Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
File:                     DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json)
Hash identifier:          dg3XEXWip/YrS1gg4K4Dh0SHIFzGhE7MsDkNXCiuS8o=
Subject key identifier:   96:B1:E4:47:0E:C0:67:4D:7F:61:D9:DB:E7:39:1A:6A:E1:7E:C4:3A
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       051F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
Manifest number:          0517
Signing time:             Sun 02 Nov 2025 23:33:02 +0000
Manifest this update:     Sun 02 Nov 2025 23:33:01 +0000
Manifest next update:     Sun 09 Nov 2025 23:33:01 +0000
Files and hashes:         1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: wDOYXvQoVTO4kPc0FewEikBq/rFiOBUmnSqp/IrHNv0=)
                          2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: RwcRY83ScxlbqM04nHpwXB0Y4y38xjFyFzwqEWYpGkc=)
                          3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: AAv9iRZkCrIdjmlojo08VQ3Lr0iHsrSZtwCxTUl/qrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Nov  2 23:33:01 2025 GMT
            Not After : Nov  9 23:33:01 2025 GMT
        Subject: CN=6907ea2e-ede8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:8b:09:74:ad:c4:a5:2d:51:c4:73:cb:26:
                    d6:ba:48:e3:83:03:ad:48:fe:b0:da:a7:dd:51:d1:
                    52:c5:b8:ca:6c:1b:bd:91:7c:7b:f2:60:cd:d9:7f:
                    30:e8:6b:a0:79:9f:6f:78:95:80:f9:65:8c:7b:90:
                    1e:93:d9:63:f7:02:dd:65:1e:de:23:8b:21:0d:66:
                    ce:8d:55:ea:05:55:cb:ee:60:5d:40:9a:b7:5b:a3:
                    eb:38:39:1e:ac:1f:a0:f0:cf:55:04:71:dd:8e:3b:
                    fd:57:00:ec:4c:38:f1:f3:0c:78:60:eb:f9:3e:c8:
                    15:9c:da:42:de:20:39:67:d6:1c:be:77:6d:85:fd:
                    b6:6e:0d:2e:15:56:ca:18:b5:6c:1c:f5:e9:ad:8b:
                    0a:b7:ad:6b:55:2e:0f:c7:29:a1:6c:a6:6e:ab:7f:
                    71:09:b1:d0:7d:4b:9f:fc:88:72:d7:12:2a:ce:cb:
                    be:19:20:aa:d8:c7:3f:14:d0:34:b6:08:16:59:58:
                    0f:12:82:bd:ee:c2:0c:4b:70:1f:19:10:ec:58:98:
                    a1:ef:a8:ff:d0:e0:6e:62:d6:d3:59:d7:63:2e:11:
                    e9:e8:01:5d:6a:07:fa:7e:08:70:27:89:e6:8a:69:
                    aa:06:36:9f:7b:b7:40:47:d3:5e:3c:7a:11:fc:d8:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B1:E4:47:0E:C0:67:4D:7F:61:D9:DB:E7:39:1A:6A:E1:7E:C4:3A
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:5a:a8:a9:a0:b8:d0:59:54:d8:7c:9f:66:20:03:8c:45:
         ef:9b:2a:e2:c9:76:a1:e8:d8:fc:fc:47:ac:2c:8a:74:f8:09:
         d3:c1:c4:1e:7d:7a:62:19:01:45:c4:22:6d:97:b5:b9:6c:8a:
         c3:cb:77:54:17:e8:81:39:1e:24:4f:ec:65:1a:73:e7:e3:66:
         c5:a7:c0:11:c6:88:2d:4b:06:c9:82:b5:8c:d1:32:1d:d8:96:
         8f:68:b9:0b:2b:00:b8:b1:d5:54:45:55:a0:68:1f:84:68:e9:
         bf:d1:d5:3b:97:f9:27:10:e1:15:5d:0d:04:90:8d:f5:09:31:
         7b:8a:ef:7e:88:d1:a5:d8:9c:3a:9a:0a:b7:ae:af:0b:b6:ba:
         db:bb:b7:a1:f9:1b:9a:5b:d5:5d:7e:78:ad:09:09:3a:4a:06:
         e7:9d:bd:f1:87:41:33:ae:0b:ad:77:b6:9f:e2:19:23:14:49:
         14:7c:00:53:fe:79:4a:f7:6f:5d:71:13:e5:96:ac:60:d3:f9:
         4a:8e:a0:f9:fb:51:d7:41:7c:39:8f:a4:99:e1:2c:64:27:20:
         d6:de:33:63:5f:0f:26:97:25:57:99:93:7e:f2:35:28:79:4f:
         7a:1f:8e:da:2f:6f:6f:32:3b:60:3a:8c:62:ba:01:2c:31:32:
         28:d6:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:43 2025 by rpki-client