Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          254qu7cjs+sqXzVQ7CAgWzdjmQGZdLQhR2yzhO7hSEo=
Subject key identifier:   0C:83:B1:E4:5C:BC:8D:3E:F5:73:80:C7:2B:6D:DE:BB:BD:9D:28:F9
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          0179
Signing time:             Sun 19 Oct 2025 06:24:57 +0000
Manifest this update:     Sun 19 Oct 2025 06:24:57 +0000
Manifest next update:     Sun 26 Oct 2025 06:24:57 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: dNZSgAtnYUqkLxAYGh+5OjBJ5Pxq1jsJD8o4v+w80To=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Oct 19 06:24:57 2025 GMT
            Not After : Oct 26 06:24:57 2025 GMT
        Subject: CN=68f48439-4792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:5d:f0:ee:0d:f3:aa:9a:ad:b7:a8:d3:3a:
                    ef:05:33:9a:10:d4:3a:13:2b:28:d8:6a:87:2f:a6:
                    a8:de:36:b4:7b:42:a4:a9:3a:a4:74:a8:37:0e:4a:
                    8f:57:9b:88:12:24:8b:ea:9b:87:44:91:28:e5:36:
                    4d:37:96:25:95:8b:00:de:6d:53:48:35:1f:bb:da:
                    1a:38:bd:84:45:6a:10:90:10:b5:30:84:ba:ad:6b:
                    88:f0:91:8b:3c:94:3f:83:4c:a5:71:3f:92:12:de:
                    69:3e:e5:b8:47:05:54:cb:ba:d3:cc:13:c5:44:f9:
                    6b:77:a0:88:70:f1:08:c2:f3:4c:03:79:c0:ea:d0:
                    b8:28:80:e5:2a:2d:05:dd:69:55:35:8d:40:7f:22:
                    d7:c5:7f:6b:a4:03:1c:df:e3:e0:e4:f6:e6:d2:48:
                    6a:6d:61:29:39:65:fe:c8:f6:45:da:4e:b7:92:1d:
                    b5:f9:f8:a6:f2:c3:4e:30:bd:69:8f:94:4e:f6:d3:
                    02:8d:9d:e3:78:51:22:67:4b:61:20:b5:82:c9:ee:
                    a4:12:40:ef:74:5c:29:c3:ac:52:f7:d8:ea:d3:b7:
                    95:7e:e9:fb:5d:13:76:d8:59:20:77:d8:2e:15:ac:
                    e1:86:2b:6d:01:43:62:1f:8d:d8:a5:4e:c8:da:9f:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:B1:E4:5C:BC:8D:3E:F5:73:80:C7:2B:6D:DE:BB:BD:9D:28:F9
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:8a:01:2b:0c:c7:02:55:b8:85:83:db:e4:8f:43:96:a8:
         8b:58:41:f8:1a:f3:cf:00:96:ac:f3:e3:30:1e:bc:61:10:25:
         03:03:e2:57:01:2c:82:0c:69:10:13:2b:57:7d:13:fb:7b:91:
         07:fc:22:9e:99:81:fd:35:83:a6:35:74:e9:eb:e1:7a:7f:fd:
         ed:ed:14:bf:76:8a:37:b3:3c:ff:ed:58:c8:34:f4:f9:35:3d:
         fa:3a:dd:09:0c:3e:b8:20:cd:52:60:af:b9:35:6c:20:68:14:
         f0:4a:da:ad:9b:74:b7:57:e5:64:45:e1:a3:49:c7:99:66:84:
         12:0f:c4:84:1f:43:dc:18:ce:d9:9b:ea:2a:7e:81:1c:fa:27:
         81:f0:cf:3e:c7:2d:8b:bb:b9:c7:13:d1:4a:d8:5b:4d:41:3b:
         ed:35:b4:46:9a:0d:d3:a5:c6:fa:13:f6:a3:c5:a9:94:59:a1:
         ab:3a:34:68:03:d0:38:68:a7:93:67:50:d6:ca:22:97:a2:33:
         05:6e:c8:46:02:28:75:97:ff:12:34:31:f8:e7:82:1d:0e:52:
         c1:79:de:f6:b8:57:3c:51:0d:ea:8b:20:e9:48:66:58:23:e9:
         97:11:b0:ee:47:89:06:1a:e3:f6:81:6d:e7:3b:b9:bd:48:41:
         54:21:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:48 2025 by rpki-client