Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          8ZjqsttpYMhpwiinjaj9iE17RWfXNeXrmIXFzd4GiRc=
Subject key identifier:   C5:9F:79:D9:B5:06:64:A5:1D:92:17:32:04:F5:A7:5E:D4:03:CF:60
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          03EC
Signing time:             Thu 23 Oct 2025 01:47:43 +0000
Manifest this update:     Thu 23 Oct 2025 01:47:42 +0000
Manifest next update:     Thu 30 Oct 2025 01:47:42 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: YBwLmUDdcb1cHzVzJCvldp2ULhxyZ6s7Z0lFWeuxT3o=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 01:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Oct 23 01:47:42 2025 GMT
            Not After : Oct 30 01:47:42 2025 GMT
        Subject: CN=68f9893e-f969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:63:db:be:f4:bd:7f:3d:d3:3f:5a:bb:ea:
                    f7:c8:78:50:98:c7:1a:5c:58:19:58:4c:eb:58:ce:
                    98:7d:d8:72:e1:e8:86:c2:07:52:4b:4c:44:37:10:
                    75:2e:f2:60:97:9a:5a:1f:87:1f:7d:71:71:33:ac:
                    84:5b:a0:8b:38:4c:eb:35:8d:b4:af:e2:55:27:d6:
                    da:b4:60:b4:7f:2c:6f:37:9c:18:4f:9b:02:07:45:
                    b3:72:ad:1d:36:5d:17:69:4e:c2:b0:98:5d:12:24:
                    7a:4a:2a:71:b5:4a:8f:3e:a9:33:79:d4:ab:f1:f8:
                    b6:f1:83:c4:0c:b5:65:a0:6b:1b:c0:77:c5:2b:f9:
                    d3:95:6a:e1:ca:ca:6e:11:1a:4b:dc:b8:4b:87:f1:
                    84:c8:c4:11:9f:cd:2a:55:5e:23:f1:3e:18:54:64:
                    0e:62:09:b9:04:ed:34:b5:b4:a8:22:b8:5b:85:fe:
                    7c:0d:75:0f:52:fb:36:3e:c9:30:f1:a7:b3:0a:6b:
                    95:73:dd:f9:4e:63:e8:12:7f:c1:83:24:1c:67:27:
                    3f:d5:14:2a:0c:d8:93:82:f3:b5:ff:b1:99:63:98:
                    0e:c9:81:dc:2c:56:8e:e7:e1:c2:4c:c2:b2:a1:a3:
                    6e:0f:0b:c9:1d:9f:cd:63:2b:9d:b0:e6:e1:3c:34:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:79:D9:B5:06:64:A5:1D:92:17:32:04:F5:A7:5E:D4:03:CF:60
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:59:15:dd:0b:c5:8f:fc:9c:f1:a9:22:fd:ef:ae:a6:6e:c4:
         8b:04:47:b4:f4:69:a1:42:88:e8:40:29:7b:c6:ec:0c:39:89:
         27:ca:33:7f:01:a0:ac:40:e4:6d:39:96:15:e4:30:12:0e:d0:
         a0:e1:4d:e3:30:eb:95:e1:e6:10:1b:5a:d2:54:68:b5:27:ea:
         dd:bd:ae:58:af:8c:3e:be:d7:0f:1b:aa:cb:b6:33:4b:3d:22:
         a7:68:a8:f1:a6:24:3c:b1:67:7c:27:a1:71:4b:44:27:2e:3c:
         09:b8:8d:94:da:b7:79:38:7e:c7:41:ca:b8:4a:93:1d:1a:a4:
         7e:93:e1:ef:9e:d0:56:07:3d:4d:53:20:3d:d8:90:fa:a7:b6:
         d7:8b:e8:50:c3:b0:3b:b7:34:c5:19:b0:f3:b1:b0:5a:10:e9:
         35:db:44:aa:60:80:65:2c:b1:66:ae:69:8e:f5:7f:73:23:ba:
         2e:15:29:f7:0d:ab:1a:d7:61:51:67:38:97:6d:11:a4:6e:02:
         04:ae:02:8d:58:07:ea:71:b5:bc:59:47:49:09:d3:36:e5:9e:
         f8:82:b2:86:40:81:77:e2:40:52:f5:6b:e4:24:22:86:c2:6f:
         16:bc:d0:70:8f:e9:a6:5b:70:62:08:21:20:83:2f:43:6c:e6:
         e2:30:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:43:28 2025 by rpki-client