Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          +Xxq/ssFzEuxZF5F0ZKABNqydYAP/XtVPuniAL/a/vs=
Subject key identifier:   EA:7E:76:3F:B7:0D:C6:47:52:5B:D0:6C:80:F1:53:2E:33:39:00:13
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          0165
Signing time:             Mon 27 Oct 2025 06:24:44 +0000
Manifest this update:     Mon 27 Oct 2025 06:24:44 +0000
Manifest next update:     Mon 03 Nov 2025 06:24:44 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: sndznpW7xMYGUmUM5dhnjxhfa0uM1dN1Yzx06kT+5WE=)
                          2: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
                          3: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
                          4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
                          5: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
                          6: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
                          7: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
                          8: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
                          9: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
                          10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 06:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Oct 27 06:24:44 2025 GMT
            Not After : Nov  3 06:24:44 2025 GMT
        Subject: CN=68ff102c-b817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:e9:ef:98:09:4b:12:61:bf:6d:05:f4:93:
                    47:dd:c7:ea:5a:e8:af:90:b6:29:73:51:33:3f:e6:
                    7c:a3:84:22:ab:2a:94:e8:ba:f9:56:80:7e:71:aa:
                    f4:66:61:52:f5:8b:34:a6:ad:34:14:a7:b4:a2:e1:
                    96:3c:36:c6:21:e4:f9:d4:89:3c:3e:7f:0c:f1:ef:
                    c4:5f:15:f2:fe:07:68:b9:32:ec:0b:06:6e:58:e0:
                    6f:fa:3f:af:1b:ed:41:2e:60:dc:dc:52:d6:d8:e3:
                    9b:6d:97:15:8f:b0:ab:bc:57:ee:fb:81:eb:f4:03:
                    d5:10:da:86:39:9b:53:d0:77:fa:6c:ad:91:9d:04:
                    7a:9f:37:2b:e4:61:55:7e:c2:8c:a3:d3:ab:2d:89:
                    f7:90:65:69:a2:1e:8d:97:17:1f:04:04:bf:26:61:
                    7c:3d:5f:37:3e:67:b7:1a:24:72:78:6d:40:6f:ec:
                    df:85:fd:12:14:95:0c:59:2f:26:44:a7:c0:dc:6a:
                    da:64:90:0c:07:af:37:0b:ae:61:0e:a4:5e:bd:81:
                    79:fb:59:1c:bb:42:43:8f:ab:c5:18:e9:51:9a:46:
                    62:95:46:3a:9b:72:c3:74:61:82:f4:73:f1:48:49:
                    6f:5e:08:c4:3a:32:77:b4:cb:2a:b3:f2:8b:97:a4:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:76:3F:B7:0D:C6:47:52:5B:D0:6C:80:F1:53:2E:33:39:00:13
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d5:87:46:1c:d0:11:bb:4c:d2:ee:ed:8f:a1:d0:94:29:0d:
         75:82:b7:fd:5b:3d:a4:90:dd:b7:c5:78:4b:f5:fb:19:0b:8a:
         cf:49:f8:5b:b7:df:d0:e5:d6:88:7a:40:64:3b:1a:cb:d0:ff:
         79:5d:b2:17:09:46:3f:e1:64:5a:25:8c:b7:92:a6:e1:32:6a:
         e9:98:b2:46:08:3e:1a:78:67:ad:00:a8:5e:c3:e7:8b:d0:2b:
         3e:a3:ec:42:18:84:9b:4d:1d:31:39:68:5c:61:ba:3d:cb:8c:
         da:41:6b:3d:cd:66:52:e3:8b:3b:2f:b4:b0:23:cf:c6:26:c2:
         d3:56:50:70:a6:9c:eb:0f:d9:df:ac:0f:ff:19:a6:e1:83:dd:
         14:09:4d:96:30:52:b3:1b:c3:bb:14:7c:a1:f6:e3:9a:40:94:
         80:b7:24:7c:9a:67:b0:5e:76:2e:cd:e2:6b:99:75:76:0b:24:
         72:5b:28:d7:4e:8e:02:ba:3d:12:94:dd:4f:f8:3b:16:95:b6:
         ee:df:39:94:96:02:25:b3:32:be:8e:d9:5e:b3:0a:d6:12:18:
         16:04:3b:17:28:b9:ef:e3:38:ca:29:fe:6d:a7:6e:65:8d:5e:
         0c:ee:34:df:05:46:7d:54:b4:db:ba:19:59:b1:43:38:17:c8:
         d7:2b:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:19:02 2025 by rpki-client