Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File:                     AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier:          v9JjwOWYSH9IQRJu/HSWUcZQOZVeN5MNikDwnZ0k7YU=
Subject key identifier:   75:33:37:C8:61:A7:12:39:B5:B0:D7:B9:07:E9:3E:53:3F:61:19:B6
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number:          0179
Signing time:             Sat 25 Oct 2025 07:18:36 +0000
Manifest this update:     Sat 25 Oct 2025 07:18:35 +0000
Manifest next update:     Sat 01 Nov 2025 07:18:35 +0000
Files and hashes:         1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: vMs27tgmP+YVQh5nGvASTw4wd9JL/bvNnrEGca5BbKA=)
                          2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=)
                          3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Nov 2025 07:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Oct 25 07:18:35 2025 GMT
            Not After : Nov  1 07:18:35 2025 GMT
        Subject: CN=68fc79cc-6cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:ef:44:89:cf:64:e6:95:40:c5:50:aa:8d:
                    e6:5e:07:dc:34:ae:f1:eb:61:c0:66:e5:59:3b:c8:
                    9f:1e:6b:71:c9:08:72:74:4d:ca:f6:f7:75:fa:5f:
                    a9:2a:a2:4b:95:d7:aa:21:c3:35:ba:e3:e9:84:2a:
                    40:1c:e5:23:ff:12:c5:50:72:2a:74:fe:66:a4:c0:
                    81:5b:8e:33:0f:69:2b:d4:0f:6f:7e:73:85:8a:bd:
                    a1:b3:78:70:26:8a:bb:4c:d9:f2:f8:a9:fe:50:a8:
                    a4:57:03:74:81:6b:8e:77:93:4d:ad:43:72:f9:98:
                    06:7e:e5:84:99:8c:9f:06:95:99:8d:79:a2:d0:14:
                    d4:68:f3:86:c4:eb:b8:19:f7:20:a1:5a:42:aa:f7:
                    d7:0c:62:2f:79:0d:36:3a:7d:a1:97:ef:fa:8a:c1:
                    4e:2e:71:97:34:ce:83:dc:f2:03:19:d9:6e:0f:dc:
                    79:ba:af:34:0b:68:21:1e:da:00:19:ac:c2:6a:1b:
                    44:f7:84:d7:85:eb:5b:4f:f6:5d:d3:5a:72:2f:da:
                    fd:54:f8:5b:c8:fe:ab:3c:b9:90:df:77:60:cf:85:
                    bb:d9:05:e5:80:39:a9:af:64:fc:c4:9e:b1:77:30:
                    d2:a4:7f:cd:f9:36:d1:34:7d:28:7c:7e:b4:26:32:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:37:C8:61:A7:12:39:B5:B0:D7:B9:07:E9:3E:53:3F:61:19:B6
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:51:fb:92:91:34:b9:5f:7e:31:f3:a0:88:71:b8:e8:56:1e:
         78:f3:3b:56:4e:c0:18:f2:5a:50:b8:34:63:0d:2c:2a:84:b7:
         4c:9c:c1:bb:18:7b:c2:75:b6:ac:a8:5f:01:ae:85:41:fc:d6:
         56:6e:fe:1f:db:1e:6a:43:fa:6a:36:64:84:90:d5:23:43:12:
         87:5b:4a:22:12:4c:fb:20:70:62:c3:8d:52:75:76:20:e9:c3:
         c5:b6:bd:98:b2:fa:38:c3:e0:ad:66:85:b2:93:45:48:a2:10:
         01:ad:25:bd:e6:8c:93:6d:86:1a:30:5b:4b:d5:1e:ef:9c:b6:
         bb:0b:2c:42:50:ae:6d:cb:04:f4:34:59:93:e3:e0:34:9e:b3:
         a7:b0:ad:27:4d:05:0a:71:70:65:cd:6f:b4:c8:6b:6b:96:79:
         c9:a8:67:ae:2d:c6:4b:72:2e:a7:ba:60:f2:a6:20:4e:b9:41:
         4f:7e:51:a8:32:bf:4c:ca:c1:d3:6a:37:c9:b1:21:31:50:a2:
         3b:3f:41:f1:36:45:9f:91:65:82:ee:9b:81:80:8a:3c:6a:36:
         10:25:a7:25:03:7c:6f:38:66:8f:07:f5:19:52:0d:ec:59:d6:
         a3:ce:d9:60:51:c8:58:0b:a2:7e:e6:27:97:97:0f:f2:b0:ec:
         2d:32:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:00:03 2025 by rpki-client