Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
File:                     SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json)
Hash identifier:          lCrwbD+oZhQfFQSwXpUbKPlp1QU4KteXXfcXzNXXXKk=
Subject key identifier:   F5:40:57:18:C7:DA:C1:02:6A:EF:6D:81:D7:3D:12:15:E4:FA:8B:84
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Certificate issuer:       /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
Manifest number:          04B7
Signing time:             Wed 05 Nov 2025 00:01:42 +0000
Manifest this update:     Wed 05 Nov 2025 00:01:41 +0000
Manifest next update:     Wed 12 Nov 2025 00:01:41 +0000
Files and hashes:         1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: GcXDn4gN1L+EmkVTDB4zsT7qV18JT1MTQm+JRv48H9U=)
                          2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
                          rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
        Validity
            Not Before: Nov  5 00:01:41 2025 GMT
            Not After : Nov 12 00:01:41 2025 GMT
        Subject: CN=690a93e6-43a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:4a:90:25:a3:6a:5a:bd:0f:ed:d1:da:a5:
                    fb:80:b7:cd:fc:dc:a0:e7:12:cb:bd:2f:33:93:98:
                    d2:d8:c6:7c:31:71:7a:58:b4:be:f5:ed:84:67:ad:
                    6e:6a:b1:85:5f:65:91:c9:de:82:d3:31:e0:f6:87:
                    08:a9:d5:69:29:42:ef:4d:b6:66:b4:a0:64:a8:d0:
                    be:e0:6c:01:00:b4:b3:22:ce:fb:e9:aa:b9:3c:bb:
                    0b:91:f1:83:9d:84:cb:47:89:90:54:29:1d:1b:ab:
                    f0:07:7e:80:54:14:fb:e5:50:74:4c:ed:cb:32:68:
                    93:73:fc:ae:6e:83:20:73:9d:8f:cc:22:93:0f:f4:
                    72:88:93:0f:cf:ae:b6:ce:63:fe:53:d6:5b:b4:92:
                    c5:f9:96:1a:0e:a5:2e:b7:ec:4f:58:a1:e9:9e:6c:
                    b9:b6:98:49:51:f0:87:a6:cc:9c:68:1e:15:50:77:
                    b2:11:5f:cc:ed:50:4a:d9:c9:be:0a:7a:f5:18:0f:
                    cb:f6:52:dc:7b:94:cf:60:cf:99:89:8d:b8:1d:5a:
                    97:c4:21:39:8d:9d:33:36:bf:fc:7a:29:b9:d4:aa:
                    47:10:64:a6:00:20:29:c2:43:cf:58:b7:ba:6a:ad:
                    a1:38:35:7a:1e:a3:8f:b6:0d:5a:a7:48:5c:62:32:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:40:57:18:C7:DA:C1:02:6A:EF:6D:81:D7:3D:12:15:E4:FA:8B:84
            X509v3 Authority Key Identifier:
                keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e3:fa:88:25:b1:1b:a3:82:d5:bb:f7:23:80:97:b7:e5:6b:
         d6:a2:4c:cf:51:64:9e:f9:75:24:12:63:9c:63:d1:78:eb:d0:
         e3:14:9e:cf:52:e0:8e:25:e2:b4:a1:4d:67:40:78:58:67:6b:
         8e:db:8b:3b:46:54:b4:6b:a8:4b:57:3e:08:71:28:28:2a:23:
         eb:f0:87:ab:c5:21:7f:36:55:ac:0b:56:c0:86:b4:c1:39:f9:
         98:f7:20:96:27:17:f2:24:2c:a7:fe:49:70:b6:26:a7:a5:94:
         9f:14:6c:e9:14:2d:e3:05:7f:8e:6c:24:87:ec:1f:1c:d3:42:
         0f:8e:6f:76:5e:aa:be:c4:b2:ef:a3:58:66:89:ec:8d:6b:76:
         cb:7f:03:4c:85:d8:22:d5:a9:07:12:40:f4:8c:e6:a4:75:db:
         1c:08:71:76:17:00:62:1a:30:34:fb:7d:d4:4c:b2:8f:24:d0:
         d3:4b:4d:d2:71:df:6d:fb:de:48:d0:b0:c6:c6:7b:ca:ea:37:
         a8:38:b4:80:fd:6f:b6:6e:b1:dd:d8:81:ca:7c:54:c2:d2:5b:
         c2:1b:b8:b2:1f:7b:86:ca:62:ac:8e:98:10:b1:70:3c:2d:fe:
         0f:d7:be:10:e2:e8:a3:ef:6d:41:4f:4f:d8:46:43:8b:52:be:
         2f:cf:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:27 2025 by rpki-client