Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File:                     MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier:          P2z1YAFrqPslNGbOFZXnOzfQMTaruo+Bj6rSVT8QBls=
Subject key identifier:   15:C5:20:EE:DE:DA:E6:6C:69:2F:E2:3C:B2:78:C2:EE:74:EB:F2:28
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number:          0869
Signing time:             Tue 04 Nov 2025 20:42:00 +0000
Manifest this update:     Tue 04 Nov 2025 20:42:00 +0000
Manifest next update:     Tue 11 Nov 2025 20:42:00 +0000
Files and hashes:         1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: QQ7UqrMkkyzV/MzV/4YIRZ/nyT4uX90kXZVtpcUsXcY=)
                          2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Nov  4 20:42:00 2025 GMT
            Not After : Nov 11 20:42:00 2025 GMT
        Subject: CN=690a6518-bafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:45:e9:35:de:e9:00:69:88:20:22:f7:91:
                    22:d9:dc:71:1e:97:db:cc:e1:eb:67:99:b4:b8:6d:
                    16:66:4c:19:0f:e9:1c:95:7a:a6:3f:3f:57:b8:81:
                    ba:21:3b:ea:35:ed:33:fa:99:b0:64:8a:27:48:c7:
                    13:af:b1:d9:8b:ac:c9:de:30:22:b6:c4:f2:d5:e4:
                    d5:f9:0d:b3:b1:3f:5e:31:69:cd:ea:e1:14:cc:41:
                    f9:92:56:60:c0:79:1b:0a:ca:3e:af:7d:18:94:65:
                    8a:0e:94:64:e2:5a:36:40:30:16:a6:c6:3e:d0:b9:
                    45:9a:b9:d5:f0:ea:54:ce:b5:fd:86:b1:07:8b:2e:
                    61:0c:6f:18:33:5e:52:ef:21:f3:dc:70:a9:3e:c3:
                    af:d3:bd:0a:89:1e:44:6d:71:84:06:03:e7:8d:ef:
                    74:ce:34:c5:99:53:6f:f2:f2:f4:d8:26:38:a3:91:
                    f7:a7:9a:ef:8c:8c:6c:e0:e6:77:bb:75:fe:f6:5c:
                    b6:f3:ed:0d:2d:72:59:c1:c5:b5:73:ff:ed:c1:db:
                    38:be:4d:59:2b:de:d6:51:04:e7:77:9f:ab:76:8b:
                    ad:e7:dd:75:89:8a:a7:3d:24:bb:9a:7c:63:6d:5f:
                    06:05:87:69:a4:49:48:11:fa:0d:b6:8b:1c:f2:15:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:20:EE:DE:DA:E6:6C:69:2F:E2:3C:B2:78:C2:EE:74:EB:F2:28
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:52:03:16:70:15:0b:47:1a:88:4d:3d:b7:1c:f9:9e:ea:cb:
         d9:92:28:c0:92:3b:9b:e5:0d:f9:a9:d4:54:94:f0:39:79:58:
         6f:e1:bb:3a:c2:35:af:30:18:9e:bf:6b:3d:5e:1d:aa:b4:fd:
         f7:21:70:de:98:08:36:fe:89:fc:96:48:80:1e:9d:5c:e9:d2:
         65:1e:b2:ab:b0:1f:6d:e3:99:ef:d5:f5:d4:bf:e7:3b:29:e5:
         ae:d9:cb:c4:8b:a0:46:43:eb:29:b1:3b:6e:e7:9b:7b:a6:b1:
         78:fb:5a:e0:c8:da:67:1f:ea:e1:72:41:ae:1a:95:2d:8b:65:
         a9:15:63:22:9e:e8:84:84:5f:a5:cd:1b:2c:b6:1d:e3:85:e9:
         74:6f:3e:21:33:8b:41:74:19:f5:80:c9:22:dc:c4:69:43:2c:
         de:d2:a1:84:61:f3:b1:2a:7f:69:7f:90:82:7c:3d:d1:bd:7b:
         6c:62:3a:1f:85:d0:cd:3b:98:c8:5a:b5:bd:5c:c7:d4:93:46:
         a5:a0:f6:9a:fb:59:28:37:0a:bb:19:8f:eb:4c:19:c0:97:51:
         bb:93:83:eb:ea:7a:20:1a:62:53:53:a0:94:89:2a:b3:2f:5a:
         0b:74:28:20:23:49:8c:82:1c:c2:98:9d:cd:8f:71:49:37:26:
         86:5b:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:29:51 2025 by rpki-client