Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File:                     FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier:          TqyjBQKlTE4+CmjD46IqcTZuoRJIV/pcPx0qgiE+IGQ=
Subject key identifier:   F0:75:CC:0E:5C:E3:79:17:F5:F1:5A:2E:76:07:93:95:A3:33:90:B1
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer:       /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number:          76
Signing time:             Mon 03 Nov 2025 06:50:29 +0000
Manifest this update:     Mon 03 Nov 2025 06:50:29 +0000
Manifest next update:     Mon 10 Nov 2025 06:50:29 +0000
Files and hashes:         1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: nsgE+u2bxUaBTw4u5mfIwBnLRgX4Z1S5//L0pTP2SNM=)
                          2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: IboM73984syJmuqfIfDKvmHL/HfnKXEhHqhYyaPXIGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
        Validity
            Not Before: Nov  3 06:50:29 2025 GMT
            Not After : Nov 10 06:50:29 2025 GMT
        Subject: CN=690850b5-c6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:95:01:51:a7:4d:1d:3e:f4:53:a9:c3:86:
                    48:74:23:13:46:63:2b:94:44:fa:c0:79:59:c7:f7:
                    5d:a1:3b:97:cf:71:08:63:63:a0:32:2c:8e:61:1a:
                    ae:a5:a4:76:d4:47:9c:01:55:7d:de:26:31:89:5f:
                    01:5e:da:aa:1a:f0:c3:67:d3:9a:ab:0a:11:52:bc:
                    86:c3:91:ed:32:43:55:73:3e:28:58:67:ac:10:ff:
                    17:57:72:c7:04:35:0a:eb:0e:3d:de:7d:ef:4a:06:
                    bb:9e:38:f1:67:37:b4:c0:69:36:3f:41:b6:b7:b9:
                    88:28:d3:84:8d:4d:2f:da:f7:f5:5f:6e:55:78:1d:
                    03:63:22:8a:21:dd:31:6b:33:a5:a4:b3:de:b6:8c:
                    c7:2f:3e:96:d8:08:29:0e:ce:f4:0b:e2:de:6c:5f:
                    28:3b:3f:2e:e7:2f:df:04:53:cb:23:a4:84:0a:f3:
                    b3:c4:fc:fd:88:09:30:f2:26:83:5e:28:89:45:36:
                    aa:bc:cc:72:61:f0:e6:3d:61:ea:47:03:42:e6:87:
                    21:f7:da:87:bb:7b:1c:f0:0c:43:06:cb:cb:6f:80:
                    fd:73:74:a7:b5:24:39:36:e9:ae:77:60:0c:d6:2e:
                    e6:a5:da:a9:d7:d4:61:62:e2:fe:ab:d8:9e:0d:65:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:75:CC:0E:5C:E3:79:17:F5:F1:5A:2E:76:07:93:95:A3:33:90:B1
            X509v3 Authority Key Identifier:
                keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:e2:8c:c2:ce:fb:e6:86:4e:68:cc:95:a0:39:87:60:a0:
         ad:40:0d:08:26:37:40:2a:b0:96:62:bd:c7:73:3a:35:3d:aa:
         8e:ec:47:7a:16:05:d3:a1:38:34:a5:ba:c3:c4:a3:9e:83:5b:
         65:9a:0f:d5:69:7b:67:f5:d4:8b:d1:7a:68:91:c5:0a:aa:25:
         ad:a4:51:75:7f:d9:97:36:7b:2e:fe:71:a6:e6:84:1f:36:d4:
         91:b6:41:b5:bd:51:2a:2a:73:56:a6:42:2a:3a:20:75:a5:6a:
         d7:93:e6:20:5c:de:b6:52:16:74:fa:18:73:fc:1f:c5:45:56:
         d2:7d:cb:e8:92:5a:6a:db:0c:3f:e2:fa:54:61:2f:61:5d:18:
         a4:29:3e:cd:67:65:20:2e:6a:a1:e0:c6:90:9a:02:d1:8e:64:
         80:2b:98:00:3f:a1:aa:d1:d6:5e:09:5b:c7:ea:80:e2:4f:c4:
         85:fb:c5:dd:cd:ab:75:1d:1c:aa:25:33:0a:7e:51:c8:39:25:
         57:44:aa:a2:32:f4:60:be:99:7b:0b:31:c5:21:fc:55:a7:9d:
         f2:1a:b9:a8:99:4f:e4:80:f6:fc:2a:5b:c6:82:67:86:1a:17:
         23:6d:b1:e1:06:52:cd:a7:1d:f3:11:d8:68:86:1f:61:b0:54:
         29:27:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:03 2025 by rpki-client