Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
File:                     SKOukZPdEbs3NMcFR26Yw_94uEE.mft (raw, json)
Hash identifier:          YzAhGiC4ym/kOq0sRJ2sFLJ3ud27LqabbB0pSnk2EEY=
Subject key identifier:   74:10:61:69:89:16:6A:37:E3:76:AF:D8:2C:DD:63:68:70:5D:7A:3E
Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41
Certificate issuer:       /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
Certificate serial:       082D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
Manifest number:          0824
Signing time:             Sun 02 Nov 2025 20:50:15 +0000
Manifest this update:     Sun 02 Nov 2025 20:50:15 +0000
Manifest next update:     Sun 09 Nov 2025 20:50:15 +0000
Files and hashes:         1: SKOukZPdEbs3NMcFR26Yw_94uEE.crl (hash: op7uIRRvnks/8aW8Y9LLbcmA/jVIcG9QVURNwLHBwDo=)
                          2: FB54EFD2F31711EABD181553C4F9AE02.roa (hash: MYKg2u9YxpZYjKLgK+gwh7DKVYjpmB2k/+Woh4BaXHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl
                          rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916534C, serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
        Validity
            Not Before: Nov  2 20:50:15 2025 GMT
            Not After : Nov  9 20:50:15 2025 GMT
        Subject: CN=6907c407-1642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:76:3d:52:75:b1:3a:eb:f4:ab:9b:11:1b:
                    b0:1a:60:2e:be:9f:74:c2:8c:76:26:da:b1:15:1c:
                    0c:12:f8:ca:55:17:15:48:cb:5f:d6:29:26:03:a5:
                    18:c4:10:18:60:92:d0:10:a1:38:60:3c:9d:b5:9c:
                    4e:45:54:cb:7d:1b:a0:2d:42:94:27:17:57:74:f0:
                    56:41:3a:f2:ca:2d:f3:c9:a9:5f:21:a8:6c:17:5b:
                    6f:d6:0f:47:27:52:03:80:43:bb:b4:e3:82:69:7b:
                    16:1f:2f:49:1d:16:19:5d:2b:f5:54:50:be:91:91:
                    e9:f1:3d:57:69:65:29:34:3e:92:86:e7:4a:50:a7:
                    1d:05:77:e0:b5:d8:78:57:45:55:4f:58:50:85:49:
                    eb:d6:ae:14:3f:b2:81:eb:93:af:66:d0:0a:a7:fa:
                    a2:fd:f0:f9:ae:0c:a6:b7:96:f2:4c:d8:2c:14:3c:
                    f4:ec:44:22:c1:76:8b:91:99:ee:30:28:33:e7:0c:
                    08:c2:6c:b3:3d:aa:0b:8c:b5:9e:55:4d:04:58:17:
                    6f:bb:95:ba:a8:0c:ce:dd:47:11:3c:11:4b:23:af:
                    0a:67:03:ec:98:94:ed:de:79:42:61:22:96:95:2b:
                    37:de:4d:d5:1d:99:cd:66:1c:86:a0:96:a7:db:12:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:61:69:89:16:6A:37:E3:76:AF:D8:2C:DD:63:68:70:5D:7A:3E
            X509v3 Authority Key Identifier:
                keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:e0:f2:b1:80:d5:ec:96:aa:ed:eb:31:34:b7:82:7b:3f:
         14:30:59:d7:92:36:9a:61:ad:f6:16:59:c1:a3:cf:f1:0c:eb:
         b0:cb:f4:a9:1e:cc:a2:d4:06:84:a1:bb:44:c7:43:ab:d3:23:
         b6:05:71:ac:70:04:e4:9d:29:9a:c7:12:1f:30:4e:a6:12:c1:
         e1:ab:d9:ee:6c:3a:05:be:06:c2:ae:8b:22:88:2c:96:76:1a:
         0c:18:db:d3:a3:bd:d9:aa:76:23:4c:ea:07:45:5d:41:87:ae:
         2b:19:26:46:1a:74:4b:98:e7:51:f5:c5:93:04:cd:0e:d0:41:
         ab:ca:da:b6:f8:17:88:47:d5:36:3d:59:23:36:75:be:ce:d2:
         6b:21:dc:e8:25:d8:1e:53:7a:c4:55:af:1e:b6:3a:a2:34:3b:
         56:79:75:5b:27:fc:27:08:89:0f:23:32:d5:8a:db:94:0d:2f:
         17:91:e8:94:5a:19:8f:d8:5b:8f:c6:36:e3:a8:74:1f:64:49:
         10:b0:03:5f:a3:8b:18:79:0d:0c:a5:a6:7b:12:30:02:e1:63:
         c6:29:87:02:af:ef:31:30:3b:29:9c:64:66:26:eb:fd:90:5a:
         51:c7:2e:34:f7:3d:53:2e:9a:92:a8:43:19:0a:82:71:1d:94:
         c7:86:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:30 2025 by rpki-client