:     Sun 02 Nov 2025 20:39:47 +0000
Manifest next update:     Sun 09 Nov 2025 20:39:47 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: e2VSCHBOxrKU1MEChKUCu1aW0VYCrBOqzu+zOFF4jdg=)
                          2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=)
                          3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=)
                          5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Nov  2 20:39:47 2025 GMT
            Not After : Nov  9 20:39:47 2025 GMT
        Subject: CN=6907c193-15b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:e5:95:1e:42:0b:4d:0b:91:3c:70:90:30:
                    8d:8b:fa:f4:f9:04:05:3c:93:f2:5b:a4:d2:db:14:
                    7f:31:e2:c9:14:63:44:75:05:86:fb:ab:80:21:ab:
                    d6:f7:a4:35:9a:92:8e:e8:41:1c:ab:29:6a:29:22:
                    86:fc:c0:58:0d:c4:20:c4:94:e7:ca:68:91:a4:aa:
                    dd:69:9d:53:16:db:09:76:2b:c2:91:0c:0a:8d:d6:
                    8c:6c:9c:38:18:2e:33:5e:af:4a:44:1c:0e:81:e7:
                    a6:cf:df:4b:25:3e:49:d3:ad:ee:31:02:a5:b8:e0:
                    77:cf:cb:6f:7b:6e:bf:0b:cb:1f:20:e2:aa:01:fd:
                    f2:6e:49:82:83:aa:c8:85:dc:93:6c:2c:2b:fc:2b:
                    f0:8a:83:47:e9:72:f7:0a:a6:49:13:32:18:e2:aa:
                    d3:2f:30:e0:d8:d9:d4:6f:74:a2:9b:27:a3:33:04:
                    4b:df:34:79:19:d6:92:04:c1:7e:a0:e1:57:55:50:
                    30:3c:a4:2f:76:cd:62:e1:95:cc:7a:fd:ef:5b:58:
                    3c:e4:a8:8a:b8:d2:ec:61:3e:13:55:98:3f:6a:75:
                    d6:e2:f9:5a:f3:e7:cc:82:2d:30:26:c6:07:3e:52:
                    a2:d4:00:f7:24:a6:c8:3d:08:27:37:1b:68:4c:1b:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:2B:99:9C:FD:6D:FC:70:22:B0:FD:D5:00:CE:EA:B5:26:50:77
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:8c:c1:31:cb:16:c9:0a:7b:6a:eb:87:ee:da:b0:55:7d:
         fd:e0:e8:b6:97:ff:8b:3e:66:84:be:6b:8d:c9:1a:97:43:80:
         85:0b:0f:78:6c:46:6f:cb:09:fa:5c:d3:67:76:2f:2a:51:d1:
         bf:6d:85:a6:18:37:cf:73:f2:11:b0:30:28:c7:f0:14:61:79:
         4d:c7:7b:42:01:98:6c:78:09:42:25:70:c0:d8:84:46:24:a9:
         23:69:79:4e:c9:bc:e1:64:61:6d:49:35:50:0f:fa:2f:1e:99:
         37:12:8e:37:79:30:7f:8f:05:f8:c9:bd:ef:64:01:36:c7:23:
         21:18:6e:f7:c6:55:6e:f7:23:62:2d:29:bb:2a:f1:fc:30:5b:
         ea:c4:08:38:ea:69:c7:b5:7d:8c:91:34:a0:64:74:97:b5:b5:
         72:ab:20:15:f5:c4:be:6a:ed:f7:c8:ef:71:67:49:e6:01:3b:
         84:5c:a1:d0:55:9a:9e:74:b5:ee:4e:2c:58:36:32:55:da:ae:
         04:12:49:82:2e:9d:c2:62:7a:ae:34:a0:b0:4f:3a:9e:a3:2d:
         c1:8a:b2:b3:37:3f:1f:c5:c7:6d:2f:f1:60:9e:0e:7a:b4:1c:
         62:ee:04:7d:40:b1:28:7a:aa:24:13:1e:d1:8d:d3:04:f2:87:
         12:fb:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:08 2025 by rpki-client