Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File:                     zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier:          ea/EvRhBpPk1TsfM/rktg6ATy5OoHGVHF8eSGcfWfZo=
Subject key identifier:   57:62:46:80:E4:11:DF:21:27:D3:4A:A8:70:B8:D3:D8:30:6E:9C:0B
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer:       /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number:          56
Signing time:             Wed 05 Nov 2025 07:24:39 +0000
Manifest this update:     Wed 05 Nov 2025 07:24:39 +0000
Manifest next update:     Wed 12 Nov 2025 07:24:39 +0000
Files and hashes:         1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: /BXIjI+aoX9CJF0HRFEWK3RweZxiYMZGrWSgwKBHE0w=)
                          2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
                          rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
        Validity
            Not Before: Nov  5 07:24:39 2025 GMT
            Not After : Nov 12 07:24:39 2025 GMT
        Subject: CN=690afbb7-9ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:ee:17:eb:13:fc:40:cb:13:c2:bf:d5:05:
                    bc:7b:a9:a8:26:d0:d0:9c:46:bd:ee:4d:75:22:b7:
                    05:42:ef:d2:fb:55:c1:88:68:61:20:2a:5d:d4:53:
                    f3:21:29:1b:29:0d:18:01:9d:52:74:9c:ba:60:7e:
                    75:fa:d9:d8:91:98:ad:24:be:bb:f0:33:96:72:ae:
                    49:91:72:e7:5e:17:4c:6f:67:51:06:7c:02:56:fc:
                    07:e3:2a:3c:dd:ef:29:1f:ba:64:ce:73:fe:a8:a6:
                    da:f3:2b:e4:5d:8d:20:53:8f:d9:e7:ec:22:8a:1a:
                    e7:88:59:8e:85:7e:9f:60:0f:83:e2:c1:56:6f:01:
                    d5:6f:42:0a:f4:79:5e:1e:39:0f:6a:d0:8c:d0:9e:
                    d6:10:a4:01:77:78:4a:bd:82:99:96:bc:c4:6d:38:
                    64:ee:a1:0f:88:7f:c1:3b:89:5a:f8:66:ea:e3:04:
                    55:89:62:83:9d:f2:e2:df:ff:53:5e:4f:bd:15:19:
                    19:95:b4:14:fd:c7:6b:46:50:34:96:f4:2b:89:14:
                    9f:92:3e:cf:62:72:39:dc:5f:12:a4:cd:76:37:64:
                    ae:10:29:64:b0:6f:02:e0:7b:07:d6:2d:32:99:35:
                    b1:e1:f4:be:85:e6:85:bb:9e:43:74:63:8a:7b:66:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:46:80:E4:11:DF:21:27:D3:4A:A8:70:B8:D3:D8:30:6E:9C:0B
            X509v3 Authority Key Identifier:
                keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:5c:fa:3e:1b:2e:ab:a6:4e:be:c4:7d:71:df:f5:b0:1d:
         70:47:8e:70:96:9a:ec:11:f0:ec:2b:6f:85:a7:5d:fd:16:83:
         4b:44:1e:92:9c:5c:51:a1:6a:ae:47:4d:b9:63:81:f5:19:eb:
         5d:1f:c3:27:4d:89:5c:02:84:de:92:53:fb:28:8f:5f:47:d8:
         7d:1a:12:75:bb:5b:ae:94:e6:6f:32:b3:04:24:25:b2:12:0d:
         91:ee:8d:c0:51:55:9e:24:7c:d5:07:32:fe:ac:6c:ab:a1:e8:
         8a:ec:23:11:98:06:14:5e:29:f6:9e:2b:de:a7:c1:9a:bd:3f:
         20:53:23:86:2e:59:b8:5e:61:5c:27:89:2e:dd:37:ec:d7:2f:
         ba:e8:58:4c:f0:45:a4:54:d6:a3:5d:d6:64:2e:24:b2:97:6f:
         8e:3a:b8:ff:df:c2:d2:58:1a:83:0c:e0:e3:ff:5b:1f:b5:2a:
         94:5a:60:92:71:bc:38:f1:df:42:78:14:48:33:05:65:b5:29:
         94:a4:bf:f0:66:38:61:66:06:33:40:19:26:c0:8d:31:c3:c4:
         da:1d:cd:78:15:4a:73:7d:9f:c4:fc:28:6b:26:46:3c:0f:fa:
         8d:6a:8e:5f:82:7c:0f:cb:1a:cc:ea:ca:89:fa:98:a6:64:0a:
         6e:a9:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:30:16 2025 by rpki-client