Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File:                     vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier:          Xb0u2/c3guQzKFPPyfsnx5KoAs/DFsoRaGmFYaBnyXY=
Subject key identifier:   F3:28:BC:07:1B:37:D4:17:66:37:B5:A4:9D:2F:48:F3:4B:32:FE:EE
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer:       /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number:          86
Signing time:             Sun 19 Oct 2025 09:53:54 +0000
Manifest this update:     Sun 19 Oct 2025 09:53:54 +0000
Manifest next update:     Sun 26 Oct 2025 09:53:54 +0000
Files and hashes:         1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 1PfZPXEzR1nMRBq4lcpkMSagJfOMOoE6CRxIeyQlaT0=)
                          2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=)
                          3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
        Validity
            Not Before: Oct 19 09:53:54 2025 GMT
            Not After : Oct 26 09:53:54 2025 GMT
        Subject: CN=68f4b532-acb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:45:ea:82:a0:4f:d7:75:ff:b2:64:6c:71:4e:
                    ee:61:9e:98:88:d8:e9:28:e4:3a:29:ad:a4:10:67:
                    db:28:09:0a:7e:57:93:3e:34:fa:52:7c:86:c1:46:
                    31:9b:eb:58:f1:d2:84:50:66:02:48:a3:a2:62:31:
                    ff:96:b0:29:df:de:5c:01:0f:fc:df:52:b8:db:98:
                    77:95:c3:cb:2c:b3:33:be:e8:30:91:b0:6d:41:b4:
                    35:0c:e6:cd:01:9c:40:e2:0a:7f:27:e9:4b:27:33:
                    2d:3c:13:d3:db:92:5e:d7:70:b7:77:52:ac:74:fa:
                    cf:24:31:cd:1e:81:84:ea:89:cb:3a:62:74:ff:90:
                    9c:c1:eb:b9:9f:e1:8c:a0:c5:6d:11:d5:16:1b:ee:
                    f1:16:f7:17:b4:58:f4:67:a1:25:b7:76:e0:91:6a:
                    fe:fe:fc:c9:fd:87:a7:df:f0:b7:98:e2:fe:01:23:
                    13:01:3b:53:64:bd:c1:53:7c:84:e3:2a:d6:75:fb:
                    b4:18:94:88:94:31:a2:48:3b:ca:48:f2:6f:e3:74:
                    87:35:2c:08:af:32:89:d1:e6:6b:11:88:ed:05:f7:
                    77:c7:37:c0:b5:70:fd:40:2a:d4:ea:1c:94:c8:c7:
                    62:95:e3:b9:d9:04:22:bc:2e:fe:ee:87:d7:68:71:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:BC:07:1B:37:D4:17:66:37:B5:A4:9D:2F:48:F3:4B:32:FE:EE
            X509v3 Authority Key Identifier:
                keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:e9:cc:81:a7:d2:20:f8:95:7c:94:d2:65:6f:75:6d:a5:
         fb:95:b0:55:52:30:a7:3b:28:d3:7c:98:b7:8c:e7:15:3d:f3:
         15:ce:a8:56:0f:30:9e:0c:95:f3:21:7a:69:0f:57:4d:53:a6:
         b3:46:9a:d0:16:04:d6:e0:59:55:1c:85:2c:eb:e3:3c:00:4d:
         cb:8d:c6:12:99:94:87:9d:f9:37:0b:9e:7e:d1:2f:e6:51:c5:
         da:6b:50:a3:c0:6a:aa:fe:40:10:bf:2a:77:c1:8f:11:a0:4d:
         8a:11:2d:41:06:9b:2e:1b:13:51:4f:a8:b9:eb:c7:b1:84:9c:
         53:b7:fa:ba:3f:30:26:c8:a6:61:27:55:34:89:da:4c:e9:e0:
         d2:58:4c:46:73:1b:d2:53:2d:d5:6c:5b:2f:39:d6:79:ab:77:
         b2:19:90:91:6c:df:1f:16:e9:5b:a1:b2:de:02:5d:3a:45:9a:
         c1:e0:b4:21:be:17:59:82:1f:82:62:06:6e:d4:68:ce:b3:a9:
         82:22:63:0e:c3:ff:36:e6:58:de:7e:ab:22:93:99:92:da:29:
         26:77:7b:50:76:60:35:c5:95:d8:66:38:5b:37:7e:24:59:24:
         40:ff:53:11:ac:0b:97:b6:95:2c:36:86:df:ad:b9:e9:1c:01:
         ef:76:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:18 2025 by rpki-client