Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
File:                     -SborqRks6WJBsCbrEbeMddAn2Q.mft (raw, json)
Hash identifier:          jmCgzvXywMBv+sZ4Daby1lBgMnBFWRhstFL5m6k8h40=
Subject key identifier:   1E:A1:1E:51:D0:00:01:68:F6:99:93:17:9E:F2:EF:A4:90:CE:E8:88
Authority key identifier: F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
Certificate issuer:       /CN=A91D8806/serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
Manifest number:          27
Signing time:             Mon 03 Nov 2025 07:41:03 +0000
Manifest this update:     Mon 03 Nov 2025 07:41:03 +0000
Manifest next update:     Mon 10 Nov 2025 07:41:03 +0000
Files and hashes:         1: -SborqRks6WJBsCbrEbeMddAn2Q.crl (hash: c+iKVj5P3vRY+tAznM7P+OtkANSc3Gr25ce36GFyTpM=)
                          2: 0A2186867CD111F0B302D85AC4F9AE02.roa (hash: nhRwGjDx0Fm5UM7mImMZBw38WV939OfcRi7SwP7Yv4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8806, serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
        Validity
            Not Before: Nov  3 07:41:03 2025 GMT
            Not After : Nov 10 07:41:03 2025 GMT
        Subject: CN=69085c8f-a653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:a2:45:ad:1d:d2:19:91:7d:e6:bb:f9:a4:
                    ab:ff:80:2b:bb:ad:ec:74:3e:20:7f:57:9f:39:da:
                    0d:d5:49:63:1c:af:8e:c1:7d:a1:94:43:06:a3:3c:
                    82:4d:12:06:f7:1b:da:c4:5f:45:7e:12:e8:fe:73:
                    ba:02:65:de:57:93:e9:f8:a6:90:11:26:a1:ba:7a:
                    f1:56:c7:fe:45:36:34:0e:02:a5:10:b6:2e:81:7d:
                    4c:56:b2:eb:ff:d1:d4:10:4a:27:42:c9:b9:1c:02:
                    09:fa:99:47:38:ba:84:78:fc:88:cd:95:9b:1e:7d:
                    d5:ba:dc:70:f0:c9:6d:1b:57:68:c2:83:b4:4e:d9:
                    e1:bd:af:46:be:c0:40:91:1f:b2:96:98:5b:06:ec:
                    eb:d3:f2:92:1e:1f:c3:95:ef:af:f6:35:4c:8b:70:
                    b1:dd:98:62:b1:59:80:5d:7d:6a:8c:f4:ff:34:d1:
                    d0:94:a9:26:00:96:b2:a1:f6:fb:09:27:8a:c3:8a:
                    8d:06:0d:c8:eb:2c:ce:23:76:09:50:db:c8:74:f5:
                    25:79:75:9e:55:45:f1:df:50:f7:fa:a2:93:0a:ab:
                    42:4a:1d:6c:df:ef:d9:14:3d:c5:d0:6a:3d:3a:ef:
                    f2:96:57:94:8c:dd:19:a6:3b:7d:cc:0c:97:fd:32:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A1:1E:51:D0:00:01:68:F6:99:93:17:9E:F2:EF:A4:90:CE:E8:88
            X509v3 Authority Key Identifier:
                keyid:F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7f:c3:6a:73:cd:d6:19:64:b1:a9:30:93:c4:1c:0f:cf:f0:
         65:ab:8e:27:cc:82:78:7b:e6:39:01:d8:b7:a5:6b:b7:b7:d8:
         a0:f1:57:8f:ee:22:ed:25:93:7b:c1:8e:ab:c6:fa:bb:41:9e:
         c6:14:ef:62:9a:81:35:51:46:90:49:61:33:47:04:b6:74:d9:
         65:e2:94:4f:9a:51:73:3d:e9:8a:a2:08:8d:d4:d0:7f:ce:6d:
         f5:55:5b:97:f7:30:da:82:36:71:68:0b:f6:17:b3:6d:c3:98:
         06:ac:97:26:40:02:51:9b:c2:67:6a:e3:a8:a8:43:73:bd:51:
         aa:18:4a:47:a8:45:ec:dc:31:85:c2:9c:d4:ad:e8:fd:b5:e6:
         25:e3:35:1b:39:fa:f4:aa:ca:40:2d:47:06:57:40:92:dd:67:
         54:1f:81:4c:25:e5:1a:c4:50:60:a6:6e:ff:73:18:38:14:52:
         87:64:d2:89:7e:05:89:f2:32:13:77:23:3d:cd:fe:89:f9:84:
         97:fa:f4:a4:41:78:af:51:7e:2a:16:5a:e6:17:36:47:0a:65:
         af:3f:1f:1c:a8:44:93:85:d9:94:d1:d7:eb:29:1a:44:ab:10:
         c3:3a:51:42:68:b8:93:fa:5c:91:c6:38:cd:02:51:2a:a2:6f:
         59:a1:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:07 2025 by rpki-client