Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File:                     PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier:          96ux3EAAenD6X6b3NBcr8p7Bna5ggIagQlhVKQA3v2s=
Subject key identifier:   1A:9F:C7:26:0C:A8:B6:A7:FE:C4:B7:71:49:3E:9D:27:91:B1:71:96
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number:          01DF
Signing time:             Sun 19 Oct 2025 05:16:09 +0000
Manifest this update:     Sun 19 Oct 2025 05:16:08 +0000
Manifest next update:     Sun 26 Oct 2025 05:16:08 +0000
Files and hashes:         1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: XFCv5mjUC5iAjytYenlwiqEAjzigCubiKQMiyZAHkV8=)
                          2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=)
                          3: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Oct 19 05:16:08 2025 GMT
            Not After : Oct 26 05:16:08 2025 GMT
        Subject: CN=68f47418-ef90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:32:41:1c:ac:59:75:1e:40:8d:a3:65:f6:
                    b8:72:30:91:0d:d5:98:ad:c1:26:da:0c:ea:95:20:
                    1f:a3:98:38:37:b9:d1:3e:9a:f1:e6:5f:65:2f:28:
                    25:4d:51:3c:6f:eb:b8:e6:75:28:de:ab:b9:69:ed:
                    e0:48:3f:73:e2:43:41:51:00:0f:7f:30:7b:b3:8b:
                    cb:5e:9c:69:a8:3b:90:b0:9e:39:98:99:a5:66:87:
                    a3:07:4a:59:25:74:4a:c1:7e:a6:51:65:7c:0a:b0:
                    01:48:31:38:da:d2:9c:f7:77:9a:d3:a0:69:ba:52:
                    05:c1:fb:05:da:37:6c:ba:19:72:ba:55:a8:7b:3d:
                    ea:6f:2a:82:9c:ee:3f:44:85:52:6d:b2:2a:e3:ca:
                    eb:a6:5e:d2:21:cc:a6:54:c2:75:76:03:3d:e1:6f:
                    cc:3b:dd:24:f4:c9:53:3f:63:86:5b:b3:4b:a8:1c:
                    6c:63:47:33:5d:1f:d1:21:f5:f9:fa:75:0a:6a:5d:
                    61:86:74:60:15:c7:b8:84:dc:5e:0b:14:3f:59:57:
                    81:1b:44:ea:26:7e:0d:c1:6c:9a:64:e7:5f:dc:24:
                    31:9a:7b:e1:7f:a7:c9:34:5b:77:60:f1:95:9e:56:
                    57:88:22:8e:b8:7b:ba:d2:de:0f:bc:4a:91:ea:ee:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:C7:26:0C:A8:B6:A7:FE:C4:B7:71:49:3E:9D:27:91:B1:71:96
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:d9:96:2f:62:5f:0e:8e:bb:93:25:4e:67:14:bb:99:e3:
         bb:1c:72:50:2f:fc:8e:1c:ac:f0:42:f5:ae:43:33:8e:4c:9e:
         d2:57:5d:e4:0a:d7:60:4d:76:7b:ff:09:de:51:99:67:33:38:
         5d:2b:04:37:21:71:58:7e:eb:44:94:a0:f9:c4:f8:11:61:a9:
         29:4c:f4:c7:75:b6:73:4b:85:36:f6:59:7b:03:30:32:87:b0:
         60:47:38:93:f6:42:62:24:94:6f:6d:a2:a1:33:21:2d:9e:de:
         bf:f9:78:b9:1b:e7:c4:e2:4c:9d:05:7f:a9:3e:08:2f:38:65:
         58:b5:2c:ae:22:76:a3:3b:9b:65:23:cb:02:f3:3b:24:57:84:
         3c:1b:6b:9e:44:f1:61:69:f6:70:fd:cc:a7:25:cf:e0:6a:b2:
         57:23:f4:ca:a1:46:5a:8d:7a:84:4c:58:13:28:21:2c:05:2e:
         12:31:a9:75:ce:3c:4c:db:da:9e:9d:83:ef:f2:94:44:e2:45:
         e5:7d:58:2d:60:a5:21:89:7b:e4:20:59:0b:4c:7e:34:5e:6d:
         76:a3:99:9f:45:48:f9:77:44:eb:f1:eb:b4:d1:35:c7:19:b0:
         2e:23:62:33:99:0d:73:c3:f5:6b:a1:2d:d0:72:ff:96:6e:67:
         b9:d2:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:49 2025 by rpki-client