Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          xt9ZwhY7y8AjtagF+yQA1iC2+iqFy9ip2M0xlPcjYTU=
Subject key identifier:   A3:EB:12:D7:E8:68:94:84:47:43:6A:40:BC:E3:8C:2E:DA:49:C2:AD
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          64
Signing time:             Tue 09 Sep 2025 07:12:55 +0000
Manifest this update:     Tue 09 Sep 2025 07:12:54 +0000
Manifest next update:     Tue 16 Sep 2025 07:12:54 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: Sih6tsqiFDPH/wU41K469k5Hzjc7Mh5bYYqGi04QpoQ=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Sep  9 07:12:54 2025 GMT
            Not After : Sep 16 07:12:54 2025 GMT
        Subject: CN=68bfd377-887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:ea:e1:63:dc:ef:4a:86:45:82:79:bb:f8:
                    0c:f1:74:73:42:2a:0b:b2:0a:d0:08:14:2d:ce:06:
                    af:b9:c1:bc:94:91:dc:11:57:bf:61:99:8b:02:8d:
                    5b:fc:b6:a0:2a:60:e5:67:38:22:46:a7:8f:1c:09:
                    28:c3:64:07:d5:cf:df:e0:d7:e9:e3:61:0e:20:fd:
                    26:ed:f8:8b:10:fc:e4:79:37:01:c0:b8:d5:42:3f:
                    ff:06:b0:c9:4e:73:e5:78:dd:6e:20:59:2d:16:bb:
                    7e:f1:80:6a:6f:e5:ee:f7:06:4b:f2:86:58:bb:5e:
                    a2:a8:19:df:19:df:c4:af:06:17:75:ee:a5:45:bd:
                    76:67:b8:d0:1d:94:e1:01:35:81:a7:9f:d7:d3:3f:
                    f3:26:42:47:b1:68:83:7e:29:ff:20:c9:2c:84:cb:
                    75:a9:75:e2:11:34:98:1d:04:03:e0:b9:82:95:4c:
                    5c:60:26:7d:5d:d1:bc:58:72:c3:ed:2f:63:41:77:
                    bf:4c:a8:e7:bd:36:cd:48:95:6e:a1:31:b5:47:ee:
                    52:e7:57:f1:9b:1e:18:9d:4a:06:c1:8f:a1:8d:ed:
                    b5:25:44:ed:87:53:22:de:54:a7:90:aa:e1:1e:56:
                    2a:d0:1e:ad:b8:fd:20:0f:2d:83:84:23:71:0f:2a:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:12:D7:E8:68:94:84:47:43:6A:40:BC:E3:8C:2E:DA:49:C2:AD
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:51:b8:c1:4c:1b:fa:e6:3f:25:c8:ea:76:a9:ce:c3:16:
         15:1c:30:3c:06:79:09:21:80:c3:73:22:12:50:d1:06:cc:e6:
         6e:02:6a:13:41:20:7b:0a:3d:2e:90:89:23:1e:f0:3d:c5:fd:
         e6:7f:4e:11:b7:2c:75:ef:78:41:d9:20:8b:d1:58:d2:a7:7d:
         40:cd:07:4a:48:9d:af:8c:95:80:9a:02:52:fc:d7:99:bf:73:
         00:67:34:0c:91:50:c0:9c:11:05:6f:32:e5:06:cd:04:46:f3:
         d6:9c:42:b8:e7:c8:a6:9f:45:7c:c4:33:8b:bf:b2:90:e3:08:
         19:dd:f1:3b:63:2e:43:14:7c:e2:64:bc:b6:06:f9:c2:84:3c:
         87:db:d1:38:54:c5:ac:71:bc:f8:db:a6:6a:be:76:e2:4c:60:
         9d:ce:c7:f8:57:f5:02:8b:a4:fe:6d:d8:c7:fb:35:24:f4:18:
         23:2a:2b:66:ae:2e:2f:2b:74:9d:ab:5c:6d:1f:78:f7:ae:f5:
         89:39:07:73:e1:34:cd:13:d1:f9:7e:34:02:f3:a8:7f:9b:2a:
         41:ab:ac:97:50:ff:07:2b:17:e7:41:63:d5:7d:67:42:06:b8:
         11:90:61:6d:06:6c:07:ec:2f:60:cf:9c:84:14:f5:12:9b:e1:
         6c:65:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:19:46 2025 by rpki-client