Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File:                     MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier:          epmC5ouoqzhTtrhSi4XRUYaKhJfhloeD+6aaUBSp31k=
Subject key identifier:   3D:BE:B1:E1:58:33:06:3D:7F:25:B9:E7:C1:48:8E:7E:46:5A:B0:2B
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer:       /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial:       1E09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number:          1DE4
Signing time:             Wed 22 Oct 2025 16:20:06 +0000
Manifest this update:     Wed 22 Oct 2025 16:20:06 +0000
Manifest next update:     Wed 29 Oct 2025 16:20:06 +0000
Files and hashes:         1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: WjkOtNBwvGBWM30RVCCFobEISkvIKuv8mUFXs7tCMAc=)
                          2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=)
                          3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=)
                          4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 16:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7689 (0x1e09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Validity
            Not Before: Oct 22 16:20:06 2025 GMT
            Not After : Oct 29 16:20:06 2025 GMT
        Subject: CN=68f90436-1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:89:c7:cd:68:8c:e8:f6:19:8b:53:e5:b6:
                    94:14:46:80:26:3d:4c:f3:ab:eb:39:f5:ab:8c:c5:
                    10:1b:ed:20:0d:47:23:63:c2:d9:3a:c5:01:38:f4:
                    58:0d:be:d6:e9:fb:09:7c:89:69:59:4f:b9:19:47:
                    93:f9:4f:c2:2d:4c:02:ba:f8:71:f4:54:a7:b1:4e:
                    46:05:1a:51:7c:9b:c1:b1:16:d8:56:91:8a:f7:d9:
                    32:ff:ff:e2:f3:e0:49:15:95:55:37:25:33:5a:94:
                    c4:f1:12:57:15:31:87:41:67:3b:32:7a:bf:2a:57:
                    51:c1:be:98:7f:07:e2:cc:5e:7f:d2:ea:8a:e8:fd:
                    0d:70:7d:c9:71:fc:e3:1e:c2:62:0c:49:e6:b4:ec:
                    7d:03:13:9d:21:fc:76:fb:3c:b4:ee:79:b3:57:5e:
                    73:8c:d8:d6:6e:c8:ad:84:0d:81:9c:8e:52:93:02:
                    da:38:20:e1:5e:06:e9:db:9a:80:b5:8c:65:c9:4c:
                    33:56:80:b6:28:b9:fc:c2:4f:00:c9:d6:c8:ea:b4:
                    96:7a:cc:9b:26:11:ba:8e:27:33:93:18:0f:2d:16:
                    b7:31:27:8a:43:49:c4:06:7f:52:ce:18:83:a4:17:
                    51:70:ec:0c:8d:fc:ff:22:e9:08:94:31:b4:46:9d:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BE:B1:E1:58:33:06:3D:7F:25:B9:E7:C1:48:8E:7E:46:5A:B0:2B
            X509v3 Authority Key Identifier:
                keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:27:7d:9a:24:9e:97:5e:54:a6:b1:ef:f9:3a:92:ec:d4:
         dd:2f:19:11:54:7b:14:7b:95:bc:a8:42:c3:de:07:52:47:91:
         ed:bf:b4:ea:e9:6d:bc:76:48:e1:c8:17:af:89:a7:ac:b3:2e:
         b7:22:46:1a:e4:e3:51:11:22:9b:c8:9b:2e:ad:0e:e7:17:a1:
         06:38:5a:a7:c7:2a:5c:e5:10:3d:f7:fe:7f:d5:cf:3c:88:2a:
         e6:7c:1c:0c:43:53:f3:5b:bf:c0:9f:ae:1e:ed:21:15:36:0a:
         5e:bb:90:5f:d8:80:99:c7:31:98:9b:f1:82:32:2b:da:75:37:
         74:fc:cb:c3:1d:98:9f:04:ef:fc:91:09:ea:fb:04:f0:a2:f4:
         e5:5c:ae:2b:c4:54:95:e9:ad:f8:0f:17:11:d9:83:d8:7d:18:
         fb:3b:90:63:2f:61:70:f8:03:28:cb:76:23:8d:3c:16:db:6c:
         e4:1a:04:dd:64:d8:79:b0:6a:6c:5d:fb:35:ef:51:23:d3:29:
         6e:91:b0:3b:22:63:67:0d:25:00:04:5f:45:4b:b1:3a:b5:d4:
         d5:2a:48:b8:7d:e7:ff:6e:7a:0e:2d:9a:b7:50:74:9f:21:fd:
         1d:93:0b:92:6c:4d:37:a7:d7:bf:a2:68:86:7d:23:6d:26:36:
         42:37:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:56:30 2025 by rpki-client