Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
File:                     81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json)
Hash identifier:          7hmmJOr4KU3rbevoTiiL9aN8Vb6BhnOKk/wiSBSSnuU=
Subject key identifier:   FC:93:86:8D:19:8D:EE:73:A0:8B:E7:FB:A8:EE:BF:3D:6C:A9:6F:90
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Certificate issuer:       /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
Manifest number:          0C9F
Signing time:             Sat 18 Oct 2025 19:06:18 +0000
Manifest this update:     Sat 18 Oct 2025 19:06:17 +0000
Manifest next update:     Sat 25 Oct 2025 19:06:17 +0000
Files and hashes:         1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: Bsv3FS4CR8ry4cgSeX804pJtn4R0332ZfmefI1XJXgs=)
                          2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc=)
                          3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: 8+Ymqe/569V8FlYV76TmLK19yyKhwgBdmhVdUs4TFXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
        Validity
            Not Before: Oct 18 19:06:17 2025 GMT
            Not After : Oct 25 19:06:17 2025 GMT
        Subject: CN=68f3e529-1ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:16:53:a5:d9:1c:73:3f:94:8b:c0:21:ec:a9:
                    14:44:34:4b:ee:ea:08:7f:d8:be:74:ba:0f:54:c5:
                    61:dc:82:0e:75:13:7a:0d:74:c9:71:09:89:e2:7e:
                    66:b8:9d:c4:3f:f9:d9:a0:8f:18:fa:b0:6a:13:de:
                    6c:e9:24:53:42:f5:f7:fd:67:04:6d:d8:52:41:62:
                    52:b4:8a:c0:a5:6c:5d:01:5f:e7:8e:45:b3:82:dc:
                    05:50:cf:ec:c3:67:bc:ba:17:b1:b5:d8:5c:09:77:
                    08:cc:83:51:96:c6:03:98:ea:a0:a1:9c:30:b0:7f:
                    ca:d9:01:bf:88:56:a1:d9:dc:0c:57:e0:bc:33:0e:
                    e6:6f:05:6b:37:19:bd:25:07:86:b1:62:47:57:09:
                    03:ea:b4:79:57:2e:af:45:74:3a:ad:fd:2b:45:75:
                    97:7d:e9:9f:47:a1:6a:d5:68:01:0b:cf:5d:2d:9c:
                    a3:45:16:0a:2d:38:b7:c9:f1:74:e7:71:40:73:8a:
                    5b:48:66:4a:5c:1e:a1:84:96:c7:b5:d7:c8:ea:71:
                    87:34:d3:0e:d2:2b:a0:5d:5e:36:ec:1d:35:6b:4f:
                    20:27:24:33:f9:16:9a:c5:f7:5f:a1:fd:c1:2d:c7:
                    32:3c:a0:73:70:0a:ea:ed:13:48:4c:58:47:e8:d9:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:86:8D:19:8D:EE:73:A0:8B:E7:FB:A8:EE:BF:3D:6C:A9:6F:90
            X509v3 Authority Key Identifier:
                keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:07:05:3b:2a:55:36:4f:a4:ce:82:ce:6e:fc:7c:0d:52:
         91:7a:69:9c:49:7e:d6:63:46:f4:4b:b7:55:3a:b0:5f:af:a0:
         db:e4:85:36:c1:4f:a3:03:05:6b:13:c7:ed:6b:75:37:d5:32:
         b9:67:a1:3b:12:79:b0:d9:6f:bd:98:d0:34:3a:78:54:05:fd:
         8c:aa:a2:ac:bc:e7:48:02:79:ee:a9:3a:3d:d0:49:d1:5d:3f:
         27:90:1f:ca:d0:e4:ca:8a:4d:e6:bf:61:be:60:2e:18:ff:2e:
         c6:3d:ad:13:b2:fb:1b:4e:96:93:2b:31:47:96:1d:3f:f3:33:
         2c:d8:9f:e3:11:41:37:8b:c9:22:f5:cc:dd:90:43:9f:10:67:
         d8:d0:ce:86:e6:0f:9e:ca:32:ad:0f:71:ba:7f:93:ed:2f:4f:
         bd:11:ec:24:c9:e5:15:83:38:b0:cd:34:c3:c6:b8:e2:7b:83:
         77:d4:aa:87:de:f6:aa:88:dd:3d:ab:a3:fe:7b:a0:15:9a:32:
         fb:00:3e:04:2d:1d:36:dd:22:05:70:3e:33:04:ee:b7:f7:9f:
         f1:74:97:5e:89:f9:46:78:bb:aa:04:90:1a:62:eb:78:1d:7f:
         ed:c1:c3:cf:ab:52:b3:fa:0d:ec:d1:53:22:8d:ad:92:88:05:
         97:47:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:04:01 2025 by rpki-client