Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
File:                     Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json)
Hash identifier:          zc49ywBy4sJ5ZBMN3C7OzTWEeT6FI1MI9XVRZ1oI1EI=
Subject key identifier:   F6:F6:01:35:9F:50:C7:AD:56:B3:F4:9A:CF:4A:1E:66:59:E2:B4:D2
Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
Certificate issuer:       /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
Manifest number:          022E
Signing time:             Sun 19 Oct 2025 04:16:47 +0000
Manifest this update:     Sun 19 Oct 2025 04:16:47 +0000
Manifest next update:     Sun 26 Oct 2025 04:16:47 +0000
Files and hashes:         1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: oEQqtUHxuVnA2GpEojx+24AnM5Oe05t+N4NjjKSF5eY=)
                          2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: t2QGvAxpDAT3kp8PeIbeNnP6vAkksZUBbRRuJ3lkqjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
                          rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
        Validity
            Not Before: Oct 19 04:16:47 2025 GMT
            Not After : Oct 26 04:16:47 2025 GMT
        Subject: CN=68f4662f-d6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:d4:aa:2b:b7:b3:d5:45:44:91:3d:44:e5:
                    44:16:f5:96:8a:a5:5c:69:44:2a:19:dc:bc:fe:9f:
                    99:39:d5:e9:d9:d2:96:af:be:30:9a:85:a1:38:18:
                    b1:58:89:95:aa:68:25:b2:f4:6b:5a:c5:3b:d2:95:
                    84:7f:35:c3:95:b7:98:04:19:b5:24:68:7a:d2:1d:
                    33:3c:3d:cd:0b:38:90:92:1d:15:41:bd:ed:73:95:
                    49:aa:41:c1:a1:f2:35:b6:41:e8:da:3a:e2:9d:59:
                    1d:28:09:68:3f:6e:1f:18:c1:80:15:81:82:a4:e4:
                    ed:c6:3b:cd:5f:ba:36:78:f5:9f:1a:60:6d:07:a3:
                    7b:85:3e:2a:4c:cb:55:f9:e2:3e:ba:c6:2a:89:d7:
                    57:84:f8:f5:b1:bc:f5:17:40:b9:77:39:cf:42:b8:
                    d5:56:39:5f:50:ca:64:0b:70:09:e7:9d:0a:ba:14:
                    cb:60:68:de:1e:0a:dd:9d:2f:5e:8a:1e:23:77:4e:
                    87:ad:e2:93:97:22:b7:40:01:6f:57:de:e1:d7:12:
                    a2:bc:e8:38:78:d3:85:4b:d8:51:c7:c1:54:bc:65:
                    9d:3f:c7:af:c7:e5:a0:b1:11:73:48:12:cf:59:96:
                    df:8d:7b:c6:eb:87:44:50:91:d2:58:d1:ee:a1:16:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F6:01:35:9F:50:C7:AD:56:B3:F4:9A:CF:4A:1E:66:59:E2:B4:D2
            X509v3 Authority Key Identifier:
                keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:1b:b3:bf:1c:3b:db:c8:5a:bc:60:69:68:80:29:a1:5a:
         c0:4a:e5:fb:49:05:8a:ea:60:d9:a8:51:be:e0:b9:fa:26:15:
         af:5f:e7:58:57:d3:4f:7d:5a:df:82:73:4e:5d:35:e1:c3:15:
         0c:19:9c:bd:1d:55:b8:81:fb:5e:60:31:a6:43:02:17:d9:4e:
         41:71:9a:4c:19:5f:42:f4:7d:2f:fe:e3:e0:57:3f:ce:ae:6f:
         ad:21:7e:fc:7b:2d:93:7e:42:b0:59:fe:12:ca:f6:0e:3a:bb:
         71:eb:90:ac:f2:f1:3c:c8:d0:05:73:66:a0:d9:9c:1f:31:48:
         11:9e:c1:e2:6c:08:a8:d6:42:e0:d7:ca:6e:6f:13:4a:79:4c:
         f8:1c:92:19:b6:47:0c:61:df:fc:60:9f:a0:99:7d:6d:2b:9c:
         2b:a2:da:a8:b9:b3:80:6c:4d:50:88:a5:79:63:5a:bb:c7:9d:
         93:05:db:e7:97:e0:99:af:7b:61:02:b6:2d:fa:21:bd:8a:84:
         d1:5f:48:ce:4d:ec:5b:b8:1e:9c:5c:b2:dd:2d:ce:c7:0d:3a:
         7e:e9:27:1a:79:55:9f:73:32:8e:d4:8e:52:c0:05:93:b1:54:
         95:ab:b5:eb:c4:d8:89:7d:c3:05:47:23:43:c7:10:cf:d7:97:
         0e:0e:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:53 2025 by rpki-client