Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File:                     x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier:          2uVcVUJ9Czq5qkMhw3ovqA246AUtDxkBbUdY38unxCw=
Subject key identifier:   2A:2B:ED:38:C4:50:A0:02:FC:7E:2E:C8:35:12:1C:28:D8:51:8A:4A
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer:       /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number:          0577
Signing time:             Sun 19 Oct 2025 00:58:51 +0000
Manifest this update:     Sun 19 Oct 2025 00:58:50 +0000
Manifest next update:     Sun 26 Oct 2025 00:58:50 +0000
Files and hashes:         1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: guC3f25IuTvQvJ2QNn+lywEMtxbHuKC5uRhO0id/Evw=)
                          2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
                          rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
        Validity
            Not Before: Oct 19 00:58:50 2025 GMT
            Not After : Oct 26 00:58:50 2025 GMT
        Subject: CN=68f437cb-163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:49:f5:de:d8:dd:5e:7b:59:bd:82:52:fc:5d:
                    ab:b8:6a:73:71:1a:9d:7e:51:a7:eb:b6:28:b6:71:
                    0d:11:9c:50:8f:7b:fa:f3:f1:fb:47:f9:d8:cf:ae:
                    9d:9f:51:b4:f8:01:79:13:63:d8:d8:9a:89:67:96:
                    82:00:b1:54:3f:c2:64:e7:f5:80:0a:0f:d0:07:e3:
                    cd:89:54:e4:4d:d9:95:13:7b:f5:35:a2:ec:e8:cd:
                    2f:ab:e4:ab:49:df:9c:0b:f7:c1:50:59:8c:b8:88:
                    3a:16:d9:40:a3:1a:ae:18:d1:dd:56:55:11:a0:0e:
                    d6:44:56:4a:9f:ad:8d:69:b5:fc:65:89:ca:7e:c9:
                    40:3c:80:2c:9d:47:ce:78:3e:3c:02:46:4f:e2:a8:
                    ae:b0:2c:18:b8:fa:2d:e3:3f:d1:1c:cf:d0:2f:43:
                    4a:ca:47:af:ba:53:cc:2a:bf:54:3a:de:0e:7d:e0:
                    d8:e8:dc:a5:c3:a6:42:82:6a:27:66:98:e1:4f:6d:
                    d3:e1:a5:bd:c6:63:f6:f2:a5:5c:0f:05:62:f8:37:
                    45:99:26:0a:9d:d4:51:4e:7d:21:3c:41:1b:5b:6a:
                    8d:40:95:0d:bc:f4:e1:a6:2e:e2:ad:13:f9:e6:52:
                    50:01:94:cb:4c:b3:6d:59:64:e9:d1:ae:d4:99:b5:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2B:ED:38:C4:50:A0:02:FC:7E:2E:C8:35:12:1C:28:D8:51:8A:4A
            X509v3 Authority Key Identifier:
                keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:2b:33:fb:7f:35:d7:4b:2d:31:54:84:eb:34:e1:24:50:
         03:71:b2:7b:6e:54:9f:e0:b6:e7:14:7e:ed:14:04:c3:12:de:
         8f:95:f1:81:79:4d:cc:ac:75:5e:29:3a:d9:e8:be:26:2d:5b:
         3d:74:49:1a:0c:5f:12:66:ca:8e:f7:ab:03:14:31:64:45:13:
         16:96:00:bf:e8:2a:a1:17:29:d5:85:7e:a4:75:52:5c:48:4d:
         45:5e:d7:35:03:87:c6:cf:05:06:8f:74:a0:af:84:e2:c2:f7:
         a7:c9:cd:2c:43:67:58:7e:df:80:b8:54:69:b6:79:a6:67:e2:
         0f:a5:ce:6d:27:9d:52:12:a0:f6:14:68:e4:a5:a5:b0:68:26:
         d8:8c:cc:1f:88:29:64:21:b5:ce:a4:99:a7:29:fd:09:fa:5d:
         cc:aa:cd:80:43:22:b4:27:7d:06:f2:7d:2c:21:6a:24:bd:0c:
         2b:ac:de:c4:98:a4:6e:30:58:e6:07:47:ab:50:14:61:91:aa:
         68:d0:f4:33:b6:5a:d9:9c:11:7b:40:f4:a3:f9:36:f3:e7:d1:
         64:6e:83:2b:e0:6f:d6:bd:e2:77:25:8b:89:e6:99:1b:b3:fc:
         a1:61:93:79:54:06:46:57:1e:cd:ca:e5:88:fd:3b:58:b4:05:
         6e:81:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:57 2025 by rpki-client