Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File:                     hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier:          Uv2t2A8BYwd9AROGvTAqIZ+HTnu9cvzETaJfteUB1d0=
Subject key identifier:   17:A9:32:1D:93:6E:CE:53:69:3C:A6:67:0B:43:0B:50:BB:49:8D:B6
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       053A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number:          0529
Signing time:             Thu 23 Oct 2025 00:42:04 +0000
Manifest this update:     Thu 23 Oct 2025 00:42:03 +0000
Manifest next update:     Thu 30 Oct 2025 00:42:03 +0000
Files and hashes:         1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: nbP2Q4MH2RpDmG86D9LVqo638fZH7mx6AAsGHhBh48c=)
                          2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: YHTE5QYQ4ZxchKvHk6Tg5vyK0QNcF3tQixzNTie8Jug=)
                          3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: 63vkN+nqGcEYIUErZWKNYsJiLNJREPqHvMp6E/nWN+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 00:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Oct 23 00:42:03 2025 GMT
            Not After : Oct 30 00:42:03 2025 GMT
        Subject: CN=68f979db-3acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:da:90:86:73:11:b8:6e:e0:77:82:c8:99:
                    9d:36:f6:17:13:db:e2:57:cf:ea:79:2a:dc:67:52:
                    c7:6d:d7:c4:4e:82:9c:9e:ba:b4:c4:21:5f:f5:99:
                    1b:d9:ec:91:96:54:bf:52:a5:20:be:04:a2:f3:16:
                    2f:32:6c:e0:74:0a:45:df:24:22:a3:07:19:45:c4:
                    1c:69:52:67:13:10:de:96:2b:58:ae:f1:ae:53:8f:
                    06:d1:de:4c:54:d3:6a:b6:36:0d:19:9c:45:d5:37:
                    0a:41:3d:1d:72:5f:ce:c2:b2:67:e4:98:52:75:99:
                    37:c5:99:66:4b:8a:3b:1f:cd:f8:f1:4a:5b:fb:f6:
                    9d:1c:c0:e6:01:db:ec:d6:8f:0a:50:9f:d5:37:f6:
                    83:1e:d7:ae:de:e7:a5:a9:17:37:aa:b4:78:da:23:
                    a2:c9:98:6f:c6:0b:27:4a:6d:fa:bf:c3:f1:12:ed:
                    da:61:a0:eb:3e:d7:c4:36:87:d6:78:4b:3d:1d:52:
                    95:52:89:fa:ae:1d:0d:6f:3f:4b:27:9f:9f:3e:87:
                    99:76:b9:e4:7d:1d:e0:a0:a7:9b:e2:8c:d4:5a:63:
                    e1:03:4b:07:55:08:57:5f:9e:01:36:96:81:4f:c4:
                    cf:3b:ed:a2:2c:90:35:f0:66:c1:0a:c4:c2:89:25:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:32:1D:93:6E:CE:53:69:3C:A6:67:0B:43:0B:50:BB:49:8D:B6
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:4e:84:93:6b:bd:72:5e:a8:37:77:5c:5f:38:95:19:ba:
         ea:51:f0:39:91:f0:f8:f3:73:70:fc:80:89:b4:45:a7:0b:91:
         c2:1c:2d:02:47:57:58:f8:bf:6e:52:8b:f6:b3:9f:6d:a4:37:
         58:c1:30:95:54:5a:53:21:dd:44:60:33:73:35:2e:2f:ff:33:
         eb:72:c7:6c:aa:f0:1b:44:ac:7f:0d:f0:db:a4:39:1b:ba:10:
         a3:e5:7a:8a:38:df:bc:ff:94:b4:81:da:40:65:c2:99:d7:4f:
         9e:da:02:f4:78:ce:57:3e:a8:0f:60:70:98:91:67:a4:10:c8:
         a9:04:95:bd:e1:83:39:fa:38:ee:b4:69:fc:55:7b:9a:8a:21:
         06:ce:75:a8:51:64:87:63:46:69:28:c5:63:c6:53:9c:2a:ca:
         44:f4:02:b2:d8:69:88:9a:14:8e:2a:90:e6:30:52:4a:b8:4e:
         4c:c1:00:25:2a:36:b4:b1:dc:9e:aa:28:33:ae:b4:4f:93:3d:
         78:0b:a5:bd:01:9c:17:d8:a0:7f:50:10:56:22:c3:5f:16:b2:
         98:a5:e8:d9:2e:0e:4d:e9:1f:0e:41:bb:63:a4:46:f8:b8:4d:
         80:b0:26:e4:63:29:c8:93:4a:1a:13:b8:31:15:e7:4e:f7:64:
         cd:3c:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:24:45 2025 by rpki-client