Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File:                     mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier:          XZ6nby+Wb2M/PxcPLV5zjo7DhEHso8uXF2r7agqGTrY=
Subject key identifier:   43:20:4A:26:8C:95:A2:3A:BE:F8:67:88:CC:73:4C:82:A1:95:51:8C
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer:       /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number:          016E
Signing time:             Wed 05 Nov 2025 04:01:38 +0000
Manifest this update:     Wed 05 Nov 2025 04:01:37 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:37 +0000
Files and hashes:         1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: AQXawJB3/IXLrZlZcCSKf6c/+T0donN6h5RwyzcJLoM=)
                          2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
        Validity
            Not Before: Nov  5 04:01:37 2025 GMT
            Not After : Nov 12 04:01:37 2025 GMT
        Subject: CN=690acc22-a83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:b9:f5:32:09:45:30:b9:88:8a:2a:e9:d8:
                    98:fc:a7:47:13:4b:14:95:9e:d8:43:87:83:53:04:
                    25:7d:82:3e:15:e6:3a:1a:4f:04:93:fa:c5:6f:16:
                    c2:4b:9f:3b:bf:3b:2c:4f:c6:51:e2:b3:77:44:98:
                    38:05:4f:60:ed:93:10:13:4f:f0:8d:fd:fd:31:45:
                    73:7e:a0:e2:4f:9b:58:d7:78:79:e3:2c:5a:3e:ff:
                    99:b7:cc:2d:97:98:03:bf:a4:ae:67:4b:c1:be:93:
                    3b:61:bb:50:53:66:95:41:1d:12:8c:a6:49:7a:4c:
                    a7:a0:a4:ca:46:f2:a5:c4:10:e0:de:c0:3f:f2:4c:
                    3a:47:76:02:23:31:93:09:f3:6d:bb:82:61:cd:f6:
                    6d:de:2c:2a:3a:34:c7:af:e1:9f:8c:0a:8d:59:54:
                    d1:37:93:30:cd:0f:a3:cf:ff:ec:6e:e6:d8:3d:02:
                    48:15:f4:39:d0:6f:ad:ec:aa:f8:34:23:92:1a:bb:
                    db:e9:1f:0b:d2:23:57:8b:59:c4:4e:36:fb:c3:39:
                    5c:6f:60:cf:d2:4d:2e:c2:87:ee:6c:78:30:c3:3a:
                    d4:c1:54:51:a0:b1:88:40:a5:bd:06:2c:14:da:8e:
                    7d:3c:de:a9:76:4f:63:40:34:4a:6a:73:ca:d9:13:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:4A:26:8C:95:A2:3A:BE:F8:67:88:CC:73:4C:82:A1:95:51:8C
            X509v3 Authority Key Identifier:
                keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:d7:fa:3c:64:77:68:db:45:d4:b8:86:f7:da:73:02:5f:
         8b:6d:46:45:f9:a1:e6:c8:6f:a0:f5:1b:96:12:79:78:87:2c:
         28:47:ab:0b:c8:19:f4:0f:1c:9d:79:9e:d5:84:a4:e3:c8:d1:
         bf:91:72:fb:ee:b0:ec:1a:81:fe:fe:3b:62:94:32:21:8f:64:
         52:da:e9:d2:87:13:e9:10:b5:a5:5d:33:09:fb:50:e2:ea:6b:
         6a:0c:8a:23:81:dd:72:20:92:0d:e9:06:6b:49:1c:cf:95:19:
         3b:f6:19:fb:3c:0f:7e:5a:7e:b4:41:13:62:42:d4:a8:c5:39:
         87:8e:99:7a:c7:75:4f:98:28:8e:d0:88:d8:fd:03:da:f9:ca:
         e8:47:45:f9:01:87:e1:f1:12:85:46:85:ce:ff:a5:c7:a3:c2:
         05:08:c5:53:08:e9:ba:51:e0:d4:00:1a:f0:6d:bf:fb:9f:41:
         16:83:1d:6f:8f:ae:06:2f:56:6a:b8:13:2e:8f:d5:18:97:fe:
         20:a1:50:9d:73:f9:98:cb:2f:f7:bd:ed:fd:cc:df:61:72:e2:
         5e:72:09:bc:f0:fd:ae:4e:a8:8a:b8:bb:d6:ef:a6:f6:ee:ad:
         fd:4f:55:1f:18:67:30:b0:e2:43:8f:6f:ae:57:8c:19:22:08:
         4b:ff:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:29:52 2025 by rpki-client