Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File:                     eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier:          OxolhSHR5SLM1Wt6VY/THADyhHhU6PHJmgYtN0WENFY=
Subject key identifier:   FA:70:77:C8:E8:23:A7:69:67:A3:83:99:37:30:BF:25:C2:33:40:8D
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer:       /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial:       046B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number:          0466
Signing time:             Sun 19 Oct 2025 02:03:14 +0000
Manifest this update:     Sun 19 Oct 2025 02:03:13 +0000
Manifest next update:     Sun 26 Oct 2025 02:03:13 +0000
Files and hashes:         1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: 1a+jOFwRNVDHPhxZ9fafFHEBmbfJ52luIouH1aqnEsQ=)
                          2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Validity
            Not Before: Oct 19 02:03:13 2025 GMT
            Not After : Oct 26 02:03:13 2025 GMT
        Subject: CN=68f446e1-42b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:18:fd:d9:e2:ec:1d:ce:47:bb:83:7d:7a:
                    8d:70:a9:87:8f:02:9f:dc:df:88:01:80:99:20:c7:
                    2e:f5:35:60:61:a5:74:04:ab:7d:01:04:fb:fa:e8:
                    f0:f3:a5:ff:2d:d3:6c:d6:b6:8d:4a:cf:5b:87:e4:
                    78:b0:3b:47:73:d2:51:68:db:55:cf:03:23:4f:d9:
                    14:e3:a4:29:10:62:e1:fe:62:82:19:16:fc:53:ce:
                    65:f6:0c:87:fa:b5:b9:17:c7:90:9a:0d:55:de:b1:
                    04:0f:e2:56:55:d4:9d:f3:78:0f:2c:a2:65:e6:fa:
                    79:57:07:6c:1f:95:33:78:7c:24:5e:6e:0f:c6:0f:
                    e8:89:69:de:46:8b:e4:e9:ad:5e:d4:00:6e:07:d4:
                    80:b6:11:b9:ea:dc:83:4f:c5:bc:c9:ad:de:78:67:
                    2c:71:65:2f:38:a6:09:d7:bb:4f:40:a4:ea:6b:44:
                    7b:05:20:20:d4:ae:a0:d4:c1:1c:b9:5c:3c:44:24:
                    51:60:cc:18:8a:81:d8:83:5d:10:30:58:c5:dd:50:
                    9b:2c:8e:a3:33:07:d1:db:4e:3f:4a:8f:5e:be:69:
                    5f:b5:ef:55:e7:20:69:16:22:d7:bc:6c:23:bb:08:
                    cd:7a:cf:94:b9:b2:c6:d0:37:e0:dd:3c:2a:ed:ad:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:70:77:C8:E8:23:A7:69:67:A3:83:99:37:30:BF:25:C2:33:40:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:c4:ce:88:2b:1a:81:2b:3e:2d:e8:76:cf:58:1a:e3:0e:
         5b:90:b1:32:60:7d:7d:e1:ce:a6:f2:a3:1b:3f:a9:35:70:b1:
         58:02:46:8b:f7:cb:ad:ce:0a:9b:de:67:85:4d:1f:06:36:fa:
         df:60:34:f8:46:73:cd:45:e3:70:b7:d4:72:ec:33:c3:06:86:
         83:00:3e:4a:b1:55:82:37:4e:76:a1:7b:1c:f7:02:3c:2d:ce:
         86:7b:c7:87:8c:8c:01:7d:fc:7e:e5:db:31:35:c5:40:13:8a:
         5e:63:05:06:94:77:c2:f3:ff:eb:77:7a:e5:90:91:01:7d:38:
         17:7a:c8:cf:74:06:2b:11:36:35:41:e3:e2:68:77:27:9a:40:
         eb:71:e3:ef:f9:26:91:d1:7d:7c:b9:c1:dd:af:56:e4:82:dd:
         e3:43:fd:3d:4e:93:9b:3f:0e:21:88:84:b2:6d:03:94:d6:1a:
         e5:1f:bd:05:18:70:aa:4b:56:1c:0b:4d:68:9f:6d:ee:6f:d2:
         03:1b:13:3d:6f:a9:b5:e3:90:4d:b6:4d:62:a0:51:18:df:4f:
         2c:a3:c6:c8:f1:31:97:30:eb:eb:dd:c0:ab:66:bd:3f:ee:9a:
         b8:b2:52:0d:60:f6:9c:e7:1a:99:21:2c:6b:66:06:01:34:81:
         24:84:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:53 2025 by rpki-client