Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          Kl7AYzYUprvqbszBBfz17BkSQVpgAhPrpct054250jI=
Subject key identifier:   66:6C:9B:49:B4:5F:05:1A:9A:18:12:74:79:26:1C:0E:E2:02:72:0D
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       082F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          0826
Signing time:             Sun 02 Nov 2025 20:48:00 +0000
Manifest this update:     Sun 02 Nov 2025 20:47:59 +0000
Manifest next update:     Sun 09 Nov 2025 20:47:59 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: 5Lf1SLIKvloYNALrk04+CDefstUsoJc7rGpi/9jZQuA=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Nov  2 20:47:59 2025 GMT
            Not After : Nov  9 20:47:59 2025 GMT
        Subject: CN=6907c380-c4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f7:bc:b5:9c:61:ef:f1:f2:ac:cd:72:28:ef:
                    19:a6:a0:87:bb:38:0b:09:4b:93:5f:d6:10:ce:43:
                    fa:0c:6b:45:c8:01:02:cc:86:9e:8c:dd:7a:96:7e:
                    16:f5:a9:87:f8:49:56:d1:73:34:5d:2f:25:28:34:
                    98:79:c2:df:71:5d:9b:25:de:fa:62:aa:37:78:63:
                    1c:8f:7f:f6:da:fe:bc:39:10:0b:09:3a:82:24:a6:
                    16:2c:68:ab:e9:87:c8:71:93:cd:6f:b8:bc:4c:62:
                    da:03:95:91:45:15:2b:88:5a:29:90:64:cb:72:4e:
                    54:fd:50:8c:44:f1:d4:91:31:dd:c1:51:da:8c:92:
                    ae:22:54:2b:63:cf:ff:90:7e:f6:85:a9:52:32:4e:
                    b8:55:d2:ff:73:14:fc:18:13:79:ea:6a:70:8d:5b:
                    60:d0:cc:c3:53:f7:4e:c3:66:99:3c:8f:11:ae:a4:
                    17:d1:b5:92:61:da:a3:d6:de:3c:f9:43:c2:49:f6:
                    19:f8:97:03:0f:31:fe:b4:c7:86:78:68:1c:f1:ab:
                    cb:43:69:ad:a3:db:73:78:8c:07:ba:de:67:00:d7:
                    46:ad:8a:78:74:05:8b:9b:95:19:6d:d9:06:ec:99:
                    05:ce:e9:5b:c6:1c:84:5e:19:3b:0f:1b:7c:e2:96:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:9B:49:B4:5F:05:1A:9A:18:12:74:79:26:1C:0E:E2:02:72:0D
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:ff:de:bc:a1:a4:06:62:f7:38:66:cf:4a:7f:b3:de:da:
         a1:ac:9c:16:c5:ff:4e:f2:ba:26:42:54:5f:2e:17:e5:c8:29:
         37:25:d1:4b:7c:1a:1e:b1:48:a5:d0:cb:39:fa:51:f9:d2:23:
         a2:b8:9a:29:48:18:37:c1:1f:92:97:54:28:75:60:ee:c8:c6:
         2a:af:4c:c4:f2:1a:af:84:f2:e0:f0:63:39:25:c1:9d:34:70:
         8b:47:66:23:22:74:ca:2f:36:fe:ed:b8:36:ac:99:d5:e1:fc:
         a5:86:55:e9:02:09:fc:db:12:59:2d:1c:68:19:25:b8:99:e3:
         82:a3:6b:0b:72:b0:ae:5a:80:52:05:bf:25:83:97:5f:8a:3e:
         f3:4b:4c:0e:72:e4:76:f3:d0:97:54:c1:ba:0c:e8:eb:d8:a9:
         12:0c:03:36:9d:96:19:aa:48:22:b5:df:03:db:b3:42:39:7a:
         0d:7d:4f:ea:d3:fe:28:38:d4:56:e3:cd:39:87:07:ee:81:78:
         29:4e:9b:95:53:4c:ca:17:f3:49:93:49:64:8e:56:4b:d1:dd:
         0a:1d:ef:4f:73:24:26:f7:3e:9a:4b:8a:29:e9:ab:9d:2b:38:
         1d:37:db:bf:9d:52:c4:6d:c0:3b:7f:4d:3a:53:99:2a:f5:dd:
         82:f0:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:33 2025 by rpki-client