Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File:                     Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier:          o2gxRQJ5QhtWETMZZFL9tgAoG0ruykfTzQEqiN8Qm+0=
Subject key identifier:   FA:53:91:78:AC:74:77:40:5C:60:65:9C:FA:A7:30:04:0D:CA:A5:37
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number:          04E0
Signing time:             Sun 19 Oct 2025 01:35:41 +0000
Manifest this update:     Sun 19 Oct 2025 01:35:40 +0000
Manifest next update:     Sun 26 Oct 2025 01:35:40 +0000
Files and hashes:         1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: opRTYgZpyxvzb54ehYx0Xnc3P1DjSaY/kRTQ/agn0mI=)
                          2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: Oct 19 01:35:40 2025 GMT
            Not After : Oct 26 01:35:40 2025 GMT
        Subject: CN=68f4406d-05ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:f6:b5:f6:1f:bd:b6:ac:98:a1:f3:6a:c1:
                    a6:33:7c:b4:0f:34:5b:fb:5e:bb:5e:c9:1b:ed:f5:
                    e6:73:3f:c1:ed:4c:3f:ec:2a:c0:b9:c2:fa:75:ad:
                    97:a0:1f:66:d8:42:8c:a2:9d:af:ae:cd:c2:88:23:
                    1c:5d:00:f0:17:57:5b:6b:e5:61:f0:43:bb:7b:44:
                    ff:2b:4f:1a:57:91:68:86:59:53:9c:07:9f:44:fa:
                    80:a3:f4:64:4f:23:23:e9:4d:cf:63:3f:2f:13:d0:
                    76:e7:8d:32:69:6b:8e:b1:57:f7:a8:1f:68:d3:7a:
                    e3:02:bd:5a:f0:23:aa:c8:21:e4:bb:07:21:31:21:
                    bd:02:0a:21:de:09:3d:85:26:7c:25:e8:c6:2b:2a:
                    d2:3e:bd:6a:d5:1f:2c:2b:2d:31:9f:e9:6c:20:d9:
                    f1:cd:82:83:e1:3e:f1:37:e7:68:b5:3a:aa:9f:12:
                    eb:39:7f:84:55:ef:2a:09:53:d1:27:46:8d:c6:73:
                    e4:e8:38:49:16:4d:c1:81:5a:9d:ef:ae:3d:96:b0:
                    31:87:78:29:f8:58:13:f6:2c:bd:76:53:28:14:66:
                    bd:52:74:b3:b3:fb:8c:9a:60:84:15:60:9d:1f:1c:
                    fc:b9:9b:5d:6e:d6:0d:a9:cd:7b:30:9c:07:e4:64:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:91:78:AC:74:77:40:5C:60:65:9C:FA:A7:30:04:0D:CA:A5:37
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9c:63:ba:21:5a:1d:f3:9c:a2:2f:7e:82:f1:c0:3f:59:c0:
         01:dd:5a:08:2d:0c:0c:97:af:31:0e:3d:4e:d4:71:97:c9:4b:
         af:46:60:d9:be:1e:2f:2f:7a:a4:79:59:57:2f:fd:3c:a5:e2:
         e0:bf:39:b5:e3:3e:66:13:c6:0e:bf:dc:08:2a:f0:df:1c:f4:
         b1:70:ca:b3:24:1b:59:a2:1d:ce:6e:69:17:3a:81:dd:e6:42:
         d8:85:7a:f3:cb:50:bf:29:a5:82:98:41:21:23:01:f3:65:13:
         26:18:1a:ca:31:8f:de:4d:1f:61:76:0e:ce:e1:43:9e:42:94:
         70:b8:87:01:53:d1:8e:05:dc:39:7c:4a:a8:bc:a1:ab:2d:f2:
         0d:d2:04:9e:e2:9f:69:e1:d1:b0:86:69:ac:54:be:7c:76:62:
         78:37:95:dd:1b:60:d4:7b:37:96:bc:63:7b:c5:9c:c2:fb:d0:
         dc:59:c2:96:60:45:4f:73:73:a0:85:ad:19:78:0e:72:3e:8a:
         72:33:cd:39:f1:a2:22:ff:a5:56:aa:ff:f7:e5:ae:30:f1:fb:
         57:e3:f6:9f:0b:a8:45:44:a0:4c:14:6c:4a:5f:da:dc:a4:b0:
         d5:b6:e7:2a:28:8e:e8:d3:e3:2e:92:a0:3e:8c:98:c9:08:f8:
         0c:ae:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:29 2025 by rpki-client