Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
File:                     53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json)
Hash identifier:          OEXvlTKiIcyxHr7yuBnB6ByfSRbIvJJXK6d7DPThb24=
Subject key identifier:   42:84:03:57:B9:6E:7D:B0:11:B5:2D:39:7D:B1:52:DA:B3:99:B7:E9
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
Manifest number:          0190
Signing time:             Wed 17 Sep 2025 04:13:35 +0000
Manifest this update:     Wed 17 Sep 2025 04:13:35 +0000
Manifest next update:     Wed 24 Sep 2025 04:13:35 +0000
Files and hashes:         1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: dQxuwZMop+3YNjV646Q/Ygqq8J0RJYWVjFhOCMHUW2g=)
                          2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: qiuU93Lc7YatLMlsGPtovUfT87zuHB3bZX8CwFGs5GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
                          rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
        Validity
            Not Before: Sep 17 04:13:35 2025 GMT
            Not After : Sep 24 04:13:35 2025 GMT
        Subject: CN=68ca356f-f339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:b1:74:98:7d:e0:a9:a2:df:48:61:37:4d:
                    fd:1c:a6:93:20:b8:03:b4:6c:00:a9:c0:42:35:fc:
                    94:b0:84:f0:75:cb:b6:ae:22:ba:10:38:2f:ef:81:
                    dc:8d:4d:47:b0:5d:6f:cb:70:f8:b7:b9:58:e6:a6:
                    05:db:df:d2:bb:df:32:30:d9:92:68:ac:9a:3a:1b:
                    f6:17:b0:34:3e:54:c8:2a:d3:dd:95:43:31:7a:ba:
                    96:e2:50:50:13:33:93:69:ec:13:99:70:c6:05:c1:
                    e3:75:4b:13:ba:c3:61:dc:b3:8d:d5:ee:47:e4:b1:
                    fa:ce:76:ee:27:63:06:c9:dc:ee:e8:36:d7:97:19:
                    72:dc:4e:99:b4:34:aa:30:56:13:15:c3:7e:05:57:
                    12:e0:49:30:7e:68:2e:fc:bd:1b:49:a5:a2:e1:45:
                    e5:35:9f:72:ad:fc:7f:e6:fb:08:27:42:ae:d5:a5:
                    35:80:b5:63:3a:62:e2:0d:d5:db:95:d3:b9:5c:cd:
                    03:04:8b:d0:ac:df:5e:18:74:f7:34:f6:51:01:b9:
                    2f:f8:b1:3b:64:69:96:df:52:78:1d:dd:19:88:6b:
                    f9:7f:95:36:23:4a:97:6f:20:ad:a9:83:f7:d8:51:
                    42:ea:25:6e:cf:c2:19:d5:8b:5c:d8:5b:59:7d:42:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:84:03:57:B9:6E:7D:B0:11:B5:2D:39:7D:B1:52:DA:B3:99:B7:E9
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:bd:2d:ee:9e:a3:7a:cf:e7:45:6b:26:8b:ec:87:a3:3d:
         45:77:5c:34:23:f0:e7:06:0f:64:cf:4d:bb:44:66:e6:cf:5e:
         56:dc:ff:3a:b5:37:9d:f7:12:e8:b1:c1:6c:33:d8:b9:f6:5b:
         9b:4f:62:7e:86:44:dc:e1:b5:08:66:60:a4:99:da:f9:d5:1c:
         46:be:e8:e7:b6:f9:f9:61:44:14:34:cc:86:35:f4:5b:f5:34:
         1b:75:3e:8c:2d:a9:13:c9:af:a2:64:8c:d4:5e:65:0d:4b:90:
         78:22:fa:ba:4a:ea:c9:93:24:18:01:42:cf:cb:92:93:0a:f7:
         ed:30:d2:dd:a0:d9:10:71:aa:53:e4:98:ab:19:50:c3:4a:19:
         dd:f5:2a:5a:32:61:92:63:95:ca:e9:cf:c4:e6:d2:49:0c:11:
         ef:ac:fd:d8:4d:99:7c:6f:10:85:a7:43:cf:ac:4c:f5:53:ed:
         17:70:95:91:0d:30:59:99:ba:25:66:a1:b6:ba:ef:e8:28:a7:
         f5:03:72:0a:96:3c:c1:42:f6:19:d4:e7:5d:b5:74:40:5c:a8:
         e5:1d:4d:5d:3b:91:c4:29:b0:6d:9b:7f:d7:5d:1a:13:36:41:
         06:64:de:77:39:ff:12:a3:78:da:ee:fb:24:5d:4f:ef:a2:7c:
         47:06:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:10:28 2025 by rpki-client