Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
File:                     AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json)
Hash identifier:          tUT8ri3T6K16ucIO2MvdBWHSVLCPQYwouW2I6wx0ov8=
Subject key identifier:   44:04:70:A0:81:68:13:C1:65:DD:08:8B:24:63:3A:37:91:C5:EA:68
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Certificate issuer:       /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial:       242F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
Manifest number:          241E
Signing time:             Sat 18 Oct 2025 16:02:53 +0000
Manifest this update:     Sat 18 Oct 2025 16:02:52 +0000
Manifest next update:     Sat 25 Oct 2025 16:02:52 +0000
Files and hashes:         1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: jagttSPquZ26Z+XISwbdpoyPYnNZJzdyVGfToO52cJY=)
                          2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9263 (0x242f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
        Validity
            Not Before: Oct 18 16:02:52 2025 GMT
            Not After : Oct 25 16:02:52 2025 GMT
        Subject: CN=68f3ba2c-634e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:6e:7e:2a:91:35:33:66:39:7a:48:2c:04:
                    40:93:d3:e8:25:4f:1b:1d:8e:71:90:b4:0d:c1:e5:
                    e4:3d:d9:96:32:5d:86:2a:75:77:0a:66:81:40:39:
                    ee:99:7f:1c:c2:4c:2a:19:9e:86:53:00:87:cf:3c:
                    ec:2b:c3:7e:9f:6c:fe:51:a8:35:91:eb:af:16:f3:
                    61:2e:10:7c:2e:bf:66:5a:c9:60:4d:d0:93:b0:62:
                    2b:76:38:ca:6d:44:3d:29:60:95:b0:4d:98:e4:86:
                    52:6d:b0:f6:00:94:2d:0c:2b:dc:71:86:4c:2d:ec:
                    cc:8e:a3:89:84:66:b9:54:12:cc:5f:42:e5:97:77:
                    95:28:91:5c:5c:b1:62:f6:ee:fd:56:44:93:6e:c9:
                    80:0d:3d:72:cb:90:b9:2e:a3:f4:b6:8a:59:ae:47:
                    8c:c4:7e:80:4c:1b:1e:d7:0a:66:e6:1b:e5:46:63:
                    87:c5:99:4d:33:7e:85:3a:34:94:f3:ed:07:45:7d:
                    68:8b:bd:5a:97:9c:bd:b3:b2:ef:59:7c:d2:ec:5a:
                    ea:77:db:aa:c3:e3:07:75:81:7b:01:28:c0:96:9a:
                    5a:4d:77:3a:7c:c0:62:43:4e:f2:11:af:25:5c:0a:
                    2b:c5:da:b4:04:04:96:cf:4c:a2:d7:c7:c5:90:75:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:70:A0:81:68:13:C1:65:DD:08:8B:24:63:3A:37:91:C5:EA:68
            X509v3 Authority Key Identifier:
                keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:4c:10:af:0e:98:e9:d6:a2:5d:7a:ec:79:aa:fe:f9:ee:
         91:f8:5e:4d:ca:17:31:73:8c:c2:61:c3:93:29:9a:ba:be:6a:
         91:c3:8b:ef:06:ee:80:0e:0d:9c:13:fa:59:31:23:f3:61:1b:
         e3:15:c5:92:45:c9:3a:17:fc:eb:78:c9:4d:22:47:a5:41:a6:
         68:5b:32:01:d3:b1:94:9c:3c:6d:25:91:ec:3a:13:e6:38:a2:
         e4:ce:b9:fe:b9:6d:21:85:b9:55:fb:60:48:5b:83:2f:ea:20:
         07:bf:b8:16:27:7d:c4:d5:49:a3:95:a0:b5:fe:2d:10:98:0e:
         ee:54:df:78:9b:51:ab:a4:2f:ce:6e:ed:1e:d8:ba:d3:7a:ba:
         16:36:9a:8b:06:a3:0f:43:53:17:c2:c0:1f:76:26:f9:75:1e:
         ed:e8:f5:70:62:47:ad:ae:01:81:67:6b:e9:77:a5:af:0b:7a:
         f1:3c:83:10:83:2c:22:53:eb:6a:7f:4f:24:f4:55:2c:c2:1f:
         92:2c:09:a1:65:da:f3:1b:47:71:23:db:a7:df:81:e0:26:fa:
         0d:44:7d:72:c7:a7:55:68:e1:e1:c8:1a:06:ff:48:f6:23:4d:
         21:a8:3c:8b:23:a8:3c:92:05:dc:04:11:39:b7:9b:b7:74:5e:
         b7:8d:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:58 2025 by rpki-client