Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File:                     V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier:          EMSJXV2w/AjUARdIamNMJeI7qJvMaoeNO0VUerYtfzA=
Subject key identifier:   B0:C3:EA:F6:7F:22:B6:DD:29:CC:72:82:B4:39:5A:6B:4B:C4:C9:1A
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer:       /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number:          01A4
Signing time:             Sun 19 Oct 2025 05:48:52 +0000
Manifest this update:     Sun 19 Oct 2025 05:48:51 +0000
Manifest next update:     Sun 26 Oct 2025 05:48:51 +0000
Files and hashes:         1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: n/Kgb4FPgvOqTP87SV/j1Yk31oXrFWWagYpX3HF2jc4=)
                          2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
                          rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
        Validity
            Not Before: Oct 19 05:48:51 2025 GMT
            Not After : Oct 26 05:48:51 2025 GMT
        Subject: CN=68f47bc4-d27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:2d:b7:89:b8:b8:bd:a3:8d:84:76:a3:c7:
                    98:66:1c:3a:f9:d1:5d:33:fa:e3:f5:e3:72:eb:d8:
                    f9:8f:92:c6:64:89:64:ba:1f:85:a5:0f:5d:3a:27:
                    80:9c:e5:5f:5b:73:ee:1d:80:fe:f0:7f:b7:61:9c:
                    58:55:9e:d6:06:26:54:64:d4:fa:e1:8f:44:47:fa:
                    d6:ec:d9:06:8f:38:d1:73:24:a5:af:88:8a:5a:1c:
                    b0:55:9d:af:77:b9:09:97:df:cb:02:7d:93:d2:b3:
                    10:79:8f:1b:c1:13:65:4b:c1:4b:aa:55:3f:ab:89:
                    d1:dc:7a:08:db:07:e8:8a:1f:4a:86:fd:9a:29:49:
                    7a:73:9e:cb:94:e9:43:4b:56:83:0d:1d:8b:0d:80:
                    86:21:58:0a:2c:22:6c:ba:58:76:c8:29:92:5d:11:
                    b7:8d:22:de:0c:68:d4:86:11:f7:fc:dc:71:8d:ea:
                    3b:9c:c5:35:e1:ad:64:a4:1e:a8:cc:08:1e:6f:24:
                    b3:6b:dc:a1:2a:d1:e7:94:52:ae:53:1b:f9:f8:64:
                    03:fe:c9:8b:01:19:64:b6:2c:e9:18:1a:2d:af:de:
                    ac:2b:61:ec:4c:4f:f9:9d:91:13:6f:42:c7:8c:3e:
                    59:4e:7a:c7:1f:72:67:df:fa:47:f9:4e:21:92:04:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:EA:F6:7F:22:B6:DD:29:CC:72:82:B4:39:5A:6B:4B:C4:C9:1A
            X509v3 Authority Key Identifier:
                keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:4e:4a:26:dc:7b:76:88:b7:30:01:80:a2:e4:b7:91:61:
         d3:49:90:ec:1f:47:8a:4d:17:a8:c8:bf:61:bf:a1:95:29:02:
         a4:59:8b:50:09:fa:37:f0:13:d1:b3:fc:af:25:69:ea:bb:cd:
         d3:5e:3f:96:e2:d6:01:7d:56:9d:00:9e:3e:66:28:db:06:4b:
         ea:01:a5:a1:d3:fd:cb:53:32:6c:c4:2d:7f:6f:ad:f1:58:f9:
         61:95:b2:08:12:25:b6:af:00:3d:83:02:9b:f9:94:0e:7c:fe:
         fe:dd:4a:ed:d4:a9:47:5e:36:c2:07:82:1d:e8:d9:2c:53:a5:
         1f:8b:b1:81:f3:4f:49:60:3b:ac:c7:54:9f:44:93:c0:11:6a:
         b9:f6:b8:4b:05:8a:3b:99:57:4d:2f:a5:46:3c:bd:a3:77:78:
         d0:81:bc:81:cf:a2:83:82:17:ea:fb:11:09:e6:16:17:eb:6a:
         54:a6:e6:31:d0:8a:5c:e8:09:f8:bd:b1:3d:73:e4:0d:4e:6a:
         09:17:a9:df:25:dd:13:8a:3c:78:fb:6e:83:8a:31:87:6d:58:
         92:63:e6:5c:79:73:fb:79:8b:19:2b:77:7a:ca:8d:e0:9e:5a:
         63:6b:b1:04:57:93:b2:b9:e5:16:81:52:ea:be:fc:60:5f:ba:
         fb:54:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:22 2025 by rpki-client