Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File:                     J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier:          C5Kcx/3CAfGOzj9BBtJlEv2LfrzjophztVADcflx5SE=
Subject key identifier:   17:EE:DA:96:62:C7:BD:E9:96:86:DA:CC:4E:2F:DA:9B:05:9F:6C:6B
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number:          0378
Signing time:             Sun 19 Oct 2025 02:53:16 +0000
Manifest this update:     Sun 19 Oct 2025 02:53:15 +0000
Manifest next update:     Sun 26 Oct 2025 02:53:15 +0000
Files and hashes:         1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: 4Ad3k9X/eFgBwRP2Mpwfnfb69v7+AOmIv9URk6/PRM8=)
                          2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: dxa4kBT2lvl3oboOGNPEyKat95ik2LOjHGB6LQMSuIY=)
                          3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: xwWWISkzf0btU4XnSYbv2CyxUkjvyAAYT2JHS7cyDnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Oct 19 02:53:15 2025 GMT
            Not After : Oct 26 02:53:15 2025 GMT
        Subject: CN=68f4529b-cb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:8d:91:36:08:87:67:bb:fe:43:3e:43:93:
                    c0:d9:0d:e2:e1:fb:a4:38:65:b8:c9:29:9a:d3:2d:
                    04:f5:d2:21:78:21:64:d8:18:cc:3e:2b:af:47:ec:
                    41:01:1b:48:02:a5:59:59:ed:d7:09:e5:7b:ac:f3:
                    bc:42:58:bc:6b:07:57:df:a8:29:06:62:1d:f1:5e:
                    a2:22:ff:db:4c:be:e3:da:18:6b:30:3e:8c:4e:8f:
                    f4:08:dc:b6:da:5f:b7:46:ea:35:80:61:7c:22:27:
                    e6:59:e7:2a:51:5e:a4:70:16:bc:c4:4f:9b:14:ad:
                    ca:0a:aa:f0:cf:b9:c4:cf:05:b5:9e:6d:68:33:e4:
                    55:c3:8a:fb:f9:16:d1:9f:3a:f7:59:b8:c3:9f:e1:
                    98:f9:ec:a4:c7:e6:5a:ee:4b:2f:53:d8:9a:80:8d:
                    fe:0b:80:6c:1b:5e:79:10:b9:2f:cb:63:d7:3f:4c:
                    2a:0a:bd:70:03:2c:24:52:24:72:57:be:39:08:30:
                    c7:62:74:9b:8c:cc:64:9a:ee:92:3c:29:0e:85:a4:
                    8b:e5:b2:47:99:64:14:3c:7c:46:81:59:8b:13:4f:
                    7b:00:47:e6:2a:3c:c5:1c:14:10:af:01:f4:6a:16:
                    59:cf:50:f6:58:69:eb:0a:6e:34:5e:8c:e5:6f:a0:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EE:DA:96:62:C7:BD:E9:96:86:DA:CC:4E:2F:DA:9B:05:9F:6C:6B
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:5e:a1:30:77:70:ef:7c:ed:2f:95:4d:48:a4:81:da:51:
         69:d0:1b:7a:06:de:02:4e:3e:81:f9:db:81:41:ad:95:a5:da:
         8c:b0:fd:56:ce:25:94:96:ba:79:52:5f:88:b2:76:cd:d8:a0:
         65:d7:bc:19:60:bc:1d:ac:89:f0:4b:e0:da:94:e0:23:ff:b9:
         cb:22:81:57:66:97:da:e8:22:c8:77:54:a4:2f:a8:4b:42:7e:
         95:2b:33:82:69:29:09:d4:58:7b:5d:49:53:fd:dc:55:b4:12:
         30:bb:11:39:8c:a2:85:4e:c9:ce:f9:8c:2b:5c:88:be:32:46:
         75:cb:66:fd:90:cc:6a:d8:e0:24:39:bb:1d:a0:d5:bf:b0:3f:
         d3:4b:1d:28:a1:42:77:27:66:99:8d:29:83:bc:db:40:65:95:
         62:5b:9d:65:0a:52:93:e5:7e:44:59:5a:af:2c:b5:fb:d2:19:
         e3:67:1a:3f:38:1c:10:48:e7:d1:c3:15:10:c8:dc:1f:ba:90:
         1e:76:6f:51:ff:55:bc:8f:cb:ec:68:0d:85:38:f9:df:fc:29:
         79:63:96:e7:51:78:8b:21:2d:70:96:08:ed:0d:21:97:22:06:
         2d:59:55:75:e0:45:a9:0a:4d:67:1f:f7:79:8d:a4:bd:f8:a9:
         bd:d7:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:32 2025 by rpki-client