Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File:                     pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier:          Rn5PBjuAkts118nX69PKgc95F9MdJNv0gVpidWi5R4w=
Subject key identifier:   EE:CC:8A:D8:31:BD:56:F5:09:6A:55:AD:66:01:FA:69:E8:39:E4:FA
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number:          017A
Signing time:             Sun 19 Oct 2025 06:37:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:37:30 +0000
Manifest next update:     Sun 26 Oct 2025 06:37:30 +0000
Files and hashes:         1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: d5SqFulSfAf15gBWmZ4A4kvv/QHclZibBvs7u6HGRKE=)
                          2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=)
                          3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=)
                          4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Oct 19 06:37:30 2025 GMT
            Not After : Oct 26 06:37:30 2025 GMT
        Subject: CN=68f4872a-5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:c0:7e:a1:14:3f:11:1b:85:bb:c1:15:f3:
                    c4:a7:48:38:4a:66:95:82:9a:87:65:7f:42:12:d1:
                    1a:cf:e9:97:e8:09:04:f0:72:17:ae:fe:ee:cf:92:
                    17:13:70:cb:ba:47:0a:d8:61:0e:22:74:21:ad:89:
                    b9:24:0f:cc:c7:65:d0:d4:9d:ee:a5:42:3b:c5:b7:
                    e6:16:be:ea:c1:52:3d:5a:f1:81:e1:d6:c2:d6:ae:
                    41:e1:2d:18:da:97:e4:fc:b3:f8:11:08:85:ca:c7:
                    af:0d:01:62:c1:28:6d:f6:8a:52:f6:d1:4c:0d:a0:
                    f9:42:07:26:75:02:9b:3a:61:84:5f:3d:1f:41:10:
                    d5:c5:ab:45:4b:99:b1:9c:65:c5:cf:95:c2:27:3b:
                    17:cb:25:5f:05:d9:a2:d9:93:8e:e5:72:43:2c:0b:
                    e5:0c:f6:71:46:3b:86:09:08:75:ad:e7:c0:48:99:
                    8b:66:4b:a7:0d:ff:04:94:ce:63:58:12:b4:4a:53:
                    b3:b2:6e:7f:30:c0:aa:15:f6:29:39:03:08:f3:8e:
                    6e:50:5e:67:89:a6:8e:8a:b4:e2:73:b0:4a:4a:b3:
                    c1:57:39:d3:cc:91:cb:b4:93:04:9c:65:db:11:45:
                    65:81:c6:03:99:5c:d8:fb:45:98:d6:9d:84:27:b1:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CC:8A:D8:31:BD:56:F5:09:6A:55:AD:66:01:FA:69:E8:39:E4:FA
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:94:05:98:b8:b1:8a:f0:ae:f9:bc:75:cc:9b:9e:64:df:
         d5:2e:0b:3e:ee:08:71:c3:f8:aa:95:56:62:db:fe:8d:72:12:
         55:f8:bf:47:3f:c3:68:ab:82:7c:df:dc:c2:54:c5:32:73:aa:
         5a:b6:1b:a1:28:41:06:20:58:b0:9a:98:2e:0d:3a:f8:31:d8:
         65:7f:63:4b:7f:3a:4f:8b:3a:35:e1:5c:47:82:8e:37:89:db:
         a7:12:76:98:5b:af:07:a3:fc:1c:4f:a6:f2:db:e6:62:13:fe:
         fd:71:fa:c5:74:69:f5:d5:37:5a:1d:cc:97:33:2c:24:c7:d7:
         61:ba:ca:24:c5:6b:ff:24:23:0d:98:ce:fc:51:3a:25:ea:44:
         3f:64:c5:78:21:69:02:45:a9:56:4f:dc:92:17:78:a1:e2:2c:
         e5:87:52:64:a3:80:5c:43:2b:5a:a8:96:ae:3b:34:1a:1e:02:
         35:99:79:9f:87:67:6b:12:fa:2a:9a:38:f0:42:80:d1:2d:c2:
         0f:dd:0b:4f:c8:73:a9:ca:ea:a6:1f:60:ed:29:40:8a:a5:97:
         fd:5c:54:e5:35:59:87:85:40:ad:5e:d2:81:ac:d8:c9:fd:72:
         c2:a8:f3:e2:e3:b4:d5:c8:88:1e:c3:8e:e9:2f:86:88:76:5c:
         02:7a:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:50 2025 by rpki-client