Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File:                     etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier:          Ow/z+FCM11cXyG8FvZoQIzzU7wHKjS4VXIHbd8I99fw=
Subject key identifier:   85:45:5C:8B:11:19:CA:DC:B4:17:D5:B9:3E:5F:E0:9B:5E:AE:9D:FF
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       0819
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number:          0807
Signing time:             Sat 18 Oct 2025 22:10:19 +0000
Manifest this update:     Sat 18 Oct 2025 22:10:19 +0000
Manifest next update:     Sat 25 Oct 2025 22:10:19 +0000
Files and hashes:         1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: 6VEcwNL5Mw0G6DNqQRkw+uADLBmgWBwR4K53inxq0jc=)
                          2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: Y424A3Vvh/BUekHBsTE/Lv5kKrOjIed6mILejiBeLbU=)
                          3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: laTjFrVubY9e/HqXOTVMQUClw9bKB+tbq9rC5b8xxBQ=)
                          4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: QvC0naa2hsBftkpLoa3+nw3P5KmAxn2g2Jy737jOnbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct 18 22:10:19 2025 GMT
            Not After : Oct 25 22:10:19 2025 GMT
        Subject: CN=68f4104b-6c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:90:0d:d4:9f:b4:89:07:50:2d:7f:76:08:
                    a4:79:df:ba:40:c3:d6:df:de:56:69:6a:2e:5b:45:
                    e4:ec:fb:de:53:65:c9:bb:4f:1b:54:8d:f0:36:fc:
                    d2:2c:3d:84:d5:8e:54:72:90:e5:44:27:34:ab:35:
                    7f:0d:32:61:2f:b1:10:b7:bd:36:66:0c:bc:27:05:
                    d4:e5:6f:be:84:30:77:9f:d1:c1:e1:f6:d9:7a:ed:
                    8e:90:c9:cf:39:0e:cf:cb:cf:d5:d1:ed:0c:70:71:
                    ba:db:57:a1:e3:bc:da:10:80:30:43:ff:f8:d0:0a:
                    20:70:a6:9e:a4:f1:03:6c:48:cc:b5:c6:f8:4d:16:
                    40:63:df:9d:e8:88:87:2a:f5:e7:80:cc:2b:f6:d4:
                    04:8b:78:85:9d:93:a9:19:c4:17:86:fc:a7:2f:c1:
                    ad:5c:bf:e1:db:e6:f9:11:1a:ad:44:f2:0f:27:21:
                    ea:90:dd:48:e5:5b:37:77:5e:6f:09:a4:27:12:80:
                    7f:f3:ea:d4:e5:4c:91:f6:5d:24:c7:00:c5:c3:8c:
                    dc:0c:17:c5:bf:48:fc:d8:fd:fd:4a:ac:c2:e3:d6:
                    ab:2e:31:18:58:dd:76:e8:db:c2:8b:ad:5a:55:bf:
                    c0:ba:be:64:66:c1:07:1f:89:87:c2:22:80:f2:f7:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:5C:8B:11:19:CA:DC:B4:17:D5:B9:3E:5F:E0:9B:5E:AE:9D:FF
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:42:64:94:7b:c4:7c:fe:7b:42:b5:9b:cd:88:d3:70:54:f6:
         97:52:45:f4:1c:84:e1:90:d7:82:fb:69:9c:08:a3:d9:16:22:
         c1:7a:58:87:7d:d1:2e:8a:e3:db:24:47:77:f4:e1:8e:08:f4:
         78:db:fc:d9:ea:28:69:81:62:41:2e:02:21:b9:5c:39:df:0f:
         d2:82:67:30:c6:fd:00:7d:c3:96:3e:dd:d6:e7:e6:12:40:ec:
         87:99:88:9e:29:31:d1:51:4c:d0:1e:a5:93:74:83:ad:d1:99:
         9f:de:e6:ef:7e:fc:e0:9e:90:2d:df:d0:4b:16:9f:22:eb:b3:
         20:05:2b:ef:48:49:89:4e:4c:62:80:72:48:b9:46:f0:9e:83:
         9e:c9:22:44:c5:93:ff:6c:e4:ed:c5:0b:6c:71:1f:19:99:fb:
         7f:be:f8:48:2e:cd:b4:ae:f3:4e:78:5d:b5:28:fe:17:1a:0d:
         e9:d1:7e:f7:73:aa:7d:bc:93:76:86:84:91:69:ec:1e:7a:5c:
         8d:04:c2:3d:14:6a:33:69:a7:53:92:ed:e4:12:df:0f:19:e9:
         a5:0c:86:27:e2:27:2e:e4:2d:f9:26:50:bf:c6:95:73:c6:22:
         8f:bd:17:60:d6:23:65:67:d5:a6:78:96:d9:6a:9d:d0:2d:d7:
         60:f3:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:16 2025 by rpki-client