Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
File:                     HsZtkG95Qt87d7_e3f0An-sr_SE.mft (raw, json)
Hash identifier:          fi4zLdXFQ8nDyHhgPxVaX4aK3VL6DMkAvq2U4DHam8g=
Subject key identifier:   D8:F9:A5:FF:BD:E0:91:38:3C:92:6A:31:D7:5A:9A:25:B4:15:FD:8B
Authority key identifier: 1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Certificate issuer:       /CN=A91D4781/serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
Manifest number:          0F
Signing time:             Mon 03 Nov 2025 07:57:31 +0000
Manifest this update:     Mon 03 Nov 2025 07:57:30 +0000
Manifest next update:     Mon 10 Nov 2025 07:57:30 +0000
Files and hashes:         1: HsZtkG95Qt87d7_e3f0An-sr_SE.crl (hash: XDS2hm3XzCggaV04IQfC4spYIdCMKdDSnISp5VsMjIU=)
                          2: B2D021C8A55A11F094B38083C4F9AE02.roa (hash: y/V1QRbYCKw+U4t4QASRjqSZUaC3x4XO8OAQeMFDOTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
                          rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
        Validity
            Not Before: Nov  3 07:57:30 2025 GMT
            Not After : Nov 10 07:57:30 2025 GMT
        Subject: CN=6908606a-4f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:3e:b1:90:61:cd:49:f7:08:39:e0:40:1b:
                    dd:e4:0d:22:8e:f1:f0:66:13:77:67:64:71:32:22:
                    5b:d8:bb:fb:4c:be:88:73:84:d0:66:d4:2f:fb:50:
                    ef:b9:58:bf:2d:08:78:c2:37:85:a8:7c:b8:7d:53:
                    be:cb:a4:ec:4b:53:ab:af:a6:68:49:c9:2c:24:a5:
                    f6:6d:a5:af:89:c5:02:1f:e2:90:a4:64:46:26:b1:
                    68:9c:84:03:4f:ee:48:18:d6:d7:1c:08:dd:38:e6:
                    84:f1:b4:5c:96:3d:b5:3c:87:a9:ad:8d:94:16:d4:
                    19:ff:7b:91:b3:9f:61:4a:c0:81:8d:5f:a9:47:9f:
                    d8:64:36:d3:a4:c3:82:66:12:d6:66:27:77:6a:1d:
                    26:67:62:8c:de:c1:75:84:b0:59:d8:9e:88:d6:18:
                    66:92:88:76:12:9d:66:8a:bf:04:ff:df:4a:4e:f9:
                    cf:7c:5f:16:85:96:50:5b:b4:5b:b6:d6:3f:af:23:
                    b8:55:57:7f:ba:8d:d5:6d:3e:6b:d4:6c:53:78:3f:
                    ca:1e:4d:34:df:d5:45:2e:ef:b0:f1:2a:c8:2d:6a:
                    30:3b:96:8b:a2:80:be:96:6c:64:f5:a9:b1:38:65:
                    1a:8e:0e:1d:b3:12:56:e6:63:95:e5:ea:30:66:39:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:A5:FF:BD:E0:91:38:3C:92:6A:31:D7:5A:9A:25:B4:15:FD:8B
            X509v3 Authority Key Identifier:
                keyid:1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:d9:bb:55:19:88:3c:98:35:2f:bf:3e:22:dd:f8:82:86:
         c1:78:61:df:85:a8:7e:e3:ba:cd:70:4f:49:36:f0:00:61:c3:
         74:fc:a7:a7:74:75:90:56:ae:a0:5a:c5:e1:b5:3f:21:75:cb:
         7e:e5:53:3f:8d:3d:74:9f:a9:cf:9b:88:5c:50:fd:cd:89:d8:
         9c:a1:14:90:49:b9:08:28:cb:52:7b:2a:41:62:9d:4d:5e:d4:
         9c:19:6a:47:a6:ec:df:eb:12:ff:26:45:a0:d5:02:6f:49:82:
         a7:60:3d:b7:fe:d3:bb:e3:82:81:63:dc:cc:58:85:68:03:2e:
         ea:48:fc:8c:b0:28:97:69:90:74:39:32:6e:0a:dc:6c:67:ce:
         14:d8:62:91:a1:e4:a0:e1:3b:23:a3:a7:f3:ee:ed:95:3a:4d:
         df:ff:cb:ca:ea:2f:e4:34:f0:75:df:44:dd:65:1a:0c:0b:9c:
         f8:ff:93:ad:38:13:12:4b:a1:62:d3:7f:f8:cf:bd:7a:f3:2a:
         b2:be:d9:d4:1f:45:52:44:d6:a1:63:fe:68:17:1a:d3:69:6d:
         53:33:bc:97:d1:c3:70:60:63:b4:6c:5e:16:a4:f3:4f:34:c6:
         5f:bd:1e:87:62:93:01:89:36:4f:69:b0:ba:69:c8:8d:f2:a8:
         18:a8:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:17 2025 by rpki-client