Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File:                     cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier:          QHVwKELSXtBVNOOG5sc+HGoqQqWD4Ez/jBQeEi5iV5A=
Subject key identifier:   F1:6D:72:C1:0C:D9:A8:67:1C:E9:4C:C4:58:CE:FF:15:38:7B:6F:2D
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer:       /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number:          02E1
Signing time:             Mon 03 Nov 2025 01:15:15 +0000
Manifest this update:     Mon 03 Nov 2025 01:15:15 +0000
Manifest next update:     Mon 10 Nov 2025 01:15:15 +0000
Files and hashes:         1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 1KuTkRYH7rk7F4tSzc99O0Pa/2+XA+diAfc1yiavXt4=)
                          2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
                          rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
        Validity
            Not Before: Nov  3 01:15:15 2025 GMT
            Not After : Nov 10 01:15:15 2025 GMT
        Subject: CN=69080223-8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:21:b9:2d:08:22:48:07:ee:0f:ad:f3:b2:
                    ae:fe:a5:d3:21:2e:84:6c:2f:b4:62:90:36:0c:14:
                    7a:57:5c:99:1a:18:d8:60:f3:1f:f2:c7:66:3e:18:
                    e8:0f:49:dd:dc:25:e6:76:f4:bc:e4:ad:35:3f:e6:
                    74:98:6f:6a:ec:96:26:9d:5b:c9:36:90:ab:46:59:
                    0a:36:dd:f7:af:05:ec:1e:3c:9d:7f:97:21:c7:1b:
                    ee:e1:53:0a:90:89:23:10:47:f5:1e:2c:61:9f:dc:
                    e3:d2:03:1b:fe:36:75:96:66:43:5e:ff:8e:97:64:
                    64:54:28:54:16:07:19:8c:b3:b7:f0:ef:36:91:8d:
                    a7:42:e7:21:1d:de:e0:59:2b:85:10:c8:26:e6:9b:
                    b3:f3:c9:52:01:39:0a:ed:cd:85:3a:17:0c:a7:2e:
                    35:8f:48:6f:83:22:3f:5f:c3:ff:ae:72:21:c4:fc:
                    40:7f:fa:11:c1:1f:71:f6:69:a1:58:8b:93:0b:e5:
                    5a:9e:d4:50:f8:3b:e0:f6:08:8d:5d:b7:60:f0:35:
                    27:57:58:3a:34:17:b4:f1:ee:6e:70:90:40:65:d8:
                    a5:3a:a6:ca:f7:3e:07:db:88:08:f3:9b:54:b1:4e:
                    a9:d4:8b:b2:76:55:4d:a2:be:64:d4:f3:b8:a5:6b:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6D:72:C1:0C:D9:A8:67:1C:E9:4C:C4:58:CE:FF:15:38:7B:6F:2D
            X509v3 Authority Key Identifier:
                keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:53:18:64:d9:be:d8:63:4b:d8:68:fe:d5:78:c6:51:15:
         db:85:b8:c7:05:2f:fc:9e:7e:96:a2:c9:8f:57:f9:7a:cf:c3:
         b7:fd:98:5f:f8:08:3e:5a:d8:c8:ec:91:df:29:65:fd:ef:bd:
         55:95:57:67:b4:fa:69:20:fc:d9:97:a0:7b:46:89:3b:fe:83:
         3c:9e:9b:44:54:99:76:39:5c:7d:09:62:ce:8a:2c:f4:8a:c5:
         1b:ab:d3:3a:fa:d7:18:0f:ed:57:d2:dd:73:98:7d:0a:2d:44:
         02:17:e0:47:a7:fc:65:c5:07:4c:36:9a:cb:5a:5a:2c:51:5e:
         2d:82:70:96:05:66:14:9d:ff:87:a6:3d:4b:ea:ec:3a:db:0c:
         51:47:72:d3:cb:69:62:51:17:fc:53:d3:b0:e3:b8:40:46:7c:
         21:2f:a9:c1:1d:70:09:65:27:6f:18:22:ef:7e:30:ce:55:b8:
         18:0f:eb:df:13:43:5f:56:b4:e0:88:32:3b:01:97:9f:36:77:
         70:42:f8:5b:d4:8e:1e:f0:19:8d:1c:a3:7e:b5:b0:61:57:ca:
         7c:95:a3:17:c9:c0:ad:f2:cf:33:3a:b1:f0:36:f5:79:ca:af:
         4c:31:28:5d:75:51:f1:e1:1a:ea:3a:ee:f3:b2:1f:93:36:e4:
         a6:8f:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:22 2025 by rpki-client