Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          YsQSqg+QGH8OYGdriw72A7Nj6nHe0QW99233FDQ9AJw=
Subject key identifier:   31:17:2B:2B:BA:A2:D9:BD:57:48:00:FE:2D:DF:19:02:DE:DB:AD:94
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0F00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0EDE
Signing time:             Sun 02 Nov 2025 17:39:39 +0000
Manifest this update:     Sun 02 Nov 2025 17:39:39 +0000
Manifest next update:     Sun 09 Nov 2025 17:39:39 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: Ex7YoHA80/TdPpyu2MhIA5G+T4OC2DvENe4xqsS5O1g=)
                          2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=)
                          3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=)
                          4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3840 (0xf00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Nov  2 17:39:39 2025 GMT
            Not After : Nov  9 17:39:39 2025 GMT
        Subject: CN=6907975b-d2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:9b:4b:26:e3:2d:8a:b1:15:8d:c4:d9:82:
                    1b:0a:79:6f:c9:74:cf:4a:30:7b:16:e6:93:df:3c:
                    f6:6a:f4:0d:61:6c:08:d5:35:65:aa:fe:b7:03:46:
                    8b:97:4f:e9:d8:e1:36:a7:f5:db:f0:2b:33:4f:73:
                    47:df:0c:70:5f:c9:60:57:c4:18:d5:28:ce:77:e0:
                    99:9c:c3:22:99:2a:4d:ee:43:29:7b:f7:18:e3:c8:
                    32:52:e5:e7:66:7a:52:99:f2:05:a5:32:80:72:ac:
                    2c:e7:a2:50:f7:08:71:83:ff:70:37:f1:5f:fb:88:
                    c3:bf:86:52:18:cb:a4:3d:03:49:d4:31:26:ee:1e:
                    60:6d:12:97:17:01:f3:74:df:c0:e6:ee:7d:03:fe:
                    0c:91:97:a6:25:85:b2:25:93:11:7d:32:f0:1c:3d:
                    9a:a5:d6:c3:38:6b:84:36:19:d3:33:47:6e:69:49:
                    1d:6a:5f:d5:78:f1:4e:6c:5c:0e:73:02:17:d5:c3:
                    44:27:af:15:f9:fb:c6:8f:b9:cd:7c:d6:f9:f8:7c:
                    25:37:99:45:2d:13:55:9a:95:fe:34:11:ad:1a:6d:
                    27:54:10:a6:07:e7:b7:60:7e:1a:31:6c:1f:78:31:
                    83:d0:f2:66:c9:cd:78:d2:c0:54:c2:96:db:4b:7c:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:2B:2B:BA:A2:D9:BD:57:48:00:FE:2D:DF:19:02:DE:DB:AD:94
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:4c:e1:e9:0b:c3:95:a3:4f:ec:27:b4:f1:9f:18:9a:5f:c5:
         09:46:3c:8d:b2:31:99:61:fd:3d:9a:a2:ea:d6:9e:39:05:f3:
         3c:17:ea:c2:be:89:9b:35:e5:0d:ab:ec:d9:0e:01:59:c5:10:
         cc:7c:8c:c1:5f:87:b8:ac:77:24:b2:a6:8c:00:0c:2c:fd:c4:
         b2:97:bf:3c:91:13:48:5d:86:b2:2f:0a:2e:e0:01:ec:fc:09:
         70:c4:fc:c0:8f:d2:19:a4:14:53:b5:32:bc:4f:16:21:3a:8b:
         9a:ce:41:05:68:b0:e0:59:aa:56:8a:4b:32:ae:82:bc:af:62:
         0d:20:8e:38:08:32:e8:84:92:cd:94:58:c6:1e:ef:fa:94:2e:
         6c:1c:fc:3d:64:32:25:e6:15:f7:03:0c:94:3b:b0:84:10:b3:
         15:88:7f:2c:4f:6e:94:5d:be:01:4d:05:39:28:13:89:b0:73:
         0d:82:c2:21:67:63:3e:f4:35:e9:a4:d3:b5:a0:93:28:98:8e:
         e8:56:f3:2e:2b:c8:76:61:d2:8e:d2:1f:89:35:37:fd:56:d3:
         04:57:82:68:0a:c7:92:29:fb:e9:61:6f:20:25:cc:38:42:cd:
         cb:0a:98:bf:fb:50:eb:7f:c0:79:4e:46:4f:66:04:ae:4f:61:
         7c:a9:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:15 2025 by rpki-client