Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
File:                     _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json)
Hash identifier:          Y7lBm7ZQ92cnipW0/i7VBFXJIW/ewwqXNMDSuZKjteg=
Subject key identifier:   FB:77:15:36:92:BF:33:BE:6D:23:40:48:1E:33:D9:24:0A:6C:18:A5
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Certificate issuer:       /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
Manifest number:          0673
Signing time:             Sun 19 Oct 2025 00:04:39 +0000
Manifest this update:     Sun 19 Oct 2025 00:04:39 +0000
Manifest next update:     Sun 26 Oct 2025 00:04:39 +0000
Files and hashes:         1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: iWmHmyQulul5j7vFD4WXakHxQX3ZAV61k5dQd7tpRZ4=)
                          2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
        Validity
            Not Before: Oct 19 00:04:39 2025 GMT
            Not After : Oct 26 00:04:39 2025 GMT
        Subject: CN=68f42b17-6bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:3d:98:89:e1:61:ab:f1:e6:34:b9:ec:76:
                    90:39:9b:eb:6a:04:f5:b5:26:76:92:d7:4a:58:45:
                    f9:f8:4e:20:50:be:78:f1:18:bb:ca:6d:07:5e:57:
                    89:83:fc:ec:7a:4f:f8:a9:de:d6:a1:6b:ab:e8:81:
                    0b:0b:95:28:18:9d:02:5f:88:96:b6:2c:1f:23:c9:
                    f3:ef:55:b7:f0:10:01:10:2e:75:07:32:7b:5f:11:
                    82:be:f9:b0:52:a1:84:54:b0:09:fc:b1:55:1d:0f:
                    52:82:06:41:f6:99:36:7c:ed:b8:fb:20:0f:ee:59:
                    0e:c1:b3:6a:79:98:f3:ed:30:e3:b9:98:70:05:e1:
                    8c:d4:f1:f2:1c:64:b3:99:a2:2c:c2:65:74:c1:9c:
                    56:cf:1e:8e:8a:f0:0d:3e:3c:fb:54:cc:b8:06:15:
                    01:2f:a5:53:3c:48:62:2c:38:8b:10:7b:a8:a4:b9:
                    99:cc:ca:0f:f1:94:df:79:31:3d:89:46:b4:6f:bf:
                    a2:b4:00:c6:db:f7:88:29:17:92:3f:66:6d:20:c3:
                    f6:fa:a4:90:1c:15:4d:af:d1:ee:60:13:0d:27:61:
                    7e:48:4a:4c:58:ea:33:4a:b1:83:ba:1f:c7:c0:c2:
                    1f:06:3f:a7:c4:12:d1:8a:9b:8a:c1:14:87:9c:61:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:15:36:92:BF:33:BE:6D:23:40:48:1E:33:D9:24:0A:6C:18:A5
            X509v3 Authority Key Identifier:
                keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:38:80:45:93:ad:12:24:cb:a2:ef:08:7d:f0:81:a3:23:26:
         33:77:50:1f:f9:a3:1b:b5:66:aa:00:fc:3f:ac:62:93:16:05:
         4b:5a:72:3e:3f:a2:aa:80:e2:94:2e:9d:96:8a:f4:78:69:bd:
         61:bc:69:a2:10:1d:e5:5b:a7:65:2a:36:01:f0:75:bb:90:52:
         c3:7c:a4:8e:16:be:a2:29:d0:73:ed:09:0e:84:0b:b9:56:8d:
         86:0b:4d:36:f4:d3:31:c4:24:58:e9:78:94:83:0d:f6:e0:03:
         a5:dc:d8:33:4a:78:01:aa:3b:df:f9:8c:0b:9b:52:73:ca:e7:
         5e:20:63:a3:e0:9e:ca:68:09:9e:4d:b3:ed:c0:7b:4c:24:a7:
         72:e5:a6:6f:b1:e2:d5:3a:75:42:cf:b3:ae:4a:ea:89:ec:d4:
         13:c0:50:c7:c7:be:53:9d:55:de:46:13:84:7d:7f:1d:d7:f4:
         b8:b6:b7:75:46:8a:d3:53:a3:4b:e8:52:ff:e5:9b:8b:4b:30:
         de:47:9f:be:6f:58:a5:5c:3d:cf:9b:a4:b6:95:70:3b:61:a4:
         75:54:2d:bd:d5:ce:dd:e2:46:01:d4:6c:cb:5b:a8:70:3b:f1:
         06:93:1d:b0:6e:05:bf:b5:9e:93:63:f8:44:85:70:e1:8b:8d:
         6f:21:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:39 2025 by rpki-client