Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
File:                     8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json)
Hash identifier:          yortF3YVsV+Yl2oPXmNIALd5gkZltJlUSgaWv/LagyI=
Subject key identifier:   12:94:36:79:54:D8:F5:1F:2C:06:8B:87:32:9E:07:18:99:FF:8C:E4
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Certificate issuer:       /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
Manifest number:          60
Signing time:             Sun 19 Oct 2025 10:27:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:27:47 +0000
Manifest next update:     Sun 26 Oct 2025 10:27:47 +0000
Files and hashes:         1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: kxheP+kKLdiTv5ZsOMSVAZKfNdudHYPMT9Aeg3e5GzY=)
                          2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
                          rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
        Validity
            Not Before: Oct 19 10:27:47 2025 GMT
            Not After : Oct 26 10:27:47 2025 GMT
        Subject: CN=68f4bd24-8b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:30:73:6f:2e:b0:84:e3:df:59:30:c5:c3:
                    de:a9:63:43:02:1c:c9:ba:dd:ab:c3:cd:7a:1d:d0:
                    f5:72:37:5b:7a:93:0e:d9:6e:7f:2a:03:9b:a3:c0:
                    fe:5c:f0:34:80:48:fe:af:da:3a:46:34:05:ae:f7:
                    eb:26:95:2f:5f:fc:ef:d2:5c:d2:27:e8:48:6b:8b:
                    18:e4:ef:8a:0f:b4:7a:b2:74:03:57:25:de:a2:43:
                    58:4c:e0:af:b2:4a:b3:d5:65:a0:a4:fc:f1:bd:28:
                    4a:6a:ec:58:82:d2:2b:14:ec:c8:14:6c:25:ba:18:
                    60:aa:ef:f1:af:6d:79:51:bf:0c:b1:9b:b9:41:c4:
                    29:d2:37:b2:7b:19:07:e3:9e:27:a6:bf:8c:37:0d:
                    07:6d:6f:bf:21:3d:42:3f:a4:ce:25:af:4d:ff:7e:
                    bb:a7:05:31:ef:aa:a9:9d:10:e8:15:3c:af:df:05:
                    ae:f3:e8:9c:57:70:33:ae:5b:0a:f2:9f:8c:4b:b5:
                    b1:7e:ce:d6:0f:64:db:8a:5e:25:7d:24:3a:ab:f2:
                    8c:75:fb:10:00:8d:f4:f5:01:c3:7a:1d:f6:23:51:
                    25:1e:bc:bf:28:94:0d:73:c9:8e:d8:7d:b4:ff:03:
                    ea:8f:34:59:76:36:9c:8d:d2:c3:87:04:25:cc:a6:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:94:36:79:54:D8:F5:1F:2C:06:8B:87:32:9E:07:18:99:FF:8C:E4
            X509v3 Authority Key Identifier:
                keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:ce:e7:28:ae:4c:02:c2:aa:bc:8b:99:3a:7f:17:88:8b:
         05:21:f6:f6:7f:e6:46:3d:18:55:8d:37:06:cd:f5:c7:bd:e2:
         2e:75:ea:db:51:d4:16:5c:3c:aa:ee:ac:e5:7a:d8:79:61:d9:
         ad:33:e8:3e:33:d3:c0:b7:da:c0:03:97:d0:fc:e2:8d:0b:2a:
         d6:b0:93:9e:0f:31:f2:4d:58:40:4a:85:36:b8:67:ee:b9:c1:
         2b:3b:13:ac:d9:9a:10:78:d0:29:a6:79:27:d6:1a:12:9e:5c:
         72:af:b1:ca:81:dd:a2:29:61:3e:32:2c:44:28:ce:57:13:0c:
         5e:2d:5e:c9:c9:40:fb:09:ce:dd:ec:12:ec:e1:6c:1a:ff:5d:
         b9:f6:2f:e4:af:7a:4c:82:68:8f:09:e3:78:d4:f0:ad:53:53:
         35:69:a0:85:85:c8:ef:e9:f4:c3:95:86:03:86:bd:0d:60:0e:
         71:35:8f:97:d0:7c:dd:82:10:e1:82:eb:9e:9f:32:bc:6a:14:
         b6:37:55:1f:3f:fc:9b:fd:ba:a1:0e:96:d5:2b:0a:7d:d8:71:
         69:12:45:6e:28:ae:bd:d8:22:07:97:31:1a:d1:65:b0:10:1b:
         79:cd:2a:91:1a:2e:b7:b4:31:72:90:a3:26:42:f5:d2:4d:e3:
         3e:7f:5d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:24 2025 by rpki-client