Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File:                     e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier:          wVrh2MJ6oE5gkdnRabUy2oLspJVJAywEUbQkEc5Vh8I=
Subject key identifier:   72:DD:A9:4A:5D:96:3B:AC:83:B3:F8:E2:13:56:94:58:F6:6A:D8:84
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number:          03DC
Signing time:             Mon 27 Oct 2025 01:52:16 +0000
Manifest this update:     Mon 27 Oct 2025 01:52:15 +0000
Manifest next update:     Mon 03 Nov 2025 01:52:15 +0000
Files and hashes:         1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: hffQN8l+AcAxkpxSSUiSKuIpgDsAUNGNKPmzRClCd6M=)
                          2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=)
                          3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 01:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: Oct 27 01:52:15 2025 GMT
            Not After : Nov  3 01:52:15 2025 GMT
        Subject: CN=68fed04f-07bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:da:2e:ae:c8:98:97:bc:5d:76:68:1f:0a:
                    b1:53:a4:ea:f9:3a:37:8b:2d:6b:a6:d9:26:11:76:
                    c6:75:de:bc:ec:ef:7f:82:b8:0c:d0:35:2e:99:a1:
                    7c:a5:ae:dc:52:38:ca:86:9d:04:00:60:bf:e3:a8:
                    07:52:07:d0:39:09:9f:6d:6f:62:e1:3c:8c:6b:02:
                    6e:d1:ce:10:66:8f:03:18:29:32:e3:58:98:29:b9:
                    fb:d1:64:de:69:68:5e:60:ff:3c:ac:c4:12:0d:30:
                    4c:82:cf:78:a4:ae:30:e0:55:a2:09:1e:eb:d1:e8:
                    35:a4:9b:06:6c:21:03:82:f8:c0:0a:6f:19:7c:0e:
                    3a:43:90:aa:c2:6d:33:92:f7:5e:33:8a:8f:3c:80:
                    22:70:2e:4e:91:e5:84:6d:bc:5b:bd:7d:fb:89:63:
                    c9:bb:1f:e4:6e:5e:63:ad:80:b1:53:e5:65:fd:09:
                    2e:df:09:c2:fc:62:ff:ba:9a:09:57:8e:86:e9:92:
                    a6:91:b2:da:30:bd:94:7d:3a:e5:79:fd:6a:e5:8f:
                    38:fb:b8:5d:a8:59:23:05:1f:54:c2:54:9e:b2:a4:
                    93:a5:c1:eb:ed:69:8b:41:b4:97:88:67:74:74:64:
                    7c:cc:b1:a4:e8:d6:e1:a4:54:da:d9:38:34:1b:27:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DD:A9:4A:5D:96:3B:AC:83:B3:F8:E2:13:56:94:58:F6:6A:D8:84
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:98:3f:de:92:82:d0:a9:ef:7e:b7:17:11:9b:49:19:e2:
         28:09:bb:81:9e:53:63:ec:8e:6c:40:98:db:7c:49:ee:b9:dc:
         51:18:41:b8:c7:bb:ea:a2:26:a9:59:17:b4:c2:b4:ae:c4:df:
         e8:15:d5:76:59:59:f7:17:b5:ed:4d:bb:9c:09:de:72:43:65:
         97:98:a2:af:6c:a5:da:a9:ab:5c:d8:ef:e5:c2:0f:93:e4:35:
         b9:14:2e:fb:26:74:7f:f5:cc:4f:14:77:83:a8:f0:41:fa:7b:
         7b:03:40:97:8f:ad:d7:ae:25:fc:b8:ff:4a:c3:82:38:3b:4b:
         66:46:d4:ac:4b:bd:77:ea:dd:36:14:08:f8:8b:73:c8:0d:63:
         df:64:3a:d5:cd:f1:35:e0:2e:80:0c:75:96:34:0d:ab:75:bf:
         b3:64:58:bb:e0:9e:67:17:68:21:9e:41:36:e6:78:e9:59:f6:
         b8:84:36:48:34:6e:54:44:32:c0:68:78:c0:26:31:ee:b4:bc:
         c2:50:13:00:80:c7:0e:d9:70:3d:26:8b:ca:5c:97:86:ba:56:
         0d:dc:0d:49:db:67:b6:ba:b3:4d:64:3c:63:1a:d8:f1:4d:54:
         8b:85:9d:55:83:fd:ac:53:ac:14:4f:d2:90:2f:a9:c5:a4:eb:
         c9:e8:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:44 2025 by rpki-client