Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File:                     pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier:          vlzlfvgxLEuYd+2ZvE/MGf4J4KzS4VfgHcbaPmJbJx8=
Subject key identifier:   CA:AC:D5:C6:07:89:49:60:7D:91:FE:BB:BA:64:1F:22:29:16:2C:B7
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer:       /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial:       34DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number:          34D7
Signing time:             Sat 18 Oct 2025 14:45:10 +0000
Manifest this update:     Sat 18 Oct 2025 14:45:09 +0000
Manifest next update:     Sat 25 Oct 2025 14:45:09 +0000
Files and hashes:         1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: cX5nZjO91zw3wMtXKjrsXsd2sf0K3+AYHgARz4bGg1I=)
                          2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
                          rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13534 (0x34de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
        Validity
            Not Before: Oct 18 14:45:09 2025 GMT
            Not After : Oct 25 14:45:09 2025 GMT
        Subject: CN=68f3a7f5-6401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:77:66:77:d8:f1:06:ff:73:a9:c5:1a:3f:
                    6f:e8:28:47:38:a2:d9:80:7e:78:7a:09:f8:bd:99:
                    14:e3:4d:65:41:60:56:3b:74:e0:67:8f:6f:ef:63:
                    88:92:c1:a7:d6:5f:38:08:11:7d:61:82:04:bd:71:
                    0f:40:c6:17:00:2c:2e:2c:2d:a5:76:ea:b3:1a:50:
                    76:43:c3:f6:56:2a:f2:65:ac:dd:95:53:c1:b0:fe:
                    1c:32:e6:71:47:68:81:e2:77:8a:47:86:5c:49:92:
                    a2:f0:d2:90:34:02:bd:ce:13:8e:65:73:62:02:e0:
                    16:5a:5b:10:39:90:ff:e1:65:8b:c0:71:82:38:61:
                    56:45:34:bb:ac:ae:8f:af:03:38:9d:77:d9:40:ce:
                    14:a5:db:70:68:3d:97:0a:1e:b7:42:d9:59:49:f8:
                    d5:5c:c3:86:a2:da:ea:4a:50:89:9f:6b:62:1f:33:
                    59:30:08:1e:4f:15:ee:a8:fc:f5:ca:cc:21:ce:6f:
                    34:0b:a7:b0:66:2f:3e:01:01:7f:0d:07:ce:a5:d1:
                    a3:06:6b:30:ce:74:76:c0:8d:9c:5d:fa:72:a0:bc:
                    0d:0a:1a:89:c1:08:cc:1c:75:80:7b:c9:9d:a7:ee:
                    27:ca:33:7a:1a:19:71:c0:7c:3c:e4:66:45:4d:fa:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:D5:C6:07:89:49:60:7D:91:FE:BB:BA:64:1F:22:29:16:2C:B7
            X509v3 Authority Key Identifier:
                keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:6b:d1:f4:69:71:ac:a3:d6:b4:36:9f:46:50:97:67:af:
         0b:ce:a7:90:6e:77:c4:74:c6:09:87:ef:96:c3:10:86:3a:75:
         54:6a:cd:7d:f6:c7:9e:57:ac:fd:c5:c8:2f:73:d0:ce:a8:70:
         60:5b:73:c7:e2:f2:28:0e:db:6b:4a:91:54:b0:36:67:c4:18:
         b0:9b:bf:a1:eb:14:8c:c8:e4:bb:39:fa:f5:38:c5:97:0a:c2:
         1f:19:23:68:d2:8d:63:23:65:b3:21:76:ad:6e:8f:d7:0f:f1:
         ea:b7:61:c1:52:3d:21:0d:25:e5:30:6e:89:64:63:f4:a0:a6:
         30:e6:68:5e:b0:0d:8e:b8:14:1b:13:86:97:09:27:32:ec:2a:
         d0:ce:0b:89:9a:c0:31:e0:55:86:49:8c:63:9f:cf:93:49:8d:
         00:28:07:fd:b3:37:cc:8f:f7:19:6e:d6:68:3b:6a:12:d3:8f:
         63:90:8c:07:e0:6e:5e:bb:e1:37:33:82:da:e3:ad:23:6b:41:
         e5:0b:83:c4:89:48:cb:40:c9:6c:de:a9:f4:d3:03:98:8c:d4:
         70:17:10:9c:19:a5:12:f5:94:09:e1:1d:46:86:94:8c:7d:9f:
         99:df:c7:b3:53:f7:52:40:b3:15:c7:2f:ce:a6:f5:59:56:99:
         71:28:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:14:45 2025 by rpki-client