Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File:                     CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier:          FCtLeaFLt6GkqO5UOt5xfMEhe7sSGWqYtcDkpfEu/Io=
Subject key identifier:   5C:E1:CE:AB:0B:E8:50:F8:A9:D4:2D:F5:00:CC:43:DD:AD:BE:F3:B8
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer:       /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number:          AE
Signing time:             Sun 19 Oct 2025 09:16:06 +0000
Manifest this update:     Sun 19 Oct 2025 09:16:05 +0000
Manifest next update:     Sun 26 Oct 2025 09:16:05 +0000
Files and hashes:         1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: V/6MRdSpzOBPS+zeugxAb+MktM3jpz0C+PFIA2Ha+gg=)
                          2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
        Validity
            Not Before: Oct 19 09:16:05 2025 GMT
            Not After : Oct 26 09:16:05 2025 GMT
        Subject: CN=68f4ac56-7028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:24:4c:9e:c9:71:c5:82:6a:97:2e:79:64:
                    2d:dd:b2:70:57:8e:7f:31:62:54:29:28:34:1b:3d:
                    3d:6b:db:66:36:8d:da:d3:bf:8e:f9:b7:a2:18:6a:
                    cb:b2:1c:e5:06:55:48:db:92:99:79:4d:36:b9:e9:
                    ac:a9:5e:6f:0c:29:e9:f4:95:c1:c4:5a:6a:51:91:
                    b3:00:a5:c8:a2:c5:03:b5:2a:0a:90:35:27:ab:8c:
                    08:4b:ef:8d:f4:52:36:56:d7:db:86:e0:f0:f4:6c:
                    36:63:a8:2e:7f:36:52:7c:0c:d1:5b:1e:06:f6:eb:
                    32:a1:cd:32:5a:6c:47:5c:c9:31:3c:f3:a5:86:b8:
                    ed:17:ca:23:d7:13:31:67:be:7a:e1:ff:cd:7d:21:
                    f2:de:c3:f7:4f:16:5e:8d:3d:12:e0:29:f2:b9:51:
                    f2:cc:49:8f:cb:68:2c:5b:af:cc:a7:c9:ff:9d:57:
                    6a:cc:9f:ac:e5:0d:cb:c5:46:60:0e:94:c4:78:df:
                    1d:f5:4c:2d:85:c6:0c:a5:9a:50:e9:6b:a9:ce:d8:
                    a5:3a:33:09:40:9d:b9:97:14:30:c8:81:cf:1c:16:
                    c4:79:6c:cd:65:ce:25:dd:bd:d0:e4:8d:12:03:be:
                    3d:e6:71:b4:f8:2c:6e:7e:0c:c5:f7:ff:39:ff:d1:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E1:CE:AB:0B:E8:50:F8:A9:D4:2D:F5:00:CC:43:DD:AD:BE:F3:B8
            X509v3 Authority Key Identifier:
                keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7f:07:90:82:3e:bb:5e:99:19:99:48:05:a5:bd:e6:96:b6:
         01:9b:e8:74:75:5c:ea:28:51:5a:57:8a:f5:a8:e6:5f:a9:fd:
         9f:4e:60:08:99:c6:9d:6a:30:09:c4:3b:2c:1c:db:3e:9f:ba:
         59:dd:73:5e:c6:1d:6a:ac:e1:9a:34:2f:ae:11:12:83:a5:70:
         3d:d1:a6:e0:ac:3e:6d:69:57:6c:c8:fc:c8:4e:46:f0:72:83:
         bc:10:27:f6:49:37:20:8a:7d:47:57:84:98:94:2f:29:7f:37:
         fa:7d:cf:a6:b1:39:c6:ac:99:fa:99:14:69:bd:9e:aa:20:76:
         2a:54:4e:f4:aa:c6:8a:42:bb:37:ff:83:50:b9:fd:c3:73:0d:
         82:0b:69:02:de:b5:f8:d8:e9:cd:c5:fa:a9:6d:2e:23:aa:03:
         06:7b:b5:88:af:38:b5:70:7e:22:d3:a1:9d:76:07:fd:a5:24:
         94:0e:59:7a:88:4f:48:3f:69:57:05:ef:0c:f7:e7:3c:5f:15:
         17:a5:76:30:01:4d:48:8f:60:05:c0:f5:5a:87:70:4f:de:07:
         2a:10:92:18:df:f6:e3:fd:21:91:0b:9a:a3:61:b5:aa:0c:99:
         43:da:a0:26:c5:ac:ee:75:ac:8a:ac:82:f7:e9:a4:3c:f7:23:
         b5:76:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:07 2025 by rpki-client