Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File:                     EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier:          sAuwf06s80SaG6YxGksCAbCgR6TCakxUuWRpudFpySY=
Subject key identifier:   F9:A6:BA:9F:DD:13:F3:36:1C:85:05:8D:FE:B6:65:5B:51:B9:F1:6F
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer:       /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number:          EF
Signing time:             Thu 23 Oct 2025 07:14:47 +0000
Manifest this update:     Thu 23 Oct 2025 07:14:46 +0000
Manifest next update:     Thu 30 Oct 2025 07:14:46 +0000
Files and hashes:         1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: 0M2VUa/jszslJ/9ysB756h2fCcfTq4Wxq+yJC3FYrrM=)
                          2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
                          rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 07:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
        Validity
            Not Before: Oct 23 07:14:46 2025 GMT
            Not After : Oct 30 07:14:46 2025 GMT
        Subject: CN=68f9d5e6-72ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:ff:c3:e2:a0:32:77:38:6f:52:d7:6b:57:
                    bc:0c:e3:2e:bf:85:b0:e2:c5:dc:0b:bf:31:12:35:
                    9f:86:c6:3b:d2:c3:4d:99:a0:1e:ca:0e:92:12:06:
                    ab:9a:54:ae:1e:ce:00:b3:1c:9b:18:0a:27:92:3f:
                    2f:b6:01:80:15:1a:e8:5b:2a:89:32:9f:ee:fc:22:
                    25:ed:67:b3:4b:80:44:47:9a:92:38:cf:fe:14:59:
                    47:10:81:61:85:c8:cd:6c:da:ae:f1:93:6e:56:63:
                    d4:f2:e3:14:0b:14:6e:d6:ca:07:42:81:16:16:97:
                    2a:68:df:de:dc:21:67:25:30:2d:8b:25:7d:66:df:
                    4c:65:4f:c7:db:73:6a:25:83:af:78:c0:24:4b:17:
                    25:15:0b:66:75:64:e8:bd:07:d6:70:99:04:87:4b:
                    b8:53:92:57:63:84:c4:e7:50:89:eb:e9:e2:6b:4d:
                    0d:59:9d:e9:f2:de:f0:b6:1c:e7:d3:16:6c:7d:51:
                    2c:b0:1c:18:62:38:62:fc:f5:ff:4e:48:b1:06:c0:
                    51:43:ae:b2:aa:d6:0a:89:1a:97:94:a8:ac:3e:64:
                    a5:d8:30:1f:be:d7:82:cb:98:ce:6c:29:0e:fb:7d:
                    aa:84:4e:9d:4a:34:a0:af:5a:86:2e:40:66:98:5f:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:BA:9F:DD:13:F3:36:1C:85:05:8D:FE:B6:65:5B:51:B9:F1:6F
            X509v3 Authority Key Identifier:
                keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:69:87:a1:a8:92:f9:6d:d2:bb:bd:91:c4:4f:ee:8b:ba:1b:
         6e:97:3a:4a:e2:1a:bc:95:62:38:7b:fe:a6:68:63:9d:9c:14:
         a8:88:91:0c:d9:ac:15:73:3d:b7:ab:62:d4:fe:35:bc:2e:ad:
         97:7d:48:a8:80:8e:7b:06:42:2f:2d:11:c9:aa:c9:dd:40:9d:
         19:8a:2c:7d:06:4e:47:b5:56:84:8f:8b:1d:ab:73:e1:37:e4:
         5a:03:2a:4f:df:3b:75:55:c7:45:61:26:ed:b4:7d:89:ae:fb:
         ce:93:7b:7f:30:09:6c:1c:91:f4:c1:be:87:9e:90:24:7f:bc:
         83:ab:49:69:7a:52:26:8c:21:dd:f7:f6:3b:3c:20:61:a8:7c:
         3c:5c:2a:34:8c:30:6b:8c:12:5a:62:9a:bb:0c:4c:63:b1:3b:
         9e:b9:03:20:00:13:b5:42:97:42:ba:03:f0:a6:8c:86:d7:bd:
         77:d7:ca:e5:03:95:83:6f:b2:89:3b:97:6f:dd:ff:68:71:d8:
         92:76:08:1c:94:6c:12:dd:c9:a5:0b:98:ff:7e:07:78:75:ef:
         09:c7:25:a7:48:d9:a3:1f:21:0f:84:5a:6a:a1:7b:2b:e8:25:
         bf:44:41:a7:a7:18:3c:97:4a:5b:27:ed:ff:85:39:1a:ca:d0:
         d9:6f:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:10:44 2025 by rpki-client