Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
File:                     m0G07JA0ytKB1baCVnQwWQMlK94.mft (raw, json)
Hash identifier:          6Xf6Rm8LUxCzh3mVZeNXBMCw/V+jNZ9DQR3qPqBbVlc=
Subject key identifier:   A9:F5:68:3E:7B:C1:F8:08:46:4B:9A:5B:BE:19:13:04:CB:F8:5E:3C
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Certificate issuer:       /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
Manifest number:          0660
Signing time:             Sun 19 Oct 2025 00:08:35 +0000
Manifest this update:     Sun 19 Oct 2025 00:08:34 +0000
Manifest next update:     Sun 26 Oct 2025 00:08:34 +0000
Files and hashes:         1: m0G07JA0ytKB1baCVnQwWQMlK94.crl (hash: TrEdxazRgBsG1gmWzjeW3MIQmY1iSXbFFo6AqvsrGtQ=)
                          2: 7EA34D309EC511EBA85F8276C4F9AE02.roa (hash: yK6C1pWwJA6WJCQDjIzeh8mb+889ajrC1dn+LyzHgJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
                          rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
        Validity
            Not Before: Oct 19 00:08:34 2025 GMT
            Not After : Oct 26 00:08:34 2025 GMT
        Subject: CN=68f42c03-c7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:f8:be:47:e7:2e:54:3a:a2:5b:0b:7f:f8:
                    45:bb:b6:d6:d6:6e:c6:40:48:44:ae:d0:1e:a9:6e:
                    d5:44:68:f9:a7:46:75:c7:3f:16:89:73:13:0c:75:
                    ea:7d:20:37:53:26:ec:c2:5f:f9:3d:85:cd:5c:a0:
                    85:c1:33:6a:73:ab:f3:c7:a7:18:25:fe:40:3b:76:
                    11:c2:4d:b5:d8:97:bf:16:25:e9:1c:46:b6:f5:02:
                    96:86:53:cc:09:4f:c5:1a:f5:da:4a:a4:00:04:0e:
                    4c:dd:66:0b:0f:e2:2a:06:ba:3e:61:8c:56:a6:af:
                    0a:6a:52:ec:04:f2:57:aa:60:37:fe:84:d8:6e:a6:
                    b5:fc:0b:9b:20:ed:8a:19:bd:d8:39:68:c4:27:e5:
                    f3:d0:b2:43:30:c7:d8:72:bc:13:8a:b9:d5:41:1c:
                    93:52:69:8b:db:b8:d1:80:47:f5:61:35:c6:5b:90:
                    7e:41:b6:dd:89:b1:f7:1b:f3:9d:b2:4f:5a:dd:86:
                    9e:8e:9c:09:5a:4b:45:87:38:f8:08:39:71:34:5c:
                    8e:7d:ff:10:b5:d6:b1:4f:1c:38:8c:91:19:0e:a8:
                    c3:ad:4d:9b:a1:37:ff:90:7b:d3:30:20:3c:57:0b:
                    e0:08:15:4f:55:d7:b9:aa:9d:21:19:5a:0b:29:66:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:68:3E:7B:C1:F8:08:46:4B:9A:5B:BE:19:13:04:CB:F8:5E:3C
            X509v3 Authority Key Identifier:
                keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:b9:0a:c9:d7:2a:b6:ca:b7:c9:bd:46:0c:c6:0b:2d:12:
         99:3a:7a:c4:0d:c5:a0:da:cb:cf:a0:e1:43:6d:25:50:34:36:
         cf:2c:c4:c2:b7:c5:27:59:25:d1:3f:89:74:ab:07:d6:96:86:
         e8:bd:2b:87:96:da:f1:1a:45:ce:ef:8e:ed:3d:01:cd:77:11:
         72:8e:85:32:18:cb:5b:7e:6e:ae:e6:76:b2:b7:c6:38:b6:2b:
         10:0b:bc:88:3f:32:7c:4d:1d:95:ff:36:b4:4a:5c:96:eb:47:
         52:d6:99:c4:d7:be:16:97:25:43:ad:38:da:a5:c7:25:b5:4d:
         12:ef:dd:a7:0e:df:b3:95:9b:a1:a5:6f:12:36:40:13:78:9f:
         6a:c0:99:dd:8d:6a:0d:52:5a:1d:88:d9:b9:ea:20:01:61:74:
         9d:2f:9d:be:8a:78:c8:a4:c6:4e:2b:44:a3:53:f3:50:15:00:
         33:c5:55:70:ee:ea:9c:a4:90:4b:8e:66:a7:22:a8:cc:71:96:
         de:2d:9d:94:ba:ac:cb:16:d5:36:93:94:94:20:0f:f5:56:12:
         c8:c8:1a:ae:4a:7c:e2:71:b7:6d:d3:de:9e:c0:4b:60:d3:cf:
         ea:be:12:3d:aa:34:f6:42:84:bf:91:d5:13:e6:51:eb:06:06:
         91:35:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:59 2025 by rpki-client