Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File:                     fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier:          qOBevhFYd8Zvv5GBp/pTy/jNyW1EnZM8vOu2W4uG/PU=
Subject key identifier:   7C:B4:60:77:35:02:DC:C5:22:7B:8C:45:D0:CA:12:99:C6:2F:C2:72
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number:          0812
Signing time:             Sat 18 Oct 2025 22:10:53 +0000
Manifest this update:     Sat 18 Oct 2025 22:10:52 +0000
Manifest next update:     Sat 25 Oct 2025 22:10:52 +0000
Files and hashes:         1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: dwmam/stHLQNPfBKT0HigvZjDohzV8If5GFCqkRTcZs=)
                          2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: BwA8MEhqgGbAzSbHdeQ+BFQnrqqSo7A794PhNnAq0qA=)
                          3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: TWoh7LVQqQmuW9GpZzIh16PRVa2OB94FLWBuSV7i0+8=)
                          4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: F8etYfliydabteMfbSSAIkH2xX9USHfIQD7d5Y84ryM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Oct 18 22:10:52 2025 GMT
            Not After : Oct 25 22:10:52 2025 GMT
        Subject: CN=68f4106c-fff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:bb:56:ca:19:a5:17:e5:92:a2:58:d6:e1:
                    48:8c:34:e1:b9:11:ff:8e:31:65:76:da:77:bb:c9:
                    df:5f:4b:8c:63:f3:8f:aa:06:e0:86:d9:aa:64:df:
                    ff:f2:97:ef:bd:86:17:58:45:b0:aa:55:ed:e2:65:
                    1e:32:19:5f:74:bb:51:bc:0a:62:2c:f5:b1:13:19:
                    55:ac:82:2e:0a:6f:a2:8e:ee:3f:66:51:fd:d3:4f:
                    9f:71:f7:ac:f3:9c:d6:23:63:99:5a:b7:62:9a:40:
                    ff:16:cc:01:9b:9e:f4:2f:21:5c:42:6f:04:45:48:
                    29:ab:9e:da:cf:1e:c8:75:a6:71:f0:11:ea:60:4c:
                    e1:e0:c3:c4:ea:ea:9c:20:98:1e:63:d4:a6:3f:64:
                    1f:01:69:e3:f5:fc:00:91:6f:46:bc:e1:27:36:40:
                    bf:53:1e:f2:bc:c9:41:c9:05:74:78:9d:b3:ab:22:
                    ed:b3:99:e9:fb:3f:01:ca:cc:bc:62:42:76:3d:10:
                    37:81:fe:9c:2b:5f:be:f7:a0:54:e6:21:2a:40:b7:
                    c5:26:93:2a:0c:35:4a:9d:e4:09:be:aa:d6:5a:bf:
                    80:00:a0:e7:68:1a:b5:5b:39:d8:d1:b8:7f:ce:93:
                    1d:7c:0c:3a:ee:8c:2d:fa:a8:df:4a:b2:11:da:f9:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:60:77:35:02:DC:C5:22:7B:8C:45:D0:CA:12:99:C6:2F:C2:72
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d2:47:42:0d:3d:c9:21:d8:2a:71:6e:3c:e4:fa:cf:ef:26:
         d9:9b:55:df:d9:3e:c0:55:0d:65:c4:f6:db:e7:8e:55:59:c3:
         60:10:86:75:98:b0:a8:31:b4:0f:99:e4:d5:5f:a4:05:65:5c:
         79:4a:ae:cf:88:ad:0b:c5:13:7e:75:da:3e:9f:5a:2a:bd:92:
         79:e2:ce:11:61:fd:3a:74:de:a5:96:85:7f:d6:81:e9:74:9f:
         7f:de:e9:6d:41:58:6e:dc:bf:2c:00:29:eb:04:03:b8:b8:f4:
         0a:47:fa:8a:a8:0f:63:85:e3:34:24:2f:04:03:4e:0e:a2:3e:
         9e:1a:64:97:d8:7e:95:df:e5:84:34:96:db:5e:b7:84:38:ba:
         d0:b6:2e:01:2c:7c:11:c0:4d:77:5d:2b:81:0d:87:32:b0:5a:
         15:f5:61:03:90:26:05:6b:b0:9b:6b:5d:ad:65:69:4f:c5:37:
         57:ef:a3:e4:7d:87:94:c2:33:0c:ba:23:7a:85:70:16:02:9e:
         b3:db:e7:ce:18:a9:f3:1f:74:f2:76:1e:f3:dd:4a:df:af:5e:
         4b:52:4f:05:04:40:c2:a2:28:a4:8a:ac:51:ad:9d:d5:d3:cf:
         b8:f3:c0:37:95:eb:e3:82:60:84:df:23:20:81:89:80:3f:09:
         f1:45:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:19 2025 by rpki-client