Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          /xgvC/FiqttMrxlO9DZsm9ixxs91znZQ3h8a2HqkvkQ=
Subject key identifier:   CF:D3:9B:BC:92:82:56:83:12:D2:92:B3:41:C0:47:2E:47:98:D0:96
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1D18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1CD6
Signing time:             Sat 18 Oct 2025 16:28:38 +0000
Manifest this update:     Sat 18 Oct 2025 16:28:37 +0000
Manifest next update:     Sat 25 Oct 2025 16:28:37 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: pb8n8MPkfu4Yv05U77+akfbcSHUNK6L3Y646iDlTJ8M=)
                          2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=)
                          3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7448 (0x1d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Oct 18 16:28:37 2025 GMT
            Not After : Oct 25 16:28:37 2025 GMT
        Subject: CN=68f3c035-228d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:f5:4a:77:dd:02:a0:ee:1f:c5:c4:3e:41:
                    5c:a8:f0:83:25:97:0f:cb:67:05:e8:ba:c1:86:54:
                    ee:50:55:99:0d:ac:aa:66:06:aa:0f:54:6b:b5:bd:
                    04:49:a7:49:43:e2:41:76:70:4c:29:71:d4:46:9f:
                    41:22:9e:c4:02:03:ad:c4:b9:41:9d:3f:9d:14:fb:
                    95:ac:75:d5:16:a7:4a:2b:f5:02:f9:1b:b1:fe:d5:
                    39:16:b3:d2:4b:08:96:78:a5:e4:59:4a:97:0a:67:
                    be:05:5a:73:94:fc:d4:b2:f9:c5:3c:9a:d3:d7:b1:
                    7d:bd:03:0f:8c:ae:e8:70:d6:17:9c:b9:c2:a6:24:
                    ed:df:ef:af:9e:4f:cd:52:b6:9a:cb:98:92:36:72:
                    92:de:68:a8:06:85:12:6f:52:63:2a:b3:12:79:e2:
                    ae:94:8b:a3:f9:84:6e:14:e6:41:11:a4:2e:d5:9e:
                    fd:14:8a:eb:95:19:00:b4:35:74:39:e5:a0:3b:b7:
                    b4:25:9f:b4:82:05:6b:46:40:f8:f2:c2:53:2a:64:
                    22:8f:81:9a:5a:bf:53:a8:91:d8:b1:71:1a:f2:4e:
                    a6:ea:62:26:26:2a:15:43:70:ee:93:6f:ea:f7:8b:
                    12:83:55:c6:5a:fb:68:b8:aa:8e:e1:ba:c9:00:38:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D3:9B:BC:92:82:56:83:12:D2:92:B3:41:C0:47:2E:47:98:D0:96
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:d9:8c:85:be:2f:76:06:fd:32:4f:cf:b9:df:60:29:4a:
         9a:20:dc:d0:0c:3e:1b:00:2a:26:73:34:51:3f:39:1f:72:d4:
         07:40:3b:05:45:a1:ad:b8:72:2f:9f:87:8f:a8:19:a5:84:d9:
         12:6d:4b:15:87:55:7c:8e:30:49:76:a5:c7:48:ba:6c:f5:4a:
         5c:fd:4b:fb:1d:da:ca:df:76:99:2f:a6:64:ca:51:9e:83:b9:
         25:ef:8e:cb:3f:c9:16:b7:ce:29:e5:45:96:ca:a7:bc:0e:93:
         a8:3e:c4:e9:fb:cb:7b:e2:11:f9:8e:51:73:03:44:c3:b7:94:
         53:33:ee:ca:a7:5f:d7:85:a9:f7:bf:e3:30:02:b4:1a:f4:7d:
         55:1c:29:b5:ab:59:aa:44:6c:31:72:53:b4:d5:28:87:0a:af:
         e2:aa:9d:ad:f9:48:22:52:33:15:16:68:7e:5c:e4:16:86:1d:
         8a:25:71:f5:8c:d2:81:0e:d3:22:9e:65:b2:09:5d:08:86:d1:
         13:bb:a9:60:03:3b:8c:ba:28:7a:9e:da:f6:9b:12:ba:3d:54:
         d4:1b:ff:76:7d:d1:72:a4:bb:98:c9:ce:76:cd:71:e0:ba:6d:
         6b:d8:cc:fd:91:c8:33:3b:99:25:6c:00:80:cf:11:95:b4:56:
         15:a2:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:38 2025 by rpki-client