Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File:                     tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier:          7sKFIKcXyGkfTYVXkH4LiRbqoCnDrGhKpLlvdm/9PqI=
Subject key identifier:   20:AF:7A:75:79:65:F2:61:5A:46:3F:FB:81:00:15:19:26:E9:8E:81
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer:       /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number:          0363
Signing time:             Wed 29 Oct 2025 00:42:27 +0000
Manifest this update:     Wed 29 Oct 2025 00:42:26 +0000
Manifest next update:     Wed 05 Nov 2025 00:42:26 +0000
Files and hashes:         1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: +dLb1o2zG0DJvZApyJmtqCtpGZ/QtHHv4lrZ/pTKOmk=)
                          2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: zdS6UJyOMrd7sf5VOERZBIPIuQqnE9ZtKbgVQwDnTWY=)
                          3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: IR9NDV3s6nVBqEN4pn9ElTet8vYTjGUIWmOXsyvq9Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 00:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
        Validity
            Not Before: Oct 29 00:42:26 2025 GMT
            Not After : Nov  5 00:42:26 2025 GMT
        Subject: CN=690162f3-1ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:aa:78:8f:f7:8e:ed:5c:4b:ba:e7:f3:8e:fa:
                    49:f9:e6:df:5a:51:69:ae:22:65:65:ec:87:ea:56:
                    01:00:1c:cc:2c:55:cf:d9:36:1d:06:22:2a:e4:e4:
                    f1:7d:07:ff:f1:b6:da:45:cf:91:de:cf:35:db:b5:
                    8e:10:f0:a9:3f:4d:36:e8:4d:f8:49:93:68:64:23:
                    8f:be:ff:3b:da:91:91:7e:c6:2c:84:f8:4e:b7:f8:
                    74:0f:c3:a4:c9:02:7b:00:e5:c2:28:dd:b9:9c:2b:
                    c6:dd:93:58:3d:4a:0e:8f:8a:20:11:58:38:19:4b:
                    2a:23:96:af:a9:0b:3d:a1:d1:69:51:a8:e1:8e:77:
                    df:d4:88:30:13:1f:e6:ed:5f:f8:ed:bd:c8:53:36:
                    84:c7:86:81:3d:ab:48:39:8a:06:6f:ab:4d:c5:c0:
                    42:85:b4:20:55:fe:3e:06:ad:36:43:35:c8:13:2d:
                    6e:50:55:bb:f4:ac:db:f9:f7:43:0a:55:15:58:00:
                    2b:42:5f:1e:63:8a:13:f2:1e:7d:7a:e6:8c:ea:24:
                    ea:7d:a9:d6:41:b2:78:5e:1b:fd:80:9c:d9:00:6f:
                    2f:a6:47:2c:af:6a:0a:07:ef:6e:bf:9f:7e:76:f2:
                    bc:29:54:65:7a:7d:93:e6:d3:98:e9:45:7d:34:ca:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AF:7A:75:79:65:F2:61:5A:46:3F:FB:81:00:15:19:26:E9:8E:81
            X509v3 Authority Key Identifier:
                keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:c6:6c:ea:de:44:54:11:87:23:d8:ab:c2:01:fc:a7:e3:
         0d:8e:86:80:29:02:a0:e3:1c:6b:9a:b8:ad:a5:6d:21:4b:5f:
         d5:31:26:86:c4:a7:68:59:29:81:1f:9e:44:c0:0c:7d:d3:e0:
         87:a8:10:87:82:3e:9d:c8:82:b5:3e:88:71:93:22:74:72:71:
         54:e1:e3:f0:40:ac:ed:b7:ee:10:79:8e:bd:ed:68:b1:8d:47:
         42:ff:de:65:25:b6:1a:a3:a3:55:39:71:c6:b2:e0:ec:94:89:
         fc:1c:79:37:b9:f5:28:08:a5:c1:1b:c2:44:5a:fc:71:16:bc:
         e5:2b:c3:47:d8:c8:69:91:28:65:62:e8:02:dd:5d:37:4a:83:
         14:93:06:8a:80:00:bf:ca:b6:fb:16:d2:b6:fc:83:67:ce:76:
         ec:26:c1:cb:34:67:5c:d8:20:80:2d:d2:95:c7:c3:63:b6:ed:
         94:00:08:cf:86:c6:9e:4f:dc:44:80:ab:c2:0a:54:dc:6c:e6:
         85:8b:31:84:0e:0b:ae:2e:f9:c7:b6:62:00:ad:aa:4b:66:6a:
         c7:69:29:67:16:90:61:59:61:9b:26:fe:77:90:39:90:39:b7:
         e7:2b:df:ff:a3:f4:3d:29:45:48:a5:8a:8a:cc:36:60:ea:91:
         cf:73:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:59:06 2025 by rpki-client