Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          yVFT8fGCgguKpJAUDnXD9rW7Byx87ROvjj0fmw9AE4A=
Subject key identifier:   8F:FA:C2:52:D8:B3:18:9B:CD:FF:44:64:69:1B:42:99:18:91:3F:F4
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          99
Signing time:             Sun 19 Oct 2025 09:47:09 +0000
Manifest this update:     Sun 19 Oct 2025 09:47:08 +0000
Manifest next update:     Sun 26 Oct 2025 09:47:08 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: CMgtpcySw4wmATvoYBhD2cPweXvthyFslyT9ygDUeho=)
                          2: E2212D2A7B1411F0A9C4F31FC4F9AE02.roa (hash: RJ4fwJ9GTpo+NUrJVgDVg1EFpmLawJIxs8RgkCH3GcI=)
                          3: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=)
                          4: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Oct 19 09:47:08 2025 GMT
            Not After : Oct 26 09:47:08 2025 GMT
        Subject: CN=68f4b39d-db4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:0e:e6:78:80:c2:bf:b2:7e:1d:ee:b3:bc:
                    bc:de:c3:7f:79:d3:69:1c:4b:2e:c6:86:84:df:d5:
                    cb:8a:72:0c:84:27:94:03:39:bf:f4:37:b6:05:2e:
                    e7:63:6e:07:56:77:d6:15:88:ea:c4:5d:86:78:49:
                    33:33:38:f6:db:b7:41:6f:59:98:ea:e3:50:b0:0c:
                    8a:33:20:0b:11:c7:3e:1e:b4:ae:2d:ba:0b:9e:2a:
                    de:47:6d:d9:2f:e6:fc:b6:46:82:42:a7:cc:49:20:
                    1e:07:94:c6:15:4d:80:33:8e:40:d3:26:fa:bc:31:
                    95:d6:e2:e0:9f:ca:d2:c3:d1:c5:bd:5d:65:1e:34:
                    b4:0f:52:35:72:11:21:db:6e:fb:8e:6d:3d:d0:cb:
                    d0:05:59:d7:fb:f5:e5:be:07:cf:d0:4e:8b:42:10:
                    a0:ea:b2:1f:fb:2f:82:7f:31:d0:bf:a0:77:86:3a:
                    05:d1:a5:7b:52:e3:dc:4c:31:47:f3:66:6c:e3:57:
                    54:4a:de:35:c8:21:dd:46:ff:13:fd:fb:71:c1:05:
                    c2:03:fe:8c:22:ad:6e:2e:2e:8b:14:40:68:54:fd:
                    ff:fc:39:16:af:ee:bc:65:eb:b3:3f:79:a1:1d:03:
                    07:3e:cb:c5:90:8f:38:b2:ba:e8:75:3f:ac:23:4c:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:C2:52:D8:B3:18:9B:CD:FF:44:64:69:1B:42:99:18:91:3F:F4
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:05:4f:6d:e8:e2:7e:9c:23:47:04:23:34:b7:92:de:16:4e:
         2d:0d:97:08:97:51:14:ee:06:fa:22:04:ba:0a:94:8e:f5:e3:
         cd:e7:fe:6f:61:6b:fe:37:50:10:86:bc:68:0c:33:f2:18:d7:
         aa:59:6f:43:98:68:9c:b0:ec:f8:90:24:94:61:c5:48:84:eb:
         3e:7e:ad:96:b5:2b:fd:4f:c1:77:64:12:cb:c9:33:31:cb:38:
         63:05:9d:41:2b:f8:67:20:50:03:91:4f:a5:17:cb:ac:93:30:
         d2:19:6b:c7:2c:37:f5:79:55:84:24:e0:4b:ca:b7:09:ba:c3:
         f0:4e:d5:9f:e1:06:33:1a:bf:c7:ad:13:98:f8:b3:e3:b8:82:
         67:43:f8:11:22:c6:52:fc:8e:57:79:ee:c9:f2:ed:de:b8:b0:
         56:b7:93:0c:b1:fa:2c:7c:d1:fb:9c:42:3b:59:7b:73:39:45:
         88:2d:df:5e:a1:ce:03:ba:c3:c7:c9:d5:93:7d:0b:8f:49:f3:
         b4:99:c3:d3:e6:d8:35:66:f5:82:56:e1:76:fe:9f:47:57:1f:
         db:3f:61:ae:db:9e:af:ef:c6:19:62:6f:7b:5d:79:3e:bd:60:
         51:3b:28:c2:8e:d7:f0:1d:c3:f2:b2:ef:15:d0:0e:26:be:b5:
         36:29:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:16 2025 by rpki-client