Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File:                     RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier:          KOYq2ePjBgC7Z7o0p6mgBIT5Da+Mc35SSYCrWVJdULw=
Subject key identifier:   5A:22:06:FA:D6:8D:E5:47:F9:86:6C:4B:15:52:B5:D7:79:22:AC:7E
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer:       /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial:       110E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number:          1107
Signing time:             Sat 18 Oct 2025 17:49:41 +0000
Manifest this update:     Sat 18 Oct 2025 17:49:41 +0000
Manifest next update:     Sat 25 Oct 2025 17:49:41 +0000
Files and hashes:         1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: pFXPbODPvreQL86/u6ipwzgrV6ppcCPO7kUPwHRgONA=)
                          2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: 4ddMyzUmIiWucVfUmzZbGoeIuz/De3rIfnynVpK/dAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
                          rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4366 (0x110e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
        Validity
            Not Before: Oct 18 17:49:41 2025 GMT
            Not After : Oct 25 17:49:41 2025 GMT
        Subject: CN=68f3d335-8e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:ab:a9:60:80:2a:ca:2e:d8:8d:55:7a:8c:
                    9f:fd:bb:c2:76:98:35:10:cc:e7:cd:24:ac:ea:0e:
                    94:0f:52:6c:83:43:0f:3d:56:42:c5:1c:a4:54:df:
                    e8:18:d3:5b:88:bf:1c:d2:4f:4f:8e:15:22:63:f4:
                    cc:cc:84:14:65:9d:97:5a:f1:f8:cc:16:d6:8f:af:
                    2e:95:2b:66:ef:8e:4c:5e:b9:e2:15:c8:d6:f0:cd:
                    98:40:18:57:76:72:14:70:e6:e1:8c:8f:e3:1c:6c:
                    45:b4:7d:ec:7c:9c:3e:b3:3b:d7:ea:cd:e3:21:8d:
                    17:58:0f:d3:0c:df:00:1e:44:06:0a:a1:bf:ae:99:
                    1e:e2:3b:ce:c7:ae:0c:7e:2f:bc:24:8a:b6:2a:12:
                    6a:c1:4b:d7:bd:f1:2d:88:46:f2:d2:9c:bf:e9:44:
                    06:4d:9a:cd:6c:00:1d:84:01:45:de:90:39:63:78:
                    b1:bd:66:a3:d8:58:60:cb:5d:bb:aa:65:ec:ab:89:
                    de:3a:b8:aa:ab:88:cb:93:ab:c9:6e:8e:28:ff:fb:
                    88:93:c1:7a:6d:2b:19:17:f4:18:e6:82:13:5d:f4:
                    53:5e:e7:1f:98:f8:a1:c8:eb:c7:b2:d4:ed:6a:3e:
                    46:99:b0:69:48:56:3e:a8:5d:2c:b8:09:c9:57:27:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:06:FA:D6:8D:E5:47:F9:86:6C:4B:15:52:B5:D7:79:22:AC:7E
            X509v3 Authority Key Identifier:
                keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:ff:4a:fe:40:cb:45:b8:37:41:b7:d6:1f:ad:0c:26:c8:
         05:a6:59:32:31:d8:d9:31:ea:3e:d8:c8:10:33:ed:aa:c5:d2:
         2a:8c:ad:39:e6:b2:99:49:d6:67:ea:cd:16:68:94:60:f4:b2:
         b0:21:05:7e:f4:d9:6a:3d:24:05:96:40:21:d1:8d:42:57:b8:
         23:aa:08:6a:ac:a2:85:12:00:be:82:17:90:15:e2:11:b2:3f:
         ea:d4:fb:25:50:bb:a7:36:9c:1f:1e:cd:1c:b4:c8:c1:2c:98:
         0a:9a:e3:e7:c1:0b:b4:f7:ba:25:36:67:02:35:8d:40:6e:90:
         02:b1:ee:17:d3:2d:e9:75:4d:4d:fc:00:2c:be:70:4f:42:bd:
         78:0a:01:07:17:94:80:92:7a:ee:15:86:17:4b:a5:4f:65:f1:
         a9:a5:6e:bd:aa:54:a3:7d:a3:59:bb:94:90:4b:d7:42:f0:0b:
         11:cc:ce:25:65:2a:3a:71:6a:09:bf:97:fc:ae:25:30:a6:d0:
         28:0f:cf:95:d1:44:e6:ee:fc:48:cf:9e:60:84:d6:fb:4a:3a:
         1f:c9:ce:3e:e5:3c:42:e7:9f:ba:5b:f1:59:ee:6f:06:46:a8:
         f0:70:8e:be:9d:c1:97:c3:2a:9f:0b:f5:c2:ac:e2:0e:28:8a:
         e4:24:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:40 2025 by rpki-client