Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          Hm3tMtYYP5W8DKCFslM+JEzi8wUxTiVntKncVYjlj+s=
Subject key identifier:   55:A7:25:82:31:61:88:AA:2A:11:7A:C5:BA:11:9A:D0:36:62:DD:63
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       07E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          07E1
Signing time:             Sat 18 Oct 2025 22:23:42 +0000
Manifest this update:     Sat 18 Oct 2025 22:23:41 +0000
Manifest next update:     Sat 25 Oct 2025 22:23:41 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: gZK0YV0wKIosds3b3OZ+DHQU2dftg+nlfUO6O5dMrxg=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Oct 18 22:23:41 2025 GMT
            Not After : Oct 25 22:23:41 2025 GMT
        Subject: CN=68f4136d-b579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:c2:c1:86:c2:2a:42:37:9a:a3:8e:fc:88:
                    bd:68:a0:99:34:7f:35:a8:26:91:22:44:b8:7b:83:
                    fa:c7:78:83:a8:a7:73:a3:39:61:12:39:cc:04:4f:
                    a4:33:36:61:a3:6c:06:78:9c:e6:b1:6e:f2:87:ab:
                    69:fb:80:af:2b:1d:22:87:48:e9:90:21:48:a5:29:
                    ba:f4:ea:4b:dd:5b:87:d0:5d:65:9c:37:a1:be:49:
                    26:a6:b7:40:ad:7a:1c:1c:9f:cb:e8:16:18:bb:12:
                    70:52:ba:a0:94:78:b8:c8:6c:5d:46:92:98:a1:b1:
                    43:f4:fc:6c:7c:e4:50:47:28:29:75:00:e5:2a:62:
                    33:73:a2:c0:5d:0a:4f:32:e6:03:39:f3:91:f8:2e:
                    bf:f3:21:4d:7e:6b:1a:b3:35:fd:bc:ee:1b:b2:ba:
                    ea:c9:f3:c3:df:69:c4:d0:39:aa:7b:e6:68:24:94:
                    eb:a9:e9:3e:9d:ba:d8:4f:29:45:60:e4:99:10:05:
                    88:32:d4:3f:6d:58:90:e8:f1:99:15:64:da:40:78:
                    0e:b7:34:a0:9c:93:93:03:88:97:ba:8c:f4:43:d5:
                    ca:55:46:e2:17:72:00:c0:8f:b6:cc:f3:4a:e3:89:
                    5b:89:a2:0e:f9:5f:11:8e:50:f6:ba:08:15:c7:2e:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:25:82:31:61:88:AA:2A:11:7A:C5:BA:11:9A:D0:36:62:DD:63
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0a:c3:39:01:43:c0:60:80:3b:d8:a9:fa:d4:1b:d6:20:7c:
         e5:18:c1:0d:01:41:11:0e:10:38:b2:be:b9:66:fa:9d:fd:f8:
         e1:c0:c6:01:67:59:42:36:1a:da:5c:4d:b9:7c:23:58:26:0f:
         22:cf:68:5d:ee:ba:fb:a1:99:89:a8:de:45:69:a3:46:5b:44:
         7e:9c:91:52:09:e6:8e:6e:48:80:0c:b3:bd:86:c7:cd:3e:1d:
         b7:81:44:98:b9:df:9e:04:dd:68:05:a7:36:7f:a0:c3:ca:d5:
         c3:cd:1d:ce:09:0b:6a:e4:31:53:8e:e8:88:c1:cf:88:68:94:
         cb:60:b1:3f:3f:d2:53:97:c0:b2:39:c1:fa:9f:a1:14:4f:18:
         ce:f1:9a:3d:c7:df:b8:03:9c:74:45:e6:70:ca:fc:6c:8e:d0:
         f2:eb:09:95:3c:a6:57:80:52:f0:bf:8f:8b:c0:ec:a8:66:34:
         c1:3d:e9:82:17:c9:1f:08:10:26:20:a8:c2:65:ca:2a:c8:fd:
         0b:e8:8e:d8:50:f1:42:27:e8:4e:ca:b1:62:56:d8:e7:9b:ab:
         a6:de:09:04:ba:6d:22:82:40:b2:5a:43:6a:e0:a5:3e:eb:c6:
         77:16:2a:d5:06:34:70:67:74:6e:ce:e9:7c:07:19:26:8c:c8:
         4b:63:62:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:54 2025 by rpki-client