Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File:                     rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier:          KvZdJRw7Ev8oHHbhvBHD90ZNsVnR8caC1IQ2XujWods=
Subject key identifier:   5D:A8:F3:79:53:34:DA:F3:EA:78:30:A3:BB:BC:18:A5:A3:68:F7:34
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number:          0233
Signing time:             Sun 19 Oct 2025 04:14:20 +0000
Manifest this update:     Sun 19 Oct 2025 04:14:18 +0000
Manifest next update:     Sun 26 Oct 2025 04:14:18 +0000
Files and hashes:         1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: Vb5PYwTITtGjovceObkn5AVfn3Nmfhe+85oFzjPWZ68=)
                          2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=)
                          3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=)
                          4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Oct 19 04:14:18 2025 GMT
            Not After : Oct 26 04:14:18 2025 GMT
        Subject: CN=68f4659b-db8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:c5:94:d6:45:41:9a:74:bc:9c:fd:ed:05:
                    bb:12:1f:6d:6a:9b:a0:92:6d:9b:e8:bc:54:56:30:
                    19:a7:0f:9d:7f:7e:7e:2d:36:5d:ec:58:32:90:13:
                    5f:a3:f5:e0:c5:2d:cb:c4:dd:82:b6:99:c6:b3:59:
                    23:fd:a9:1a:0e:f2:a0:ac:33:34:6d:24:2b:cd:b0:
                    3e:fe:e0:ac:50:22:41:20:51:d2:9e:18:02:25:4a:
                    9b:66:d9:3f:34:ff:e8:2a:d9:bc:c1:f3:30:04:5d:
                    f6:82:f1:0d:a1:02:8c:a6:98:c5:7c:dd:9c:7a:96:
                    d7:f9:b7:b5:4c:12:b9:46:16:53:84:39:4b:37:22:
                    e5:79:08:e0:ad:29:53:4e:5e:3f:6c:41:4a:c6:34:
                    ae:4f:33:4b:e3:77:9d:54:9a:c9:b1:4a:b8:1b:cf:
                    51:66:5b:bb:de:93:17:d4:46:23:2a:c8:78:6e:aa:
                    c4:03:f5:67:d3:36:3e:e5:88:21:dd:18:c6:e3:17:
                    2e:1e:4a:dc:39:ed:7a:b5:93:99:f6:df:0c:dd:6e:
                    39:d0:e4:77:cc:46:ba:91:10:e5:b5:87:20:12:d8:
                    06:17:83:c7:b1:fa:17:3c:92:cb:69:2c:8d:2c:f5:
                    da:58:ee:fa:f7:59:6e:67:24:c5:b0:c9:7b:13:aa:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:F3:79:53:34:DA:F3:EA:78:30:A3:BB:BC:18:A5:A3:68:F7:34
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:77:a0:70:83:8f:d9:b0:aa:fc:3d:80:59:aa:7e:f0:4f:
         dc:de:0f:8e:cd:dd:c3:e9:ea:88:bc:1a:c5:d8:6d:9f:3f:9c:
         d5:15:80:dc:57:2c:67:33:b8:c3:4a:da:9d:95:e8:1f:6f:9d:
         99:9a:a1:d7:f3:ff:65:2a:dd:63:f2:f3:7f:46:da:b8:55:d4:
         92:11:d7:8d:a0:bf:2b:f4:af:36:95:d4:fe:28:0e:87:90:6a:
         2d:e8:13:3a:3d:72:87:7a:10:32:5f:df:dd:59:49:c2:27:14:
         6e:83:b2:c7:46:d2:af:6a:c4:f5:00:d8:cb:62:e6:a6:4d:3d:
         ae:b8:76:2f:45:ac:e4:6d:d6:c0:2f:7c:61:bc:b5:ab:aa:fd:
         c5:87:15:16:34:1e:fb:8b:4c:27:2d:95:48:7f:8e:b7:b0:92:
         39:36:d4:6b:da:51:42:4c:05:30:96:4c:9d:95:58:bb:ea:be:
         30:29:42:40:13:e7:0a:f5:e7:bf:38:db:e6:49:95:d2:4a:be:
         57:7e:66:d3:e5:c8:86:3d:09:d5:e9:b1:5c:b4:a6:0c:9d:24:
         e5:ce:58:c5:aa:5b:a7:4d:7b:d8:82:ab:38:c5:4e:7b:67:27:
         a1:0e:c1:e2:ea:0b:ad:c1:36:ea:be:91:f8:5d:c9:20:d8:04:
         97:eb:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:40 2025 by rpki-client