Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          PhLxFnIvfvSr151Jia7m27WMPBb3tqwy4HHHFxEpp+M=
Subject key identifier:   07:1C:22:D0:35:2E:C9:CE:0C:9D:B7:54:52:83:B2:B8:80:0B:0C:91
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          0753
Signing time:             Sat 18 Oct 2025 23:04:25 +0000
Manifest this update:     Sat 18 Oct 2025 23:04:24 +0000
Manifest next update:     Sat 25 Oct 2025 23:04:24 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: ehccEyW+xTddJHjOl1p5d/gGHvh8g+MEUlvAtDF6Uqk=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Oct 18 23:04:24 2025 GMT
            Not After : Oct 25 23:04:24 2025 GMT
        Subject: CN=68f41cf9-8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:48:09:41:1b:da:6b:bd:d1:c4:4a:a3:bc:
                    19:31:fc:f8:80:80:d2:8e:44:da:8e:50:1c:1e:21:
                    b5:36:64:d8:90:7b:0a:c8:8c:ff:bb:56:02:5c:88:
                    e4:c2:a8:6d:bd:09:87:ae:d3:2f:2e:3a:c0:f1:84:
                    e8:df:27:79:49:39:86:4e:d8:6b:f1:89:30:11:e1:
                    14:d0:ea:5d:4f:62:94:78:fe:3a:0c:c0:96:d5:33:
                    2c:96:5a:92:0a:65:c0:51:44:51:30:55:75:23:1a:
                    b2:03:02:9f:38:d4:92:5e:5b:14:45:ba:08:fb:89:
                    76:39:54:2c:fa:fc:20:4c:81:a3:ca:5d:1c:2e:b1:
                    00:77:20:02:13:e1:37:bb:c2:07:8b:1e:9a:bb:af:
                    7a:91:68:75:cc:48:14:44:46:e6:ac:9e:69:0e:b0:
                    87:bc:bd:1c:12:97:a0:50:b4:fe:0e:4e:6f:3b:3e:
                    9f:f6:4a:22:81:5c:19:13:11:0f:7e:a1:e8:a0:dc:
                    6d:26:0f:9f:cd:f6:60:80:24:ed:0e:33:f5:ef:d7:
                    4a:a6:f3:14:2f:91:1f:b4:24:0d:42:0e:2f:3d:30:
                    1b:7d:c3:25:0f:54:df:cb:0a:68:f0:a2:da:cc:6e:
                    b0:5c:fd:0e:2c:42:bc:ef:93:e7:ef:25:76:68:54:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:22:D0:35:2E:C9:CE:0C:9D:B7:54:52:83:B2:B8:80:0B:0C:91
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:57:14:1e:c0:01:4e:63:c2:bc:4e:9e:11:6e:6f:24:32:91:
         98:4d:0d:05:d8:b8:93:6e:79:5b:62:a8:a1:62:c1:85:58:1f:
         13:ab:4c:b4:43:a7:3a:da:39:c7:ef:31:a8:85:59:e0:08:af:
         d7:45:4b:20:f3:c6:3c:bd:63:69:42:1d:e3:62:63:9b:d3:a0:
         b6:45:d0:0e:53:07:5e:54:07:21:29:fb:59:0d:2b:78:f4:95:
         6d:8f:be:16:7a:36:57:6a:b5:f8:40:ac:f9:78:b1:c1:cc:6f:
         5a:c0:2f:d2:85:e5:f4:02:29:d3:13:23:0d:e0:2f:be:6d:df:
         02:18:37:d8:34:88:25:da:ba:01:62:94:bc:c0:db:e8:8f:fa:
         f7:3a:b1:f2:be:c0:3b:04:98:b3:97:b4:19:fa:24:e1:c8:48:
         07:0d:b5:3b:27:90:d6:91:e8:62:3e:51:17:50:e2:a9:12:c0:
         d2:79:b0:9e:f7:05:38:99:f0:6a:9f:88:df:19:58:81:c8:72:
         fd:60:11:6f:e4:e2:8e:28:78:28:b0:03:24:78:0c:59:69:69:
         5e:45:55:04:df:d7:ee:1f:6e:ad:4f:b7:9e:ae:ea:c5:e4:6d:
         f3:61:e9:07:62:cb:4f:88:5f:02:cb:e9:77:7b:b6:ad:cd:03:
         85:45:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:31 2025 by rpki-client