Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File:                     7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier:          1794Q4jMvadrjsOWIw1MEwp5pz1QyaKr4B8eENyoZ4w=
Subject key identifier:   40:95:5A:77:62:6D:7B:EF:F0:88:D4:09:7B:29:A4:7A:EC:C6:F6:94
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer:       /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number:          0109
Signing time:             Mon 03 Nov 2025 05:01:34 +0000
Manifest this update:     Mon 03 Nov 2025 05:01:34 +0000
Manifest next update:     Mon 10 Nov 2025 05:01:34 +0000
Files and hashes:         1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: B1LOJ1P8rxFh4CdOksrRuOzSeqRMFFx6qo8Ua/uSTgI=)
                          2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=)
                          3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
                          rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
        Validity
            Not Before: Nov  3 05:01:34 2025 GMT
            Not After : Nov 10 05:01:34 2025 GMT
        Subject: CN=6908372e-6229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:c7:1e:29:1c:4e:03:5e:39:be:93:a2:d1:
                    c1:3a:82:c5:e8:12:fb:01:19:55:4e:06:30:10:b3:
                    b2:34:de:6f:54:a0:b3:f2:ee:e1:5b:16:52:f6:a4:
                    94:4e:d0:5c:50:4e:2e:6a:cd:77:2f:45:2f:4a:20:
                    09:c3:fe:b4:83:b6:33:7e:64:d6:6f:12:54:ad:35:
                    28:5d:a8:da:f8:25:37:da:93:b7:4c:0a:ce:c8:c2:
                    d0:40:30:4b:b9:59:a0:73:e1:6b:85:fb:59:d5:96:
                    fa:fc:a5:31:05:c4:0c:1e:b6:17:76:66:6d:87:4e:
                    09:b9:f1:26:90:60:c4:42:40:54:03:78:7b:bc:ba:
                    aa:4a:ad:4c:d7:6d:25:6a:a7:e8:58:cc:c7:fd:3d:
                    fa:b0:de:c4:88:6c:7e:3f:ba:b2:fa:98:04:cc:9a:
                    c7:42:cc:b4:85:4e:5f:47:1a:ea:d5:d3:b6:6e:32:
                    d2:27:fb:2e:fa:a6:f1:6f:b5:81:87:45:54:95:3d:
                    dd:90:81:3a:01:01:d1:ad:d4:a1:04:15:6b:61:e9:
                    c9:bf:6b:59:5a:25:b4:a1:42:05:ff:6b:a1:71:be:
                    af:98:0a:03:c2:18:49:61:2d:fc:c3:e5:39:b9:be:
                    6a:3b:f4:e0:4b:f6:42:11:61:99:45:54:17:0c:ce:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:5A:77:62:6D:7B:EF:F0:88:D4:09:7B:29:A4:7A:EC:C6:F6:94
            X509v3 Authority Key Identifier:
                keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:6d:80:a3:35:9c:61:2a:57:38:94:44:f8:af:63:34:d4:
         11:ea:8f:89:5d:88:7e:79:dd:7b:8e:35:d2:81:86:39:59:85:
         94:0a:fc:e9:c8:95:45:71:3a:c3:4c:ba:e4:0c:3c:1a:af:01:
         56:d8:6a:b0:e3:40:d9:65:d7:08:14:47:bd:04:86:2b:c5:2e:
         24:ab:30:66:1d:e0:80:e2:14:f1:c1:7d:8c:42:4c:3c:58:c8:
         ea:f1:9c:2d:ca:ac:34:61:7e:4d:5f:41:1b:f0:19:7c:f2:40:
         4a:46:49:b1:dd:86:bc:db:69:d2:11:ae:e5:30:f1:f0:c7:49:
         a8:21:42:32:07:66:92:06:e7:8b:b0:a8:20:8d:e4:19:48:e3:
         36:6e:61:5a:9b:dc:21:f2:4a:44:ec:18:2c:71:4a:21:dc:e3:
         07:08:68:2e:0a:96:c2:7a:52:22:a7:a7:40:81:bd:e2:d0:1d:
         36:cc:fb:bc:c3:8c:88:28:a9:10:98:4d:60:d8:e1:b1:88:71:
         ee:c6:f3:d3:3e:7d:cb:59:bc:88:31:38:0d:18:f8:8d:a7:83:
         70:4a:20:55:ed:7b:8d:3e:53:81:4c:83:4a:b8:35:16:b6:27:
         90:e5:9d:b8:f5:73:9a:59:a9:1f:40:9c:c2:5c:df:c8:64:7f:
         3a:c7:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:17 2025 by rpki-client