Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          qjIETNnc1GPvVFldFE3g59SXhy/twy0tdci/TJKQFVE=
Subject key identifier:   2C:01:63:0C:59:9F:E4:E4:A1:E3:89:18:92:F0:D8:39:49:FA:0F:3D
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       3551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          3513
Signing time:             Mon 20 Oct 2025 14:43:47 +0000
Manifest this update:     Mon 20 Oct 2025 14:43:47 +0000
Manifest next update:     Mon 27 Oct 2025 14:43:47 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: peEJSgcW7JZk9GqvWgScjYbkiw7tlXWZ+7k5OMTutnM=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=)
                          3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=)
                          4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13649 (0x3551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Oct 20 14:43:47 2025 GMT
            Not After : Oct 27 14:43:47 2025 GMT
        Subject: CN=68f64aa3-82c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:23:e3:e1:6d:47:bd:cb:68:cb:26:81:9b:
                    cb:a4:80:6b:f3:b2:57:a3:1b:05:cd:d4:26:be:af:
                    cb:2b:93:6a:0b:7e:1d:ec:c7:6b:c3:78:e2:99:c8:
                    fa:e9:c8:28:cf:3b:c8:d8:26:f4:59:7b:94:60:f7:
                    a0:25:92:40:6c:87:ca:0d:18:62:ca:d5:f5:1e:92:
                    ad:b4:9f:f6:b1:9e:49:1d:4e:4c:92:fa:0d:da:ce:
                    e5:ce:e4:ca:1b:a4:b8:5a:92:fe:01:a4:d3:01:79:
                    de:1b:d0:60:96:67:e4:15:38:33:b1:48:0f:b8:0c:
                    74:cf:f7:e5:98:e8:fa:28:81:ae:b8:95:71:c9:19:
                    67:f7:33:3c:43:7f:99:a7:7b:09:d9:f4:2c:9d:59:
                    81:b6:3f:1d:d2:46:d2:e6:e2:57:77:17:ca:0f:db:
                    0f:91:66:20:c1:91:89:70:76:86:34:fd:20:41:81:
                    76:1a:48:05:03:bc:5d:35:c9:6c:8a:dc:a1:fe:c7:
                    a4:f4:04:0c:cd:cc:ea:e7:43:c7:5b:81:3b:41:e0:
                    9b:ee:da:da:d9:c0:22:83:f6:c5:c8:7f:bc:d2:eb:
                    e8:4a:e0:5c:38:e9:9e:a6:13:93:cc:27:ba:2b:e8:
                    f5:0b:4d:ef:4c:3a:4b:94:d0:62:5b:2a:84:bf:b4:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:63:0C:59:9F:E4:E4:A1:E3:89:18:92:F0:D8:39:49:FA:0F:3D
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:e8:12:ac:ed:21:a5:d2:2f:7b:44:1f:e2:7f:5c:60:f8:
         c8:0e:a5:d9:f9:3c:41:0a:e4:ec:25:8c:ba:86:42:63:77:46:
         40:a1:7b:c7:5c:f7:73:f7:a2:53:77:56:9e:f0:93:b5:c7:ad:
         e0:e5:20:96:1f:37:1e:8d:8f:44:5c:e5:67:74:e3:d1:43:fc:
         29:f9:40:70:91:ed:d3:29:12:40:e1:f8:2c:11:59:da:84:63:
         b4:ff:e9:76:74:03:35:35:cf:3a:6a:46:38:6d:fd:a7:0c:14:
         68:c4:05:37:a3:63:64:8e:ab:81:1e:09:49:f9:27:ff:9d:c1:
         57:0e:17:14:f2:6a:84:7f:1b:27:7d:30:93:b7:5c:1f:67:7f:
         52:34:68:e9:23:b4:f2:5d:76:52:c9:bb:e2:c5:09:98:88:d2:
         97:f3:65:b2:d9:e8:9a:70:66:e7:09:2c:94:54:e9:33:ce:12:
         ea:18:a7:81:e8:c6:6c:f2:fa:74:c6:22:2e:06:6f:ce:f4:39:
         4c:38:48:e4:5c:96:91:ad:58:e0:c4:9d:64:6d:ca:17:f0:07:
         d9:f5:bf:e5:57:9e:77:14:3d:f1:15:ed:60:46:7e:d7:86:32:
         ac:b8:56:36:10:35:df:9e:df:a0:38:e8:ef:f3:e7:73:1a:b1:
         4c:33:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:10:43 2025 by rpki-client