Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          C+7iPcIkb7TlESOOkN1IbRfqKeweKbvctlQ23cw6sgQ=
Subject key identifier:   13:43:0D:C8:43:89:F5:3F:2E:97:90:72:7E:8C:86:47:83:1F:43:C8
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          0183
Signing time:             Mon 27 Oct 2025 05:33:17 +0000
Manifest this update:     Mon 27 Oct 2025 05:33:16 +0000
Manifest next update:     Mon 03 Nov 2025 05:33:16 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: POXCkSAX2QmRftRAKQDVkL79il8DwrozEjkvGJl8wIA=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 05:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Oct 27 05:33:16 2025 GMT
            Not After : Nov  3 05:33:16 2025 GMT
        Subject: CN=68ff041d-b7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:1c:8c:48:d8:aa:4e:27:75:72:b8:53:bc:
                    2a:41:9a:30:76:e3:5f:28:13:44:e1:f9:16:2f:a0:
                    b0:45:78:e4:27:16:cb:36:38:7f:a0:a8:24:22:a8:
                    b5:29:ab:50:5a:3a:8e:83:bf:44:4f:86:29:76:8e:
                    ec:fe:1c:f3:cf:5c:63:74:cc:7d:89:72:b9:7a:49:
                    be:d5:c3:6e:d8:c0:7d:84:c1:f1:11:6c:32:34:6a:
                    11:88:6c:c1:15:44:26:d8:ee:5f:f0:f4:ce:65:f1:
                    87:b1:b5:a6:fa:51:34:84:1a:6e:b9:1c:38:1c:e1:
                    fa:11:83:53:7a:d1:9c:a2:64:2a:de:60:73:1c:c1:
                    ce:3e:65:20:52:92:00:0f:18:49:e0:54:29:8b:39:
                    c3:5a:06:0e:92:de:52:a0:17:d3:b6:9e:06:4e:16:
                    7e:83:7c:05:93:88:02:a4:7e:be:01:57:ca:2c:7a:
                    44:55:91:6e:e8:fe:a1:7d:83:21:18:7b:8a:de:55:
                    0a:6a:1d:52:cb:2b:6d:d3:cb:ee:19:92:56:25:17:
                    62:cb:b6:a6:fe:7c:f4:16:9a:b4:28:0c:ec:0f:be:
                    26:cf:15:32:ac:20:aa:ca:ae:11:f2:f5:c2:0b:60:
                    12:40:4f:ea:d5:fe:9b:bc:97:1c:25:c8:ee:8f:ea:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:0D:C8:43:89:F5:3F:2E:97:90:72:7E:8C:86:47:83:1F:43:C8
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:10:9f:f2:ab:e3:7d:e5:0b:b7:b6:dd:f6:89:5f:09:04:
         22:0e:62:25:5f:bf:10:ff:41:56:e3:f0:e9:2f:5a:c9:08:dd:
         eb:e8:61:e9:47:ed:67:ba:d4:2f:d0:ac:7c:fd:ce:01:46:85:
         0b:6b:7c:e2:97:71:e2:4f:43:1e:ee:98:65:60:c5:e1:e6:d9:
         0e:55:51:f1:8e:f5:26:6f:98:77:47:a3:30:ee:10:32:6a:66:
         15:f3:f0:cb:e9:34:2a:ee:39:f5:f6:43:ae:77:bf:1a:1f:c4:
         93:87:6a:fd:72:1d:0d:21:43:61:8b:e3:9c:e3:14:6c:c6:b0:
         8b:38:55:7e:20:51:fc:45:8a:43:bf:ff:a7:19:6f:19:31:93:
         1d:0e:81:a9:13:f9:07:d7:42:d9:8e:1c:3f:e8:8e:38:35:0c:
         80:59:88:84:2b:74:87:99:de:36:65:1c:f3:22:3e:e1:63:5d:
         db:1a:92:ff:dc:92:20:13:8c:d2:87:69:13:41:56:50:77:95:
         78:ff:dc:d6:11:63:5a:02:00:3c:08:37:19:ce:c0:cb:26:a2:
         80:e6:46:f7:45:95:e4:01:e4:8b:ea:dc:44:85:e7:25:2b:f7:
         77:7f:12:a7:84:3a:c0:f0:0c:04:78:5d:9f:df:4e:f6:aa:2a:
         27:9e:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:42:04 2025 by rpki-client