Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          10WcmXXzCgdsSHcdN5nwEAADNL39ny0O7MVrNL/xRec=
Subject key identifier:   DD:59:13:59:42:54:DB:76:71:EB:0D:2D:69:D8:0E:C4:26:A8:A1:7C
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          0378
Signing time:             Sun 19 Oct 2025 02:52:48 +0000
Manifest this update:     Sun 19 Oct 2025 02:52:47 +0000
Manifest next update:     Sun 26 Oct 2025 02:52:47 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: YCzXWYzRSPEs12zsQcalVWCq0Jve6MtupKQqkajF3oM=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: 4UMRc+U+QvsxtO1R2mqRXzqp5X2s02DN1FDAeR0/6VE=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Oct 19 02:52:47 2025 GMT
            Not After : Oct 26 02:52:47 2025 GMT
        Subject: CN=68f4527f-8166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:c5:f1:08:e4:3c:14:51:87:a8:0b:2d:d6:
                    86:6f:7c:50:f2:52:45:2d:49:8e:a1:32:db:32:a0:
                    f8:d7:79:3a:ac:32:57:3d:41:c0:29:0a:1e:13:d0:
                    07:25:fd:50:5a:f3:95:8c:f9:a6:b7:f2:9a:54:9b:
                    4a:58:e2:e5:c8:33:b3:20:4a:ba:c0:19:1e:f5:55:
                    ae:0b:76:68:f8:d4:3b:93:bd:ac:62:23:01:15:8d:
                    95:ea:3c:09:24:b2:0f:84:06:9e:94:60:dc:f8:cd:
                    8c:a0:e9:f4:19:b9:bc:cc:6e:7e:60:3d:30:cc:ef:
                    a9:18:54:b6:8d:da:fa:91:b6:f4:8b:75:b4:e6:7f:
                    77:bf:cb:b2:c1:3a:e2:6c:ae:f2:67:ab:68:df:98:
                    dc:40:80:0b:8e:44:22:ce:0a:26:a6:2d:cf:9e:ad:
                    4f:e2:b7:bc:f8:61:00:87:df:dc:0e:ca:1a:4d:94:
                    8b:23:3d:1e:de:07:e8:17:da:e2:9d:e4:f8:b2:fb:
                    0d:23:77:69:0b:90:65:be:15:fa:e4:dd:61:19:23:
                    f5:77:87:ff:fc:5d:89:c6:63:2d:87:27:df:87:d9:
                    45:72:12:97:48:a4:c0:2e:d7:37:e7:ee:1f:a0:ed:
                    c4:88:ab:89:93:63:80:06:21:d4:64:47:df:26:53:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:13:59:42:54:DB:76:71:EB:0D:2D:69:D8:0E:C4:26:A8:A1:7C
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:12:36:8c:ad:50:41:f5:38:97:28:7d:f9:ed:4e:b6:89:88:
         dd:f1:24:d5:72:43:ad:4c:d6:12:3f:49:d1:65:c7:b3:a0:a9:
         a1:9e:9e:6f:6f:86:9b:a6:aa:a8:35:a0:58:0e:5d:5f:06:83:
         5b:c8:31:b0:36:f5:c4:4b:f7:a7:61:0e:d6:3a:51:1f:b5:15:
         fc:55:62:58:65:32:e6:38:04:91:3c:41:8a:98:e2:6e:d1:95:
         00:cf:49:8c:ca:c0:f5:6f:8a:d4:df:45:bf:e6:95:e1:c5:95:
         a2:ff:37:73:2e:bd:c4:a7:d3:d1:23:88:c5:a9:df:de:07:a8:
         02:f4:d9:89:44:5c:ca:9d:fe:85:c0:70:e0:37:da:b4:d8:2c:
         67:4f:a6:43:d9:da:a7:25:f3:c6:65:4a:2a:8a:82:ff:fb:e0:
         f7:2c:1e:0e:ae:ff:fa:d5:f9:2b:3f:e6:c3:93:08:42:dc:7b:
         63:09:8e:d7:2c:26:7d:64:dc:2d:f6:0b:c3:67:de:04:5e:ba:
         75:42:b0:9f:f8:18:29:26:bc:c9:15:c4:66:4f:83:fe:39:5d:
         64:16:c2:4b:96:b4:dc:b2:83:50:ca:1e:f5:4b:28:95:e5:71:
         9c:99:72:a6:70:d1:c5:fb:ad:64:3d:91:5d:f6:e7:c7:36:fb:
         a6:8a:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:53 2025 by rpki-client