Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File:                     4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier:          soq6siMLDjIjdyouXqbqXdJWRY/9vFytnhqZ4N7rBME=
Subject key identifier:   01:05:1D:14:C7:07:6F:04:41:CD:EE:44:AF:3D:4C:C6:50:B2:55:E7
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer:       /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number:          078A
Signing time:             Sat 18 Oct 2025 22:51:30 +0000
Manifest this update:     Sat 18 Oct 2025 22:51:30 +0000
Manifest next update:     Sat 25 Oct 2025 22:51:29 +0000
Files and hashes:         1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: mKcynF9FW4esPM+Lv1pe55ehjNVCkMtDHbAltVk+WLs=)
                          2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: MMDW5GKNwb6UBpTQg+bN7/Wer/8y34uE+hwA4JCHhWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
                          rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
        Validity
            Not Before: Oct 18 22:51:30 2025 GMT
            Not After : Oct 25 22:51:29 2025 GMT
        Subject: CN=68f419f2-b0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:38:8d:c0:8a:40:ea:31:74:84:c0:17:4a:
                    27:1d:35:4e:a6:4e:d7:f4:8d:45:79:76:9c:97:67:
                    5e:e4:76:ad:66:2d:94:9b:80:8b:09:ea:06:fe:1a:
                    aa:d9:23:a6:d0:48:03:6a:dd:4a:e1:b0:af:f7:ef:
                    77:03:fe:94:77:08:74:90:89:2e:db:e4:73:d1:9c:
                    2f:a3:df:41:08:da:32:2f:6f:d6:f7:9c:8e:2d:19:
                    e9:0d:61:97:c3:fa:5e:98:a1:92:cf:2b:27:e5:10:
                    dd:cd:c0:6e:bb:ed:10:d9:9c:01:67:84:ad:9e:3f:
                    39:4e:3e:e9:ce:64:e2:45:3d:77:1d:a1:7b:27:b2:
                    69:b3:09:93:0b:0f:e7:b7:fc:17:ff:5a:9e:e6:04:
                    dc:f0:7e:d6:33:88:f9:a5:a4:38:67:28:37:ad:3f:
                    fa:7f:96:0f:2e:7c:f6:39:5f:1d:98:31:7b:2a:77:
                    31:f9:01:d9:84:95:eb:b9:4b:62:95:f5:d2:c3:8a:
                    c6:57:49:cd:c6:1f:a7:66:50:4f:2b:5c:c0:e0:d8:
                    04:75:21:62:43:9a:73:dd:35:d5:60:25:ad:ba:49:
                    88:5d:63:fa:30:97:72:2d:25:7c:6c:26:c8:c1:81:
                    a2:fc:de:26:6a:4d:48:0f:91:9a:0e:74:4f:10:92:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:1D:14:C7:07:6F:04:41:CD:EE:44:AF:3D:4C:C6:50:B2:55:E7
            X509v3 Authority Key Identifier:
                keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:19:d5:37:4f:d5:6c:90:91:5f:53:c1:ba:98:6d:e1:48:
         e2:a1:8e:3b:ca:30:e9:e2:9b:de:7b:50:34:d5:51:bf:4c:ba:
         84:65:26:f0:e9:9f:ae:21:fd:79:a1:03:3b:8d:0c:15:da:e4:
         55:02:16:f2:56:93:0b:6c:d7:6d:9b:c0:a6:ac:14:54:92:88:
         c5:e9:3c:75:eb:ab:56:2b:bd:4b:c7:42:5b:cc:25:d5:7e:31:
         84:74:0a:0a:31:a8:2e:4d:7e:f4:e2:bd:ba:ea:db:c9:32:fa:
         39:bb:09:f8:18:ee:45:cb:2b:83:c4:d5:90:9c:5b:9c:0b:f3:
         7d:83:9d:dc:89:de:c6:7a:67:d6:af:b7:b0:6c:82:8c:91:4b:
         38:ee:06:a3:f3:4f:74:cc:1d:b7:58:98:d1:45:05:0e:28:05:
         fd:91:d1:7c:9c:b9:1f:bd:9a:8c:f2:eb:30:45:a1:8c:b0:4d:
         e4:f2:07:7c:0d:62:39:14:f0:32:c6:b3:e1:59:eb:e0:cd:62:
         0d:a8:d9:a1:20:9a:4f:fe:fe:6a:8c:47:da:d2:60:cf:13:d9:
         20:2e:83:8f:09:44:9b:3f:e7:10:67:0c:e3:46:55:1c:a4:d7:
         fa:61:b9:2f:d8:f2:76:0b:b2:34:8b:50:e0:e2:2f:9e:e5:7c:
         c1:cc:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:40 2025 by rpki-client