Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
File:                     fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json)
Hash identifier:          3lCG/x/M1mt7sgycTwIUZ06HablEd+3rwssX6+E0tsA=
Subject key identifier:   51:53:9B:86:CC:2A:1C:D3:DA:D5:D8:58:FD:46:30:25:13:D5:4C:F5
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Certificate issuer:       /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
Manifest number:          0179
Signing time:             Mon 03 Nov 2025 03:48:35 +0000
Manifest this update:     Mon 03 Nov 2025 03:48:34 +0000
Manifest next update:     Mon 10 Nov 2025 03:48:34 +0000
Files and hashes:         1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: vEpWwTbR2uiHwTvc3auhBBonx5RlmCCAuxrxXBtcvmI=)
                          2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=)
                          3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
                          rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
        Validity
            Not Before: Nov  3 03:48:34 2025 GMT
            Not After : Nov 10 03:48:34 2025 GMT
        Subject: CN=69082613-1885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:4e:21:24:7c:2c:b1:b7:02:3f:dc:b6:39:
                    d1:b1:d7:19:e7:d7:ec:53:be:72:8e:b7:b0:42:32:
                    c3:ec:94:aa:a7:6e:6b:54:84:d3:e6:e4:bd:b9:8c:
                    ce:c6:6b:26:7e:36:96:4f:c5:1a:e7:c5:75:10:b1:
                    53:a9:77:21:3e:3b:5e:62:17:dd:d7:e1:16:1d:75:
                    76:e6:9b:89:ac:8f:3e:e5:32:62:8a:3c:67:8b:4d:
                    18:1e:62:de:05:47:26:0a:14:23:7d:c0:a5:34:da:
                    b7:e1:19:ec:b9:0c:94:64:47:a0:f6:f5:5e:f8:b9:
                    f4:56:0c:b4:1a:51:a1:5f:99:89:7f:28:f1:60:89:
                    15:1c:0f:ef:79:76:93:67:b7:8c:31:1c:f0:d1:15:
                    45:12:2d:e3:ab:63:7a:2a:71:8c:df:45:37:29:10:
                    34:af:2a:78:92:99:6d:37:4d:bf:82:65:2b:c3:18:
                    54:cb:7d:5b:c1:9b:8a:ac:25:0f:f8:ba:7c:48:a2:
                    1d:ce:f8:97:07:ef:2a:72:19:7c:02:5b:5d:95:c9:
                    5c:61:0f:54:2d:58:fa:c8:bd:0e:9f:83:a2:ac:61:
                    13:98:fa:3c:59:02:a9:73:14:66:d9:48:d7:35:2d:
                    15:7a:0d:3d:41:2f:08:14:dd:a3:c5:05:32:73:18:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:9B:86:CC:2A:1C:D3:DA:D5:D8:58:FD:46:30:25:13:D5:4C:F5
            X509v3 Authority Key Identifier:
                keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:85:0d:d7:2a:f7:c6:36:c6:2d:51:6d:3d:c2:7e:92:3f:
         03:99:31:93:0e:18:2c:6a:71:ae:1e:bc:1f:58:c1:77:fa:d3:
         70:8d:e1:97:c0:67:d8:d1:76:44:55:bf:d7:92:b9:37:f0:6c:
         49:05:e6:7a:9b:fb:65:54:4a:a4:32:1c:9c:76:c0:ba:91:90:
         1b:be:e1:ec:c8:bd:c0:20:18:a7:32:fd:48:7a:99:83:6f:c0:
         90:21:09:e1:cb:13:d9:a3:38:9c:be:6f:89:77:80:be:77:db:
         b2:63:8b:e2:f3:53:68:95:10:b3:c5:f6:d6:80:b5:ef:b8:ec:
         8a:98:6a:46:0c:15:74:71:5e:4d:da:a6:f4:e0:88:4b:2c:a5:
         99:51:19:15:84:f5:fb:55:cd:de:d0:c9:45:f8:d7:46:90:88:
         58:11:f4:b3:2d:29:98:12:d3:d1:dd:89:2f:e2:1c:a8:67:d1:
         99:b8:fd:7d:79:dd:9a:24:51:98:29:62:fe:b7:1a:f5:2e:7f:
         36:55:0f:d2:ee:21:ca:9f:de:8a:b4:ee:dc:da:d4:ca:6b:49:
         9c:12:ae:d2:40:91:eb:f3:28:96:de:ac:73:74:38:ae:3b:64:
         93:24:61:ad:5a:7e:88:b0:d6:18:6b:70:b0:09:e6:f3:18:ee:
         24:9a:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:14 2025 by rpki-client