Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File:                     XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier:          skNAdoQPMaRVi/vgFhzmIZGwbR8DmRXfI1r64yTrxXQ=
Subject key identifier:   C7:79:AA:77:3B:6E:A6:85:74:75:EC:0E:C0:53:25:D3:32:78:01:52
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer:       /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number:          06AE
Signing time:             Sat 18 Oct 2025 23:40:59 +0000
Manifest this update:     Sat 18 Oct 2025 23:40:58 +0000
Manifest next update:     Sat 25 Oct 2025 23:40:58 +0000
Files and hashes:         1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: GtUXnvej4RzlxJXJttU9Zzir/ZZXMn2grkyC6j/6ufM=)
                          2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=)
                          3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
                          rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
        Validity
            Not Before: Oct 18 23:40:58 2025 GMT
            Not After : Oct 25 23:40:58 2025 GMT
        Subject: CN=68f4258b-03bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:91:ae:8b:ca:6b:04:40:c2:7f:c8:55:ab:
                    fc:6e:9f:f7:36:a7:bd:cf:ae:8f:71:8d:04:20:e0:
                    4e:3c:ec:e7:25:28:69:dc:4f:41:8a:a5:a1:59:68:
                    79:43:f5:73:ec:3e:e9:49:53:d6:93:12:eb:81:21:
                    f4:2d:48:91:03:6d:60:aa:f0:e1:b4:1a:40:cb:a8:
                    1d:f7:5b:81:62:05:5b:b4:c3:b6:a1:9c:db:f0:f3:
                    62:66:4b:ea:3b:cb:27:8f:a3:26:06:23:cd:52:be:
                    b1:99:9b:2d:fd:d8:2d:33:5b:57:c1:18:55:ad:53:
                    b5:d4:55:ba:2d:08:74:08:6c:8a:0f:76:82:96:84:
                    94:76:9f:bf:80:fb:d8:ca:15:53:7d:8c:dc:84:6c:
                    93:16:f6:2a:f3:b5:70:71:79:b6:85:30:fd:6f:ce:
                    7e:61:df:ae:84:b4:a5:35:6d:ea:da:22:62:a3:a0:
                    17:7c:27:23:e6:98:a4:5c:90:18:37:b9:a3:c7:f2:
                    68:b2:ae:c4:0e:e1:17:92:0d:9c:2c:7c:f8:5e:b6:
                    b1:7f:fb:00:df:08:87:6b:77:2f:45:ef:74:81:22:
                    ac:06:ac:0b:d3:e1:91:a1:76:5b:d5:f8:2b:57:96:
                    cf:0d:21:9e:72:9b:84:20:9a:8d:7f:73:2f:15:56:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:AA:77:3B:6E:A6:85:74:75:EC:0E:C0:53:25:D3:32:78:01:52
            X509v3 Authority Key Identifier:
                keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:d8:4d:70:f5:66:4e:cf:b6:20:92:2e:ad:f0:48:db:8a:
         57:e5:05:ee:60:12:4d:98:4e:89:c1:e8:a1:79:23:24:29:ac:
         e4:b7:c1:b5:96:a9:9b:53:7e:42:1d:5c:f2:23:b0:80:e6:aa:
         8f:cb:60:b5:89:51:7e:11:7e:bc:03:13:54:41:d2:80:59:b7:
         50:9a:2c:74:4d:6e:f9:5d:bc:72:a2:d7:7e:ad:b2:59:fc:cc:
         26:2b:c9:2e:e0:41:c0:29:83:62:3f:ec:56:6c:8d:46:fc:6a:
         42:4d:9a:8e:5f:f4:78:59:94:74:d8:43:b0:ff:95:97:31:fc:
         6c:4b:ef:62:3e:51:9e:a7:d5:93:95:5d:44:59:81:5a:19:16:
         cd:a2:fe:bf:1f:6a:06:92:c1:01:76:b3:55:0e:8f:73:76:b9:
         61:5c:99:bb:b1:a5:a8:95:6d:57:a5:b0:37:96:9b:48:cd:09:
         7b:bb:fc:b5:f4:01:e5:e7:49:40:dd:4f:d2:cb:bd:84:47:44:
         4d:4f:b2:d2:4a:21:30:cb:0b:9c:d5:33:4c:f7:d3:04:99:07:
         5e:6b:71:41:c9:00:7f:03:fb:cb:32:39:8e:13:e1:45:a3:94:
         f3:4a:57:64:c4:8a:82:b6:2c:9a:bd:e0:88:f5:08:ef:ce:8c:
         46:f7:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:38 2025 by rpki-client