Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File:                     aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier:          1r6T1YfI8cVc76ZhSFgtqpoq4rFnJFHS8J8Y4RY0o5w=
Subject key identifier:   90:B0:85:B1:86:F9:24:8B:DD:2C:FA:EF:E1:C7:6F:21:EA:29:90:79
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer:       /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial:       02FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number:          02F9
Signing time:             Sun 19 Oct 2025 03:18:44 +0000
Manifest this update:     Sun 19 Oct 2025 03:18:43 +0000
Manifest next update:     Sun 26 Oct 2025 03:18:43 +0000
Files and hashes:         1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: R6UM9AOdMenJu/FLTI1OUIbQeBCkKy/n4amO+UuBNR4=)
                          2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
                          rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
        Validity
            Not Before: Oct 19 03:18:43 2025 GMT
            Not After : Oct 26 03:18:43 2025 GMT
        Subject: CN=68f45893-ab0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:77:e0:e2:b6:f1:bd:8e:96:17:e6:a3:15:
                    14:2d:94:fa:51:c7:d0:f2:a6:e6:da:40:7d:a6:c6:
                    69:df:d8:e6:fb:e8:63:df:3e:e4:b5:41:37:8d:d1:
                    85:15:af:8a:43:20:29:bf:22:ad:f6:a2:62:19:e1:
                    84:57:ca:5f:2c:63:c3:8f:bd:46:96:d6:d1:23:b1:
                    b9:32:3a:75:e5:eb:fb:33:c3:79:4d:d7:69:9c:89:
                    1d:1a:2b:9b:bd:df:af:1e:80:99:2b:a5:01:97:f4:
                    c3:fa:3d:e5:5d:23:0e:cc:36:8f:59:b9:68:50:88:
                    84:23:8d:44:53:a2:78:73:31:9e:f8:82:cc:04:fd:
                    b5:72:ad:b9:60:57:71:14:fc:9f:6e:86:91:37:61:
                    3c:fe:e5:8a:86:3e:d0:32:9b:5a:2c:1d:7f:3e:87:
                    90:86:24:ea:34:72:73:9d:50:70:3a:99:88:92:6b:
                    a9:4f:9f:f0:07:70:bb:c4:9a:9e:60:11:75:bf:23:
                    36:9b:ea:0e:29:25:25:4e:0e:a2:09:c5:c0:27:14:
                    e7:55:58:45:c0:37:41:88:95:c7:82:01:a2:81:03:
                    49:db:d2:ca:5d:27:98:4b:12:4d:be:a6:fb:e6:4f:
                    c6:a4:2d:11:69:59:be:8c:4d:cc:1a:37:a1:63:30:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:85:B1:86:F9:24:8B:DD:2C:FA:EF:E1:C7:6F:21:EA:29:90:79
            X509v3 Authority Key Identifier:
                keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:94:1f:0b:7c:7a:ab:23:97:2e:b1:e4:9e:04:62:36:52:
         15:c5:46:79:1f:6d:6a:56:a9:51:61:64:74:d5:98:3d:1f:86:
         4f:11:56:6b:5e:45:85:0c:a3:a0:3b:79:11:9a:ec:b6:e6:a2:
         47:d3:31:53:db:cd:ba:cc:63:a8:09:c0:63:89:5a:f9:e4:f7:
         1f:34:e7:f2:1e:d0:2a:52:87:97:d1:94:ca:80:66:0b:d2:78:
         8f:e7:39:2a:63:06:1e:a6:48:0c:7d:5b:2b:6f:bb:06:f9:db:
         54:f1:74:cd:6a:e8:c7:a0:93:c0:a6:a6:de:b3:b7:63:27:e9:
         1f:53:af:e1:4d:ff:e2:70:7d:3e:2d:15:15:de:55:b7:2d:aa:
         2e:7b:43:b9:88:b3:56:4d:2d:f1:cb:7b:27:22:85:84:e6:40:
         4c:5b:fd:e1:2c:c8:cc:81:d5:18:04:78:4c:a0:d6:bf:ce:6f:
         d7:61:af:b7:f1:e8:fb:f1:37:b7:ba:5c:6d:39:e7:d4:47:02:
         e0:48:2d:99:8a:67:59:c9:94:6a:59:6d:a5:64:c4:77:e0:2e:
         27:42:4f:64:42:0c:28:74:3a:00:4a:93:04:43:e3:0d:32:09:
         fb:10:e9:11:aa:01:b5:52:3d:13:ca:e5:d0:0b:02:d5:a1:01:
         80:74:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:44 2025 by rpki-client