Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
File:                     aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json)
Hash identifier:          OuWd1u0GMHDj1cuYwMCt7cRt34HsPoSqLSbTbu/IHU0=
Subject key identifier:   47:44:79:02:84:81:83:9F:64:ED:08:DC:6B:D6:65:16:66:F4:47:A7
Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3
Certificate issuer:       /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
Manifest number:          E0
Signing time:             Sun 19 Oct 2025 08:31:55 +0000
Manifest this update:     Sun 19 Oct 2025 08:31:55 +0000
Manifest next update:     Sun 26 Oct 2025 08:31:55 +0000
Files and hashes:         1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: uAdDoUg27H/a401li5UDoH+bGYFQPZXfZX75IwdYo7U=)
                          2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 6f4F+XIwA2rHEPqEklnobgdqYhNbXAFCeGr2CJ6y/cI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl
                          rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3
        Validity
            Not Before: Oct 19 08:31:55 2025 GMT
            Not After : Oct 26 08:31:55 2025 GMT
        Subject: CN=68f4a1fb-5933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:df:8d:98:e7:34:62:43:51:9a:a7:6c:05:
                    0b:f4:9b:a0:34:73:62:e9:f6:d7:a0:71:73:e2:d1:
                    23:5a:5e:bb:ea:f6:79:5a:11:d2:b0:02:89:e8:28:
                    7e:47:f0:fc:1a:b5:33:79:39:05:cd:44:04:b1:b5:
                    09:d9:e1:5b:52:d8:dc:32:3d:a8:c6:7e:fb:2b:92:
                    dc:d5:ec:30:45:93:bb:ae:ee:0c:d0:b0:a8:9d:63:
                    a8:ed:1f:e6:ab:ef:9b:21:e3:04:35:dd:e1:e5:e4:
                    50:87:46:02:f7:8a:51:d0:2e:8d:07:ac:32:ac:35:
                    6b:c7:1d:b1:34:ba:38:21:a0:ed:36:dd:c5:b4:89:
                    cd:c0:15:11:3c:1b:ee:05:08:71:5f:d9:4a:3d:f3:
                    ff:f8:08:29:d1:0a:09:6e:87:85:b7:f5:c5:fe:db:
                    41:5a:06:4f:72:a8:cf:6e:ee:c8:5b:09:3c:7d:55:
                    a9:7b:01:10:83:bf:21:0d:77:0b:0c:bb:8c:8c:08:
                    44:8f:cf:10:da:30:c9:cd:67:25:00:2a:53:f8:62:
                    0f:85:a7:bc:93:2c:4b:b6:5f:5a:db:db:a9:a2:dc:
                    d4:56:bb:57:bb:f9:a6:64:2c:e0:18:6c:c9:3e:62:
                    aa:f7:be:0a:6d:af:60:55:61:47:93:33:f8:f9:c5:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:79:02:84:81:83:9F:64:ED:08:DC:6B:D6:65:16:66:F4:47:A7
            X509v3 Authority Key Identifier:
                keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:9b:51:32:94:2b:29:24:a5:3c:69:96:09:e2:10:3b:9c:
         06:94:50:ab:1d:3c:19:dd:b9:7c:73:e3:e5:f0:27:b8:d7:60:
         59:af:83:52:65:0a:03:a3:cc:ea:84:87:4a:e5:b4:49:70:7c:
         b4:b6:a6:4f:73:7e:38:8e:5c:cc:02:0f:8b:fc:8b:e3:ad:fb:
         3e:6e:91:c3:29:47:65:3e:4a:a9:e4:0d:33:04:35:03:5c:04:
         81:90:52:49:b2:c7:af:8e:65:a2:6a:c7:74:ab:f4:e5:45:fa:
         ce:75:04:40:b3:44:8f:54:5e:cb:eb:08:84:e3:33:8e:81:e1:
         ad:03:cc:64:c1:27:95:4e:81:85:90:97:73:8b:16:b0:59:e0:
         2e:7f:b9:86:94:4d:04:47:c4:ab:e4:da:f1:3d:ec:1e:a8:bd:
         af:91:26:5a:8f:bc:6f:c2:fc:c4:47:b0:52:c1:05:3b:e8:a3:
         4c:01:39:d8:3c:d4:c9:b6:0d:6e:e9:86:a3:29:1b:b2:e8:0c:
         e0:5f:c7:49:6d:5e:2a:d0:ad:0f:36:b4:8a:c0:2d:16:a8:d6:
         e9:85:34:a5:24:71:7d:4f:84:a8:e7:d7:a4:39:63:21:80:f6:
         53:76:c2:1c:2a:98:6a:23:d6:dd:7a:ba:f2:dd:0b:f7:13:35:
         e9:8d:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:32 2025 by rpki-client