Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File:                     _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier:          W4BgYHkTGSL564rcooaPV4+y9CNyZNh2hU2lX45PKOc=
Subject key identifier:   DF:24:6B:4D:C6:1F:4B:BC:EA:B2:1B:E1:C5:D2:FF:2C:F1:36:41:08
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer:       /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial:       0859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number:          14EB
Signing time:             Sun 02 Nov 2025 18:14:12 +0000
Manifest this update:     Sun 02 Nov 2025 18:14:12 +0000
Manifest next update:     Sun 09 Nov 2025 18:14:12 +0000
Files and hashes:         1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: cPX55ksNCkylvjpHOOrJHyTw91Q/XFZe8CaBujxprI4=)
                          2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
        Validity
            Not Before: Nov  2 18:14:12 2025 GMT
            Not After : Nov  9 18:14:12 2025 GMT
        Subject: CN=69079f74-0403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:c0:b8:17:bd:77:fc:56:d1:1a:39:74:c4:
                    ec:b9:87:53:b9:c0:f3:9b:60:3b:95:7c:51:2c:0a:
                    bb:96:a3:8b:e8:ad:6c:82:c8:92:89:ec:4f:de:72:
                    09:3a:40:58:dc:17:d8:58:43:15:ca:3c:bf:97:93:
                    1f:e3:40:2b:2e:f0:4b:2c:91:a6:d2:b1:1a:7b:51:
                    da:51:04:84:de:0d:ab:9b:ad:c4:fe:6f:bb:34:df:
                    62:9a:44:ec:94:b6:b3:df:f6:92:b4:17:d4:01:5e:
                    38:a5:cf:ef:0d:2a:ec:7a:a4:0b:02:e4:7c:cb:d5:
                    7a:53:12:a2:8a:7a:52:6b:3e:1f:47:ac:97:81:36:
                    18:8d:00:b5:21:52:72:9f:59:40:c5:d1:4a:c0:e4:
                    cb:31:ad:df:26:78:6f:2d:1c:6d:04:ad:06:63:41:
                    c5:4f:2c:3a:ea:01:96:a8:ab:d8:f3:04:5b:99:31:
                    98:b3:08:95:4f:a1:82:cf:e4:64:68:39:b5:f3:44:
                    bd:c6:8a:09:79:a8:51:37:b5:43:69:ce:31:79:6d:
                    6c:74:c8:c6:e6:00:7d:a7:d8:57:0c:52:8f:df:c3:
                    22:e8:5b:94:80:1c:a4:64:6d:3c:63:ce:39:1b:07:
                    a9:e8:7a:b0:f7:eb:05:7e:c3:11:aa:82:67:c8:86:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:6B:4D:C6:1F:4B:BC:EA:B2:1B:E1:C5:D2:FF:2C:F1:36:41:08
            X509v3 Authority Key Identifier:
                keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:98:d8:85:eb:02:0f:e6:35:f8:e0:50:2e:95:bb:fe:57:
         38:1a:95:12:aa:e9:60:53:b8:77:0e:98:88:75:08:88:27:53:
         3f:9e:b9:17:5f:c2:e9:1d:9e:4a:0f:03:69:f7:23:8a:0c:d9:
         6e:46:91:6a:b7:73:3e:33:d2:0d:6a:2e:be:23:07:5a:17:54:
         a2:e4:dc:d2:3a:8d:74:ca:09:f6:cf:ec:85:2c:9b:d2:7e:da:
         3e:e5:99:fa:00:4d:39:07:f1:0b:1f:a0:15:77:31:ce:c3:f0:
         42:9f:a3:5f:c1:f4:72:17:25:6b:6a:be:1c:fb:65:c7:28:99:
         71:6d:5a:ae:f4:c2:0e:bd:55:17:27:5d:cd:15:3c:2b:5f:a2:
         6c:b0:6c:eb:bf:5d:d1:36:8b:a8:79:d8:d0:45:83:c6:eb:95:
         79:08:6f:e0:cf:48:55:d5:e8:c8:4f:c2:c3:fc:2f:98:94:70:
         0c:d0:e2:cb:6b:56:b7:88:fb:0d:59:8c:42:1d:9d:40:70:e1:
         f1:92:dd:3e:6e:1a:94:34:7e:d5:7a:35:f1:39:81:0d:06:f0:
         b3:15:93:18:65:19:49:a4:dd:80:04:c9:a1:e6:df:ae:62:b2:
         64:dc:e5:c8:7e:8b:7b:48:66:a5:20:b8:09:3f:82:ab:78:ac:
         c7:5c:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:27 2025 by rpki-client