Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          8hBS+Qg4emov/XVP672bgzJ9F2aCtFbQOvYyda4wjdg=
Subject key identifier:   E0:02:7A:13:D9:E4:84:E1:4B:3C:CB:CA:4F:9A:F1:D9:E0:2F:82:E7
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          027D
Signing time:             Sun 19 Oct 2025 04:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:09 +0000
Manifest next update:     Sun 26 Oct 2025 04:01:09 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: +ULSR9czUhWTzlhERIm0U1TQDVMB82zo4i0Kpqm5jvw=)
                          2: A6A5DF628AEF11F08634D486C4F9AE02.roa (hash: EKfRDHOkUtlxr0tRdqWfA42DBD1OSFTPvocs6DfAuAc=)
                          3: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: VHHEU9d7IR1GGpHRO+xmBvOubv6E3+xiwg7YFKrzA9I=)
                          4: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=)
                          5: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=)
                          6: E88B9F0C778511F0A4E72535C4F9AE02.roa (hash: 3D9lBpJ7mteA7Bb3YQGDJry3PnMCpoVw+v32rQDtSvs=)
                          7: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=)
                          8: EDD791BCA80611F09091490CC4F9AE02.roa (hash: xKV5BQ4eCYCmcgFBORiVc5FiVp7Rj59ROQZUC/T75es=)
                          9: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=)
                          10: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: GDiEG/pNTXLg5Vlv3aqbkShCJX0NKJUVFvGIXmMT/Uo=)
                          11: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=)
                          12: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=)
                          13: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: amh5xLEy3aWEsjTIfN1HvYo06LB170kM86N+DGaGyds=)
                          14: 359EA23662B311F081881A48C4F9AE02.roa (hash: ml90CHJI6hM9cwuuAL9Y+OP72xTNZ1gM1O6bqm1RFPE=)
                          15: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: q0dRuolqOgecUXb4uEgp631GRcsGQw3FBRIwFVQHVns=)
                          16: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: 880H+j/SYDAV5Oh86Tvuz0TWhzmeM9++dFNPMGJPE50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 19 04:01:09 2025 GMT
            Not After : Oct 26 04:01:09 2025 GMT
        Subject: CN=68f46285-4872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:55:21:4c:06:b1:16:b5:84:25:a8:39:ee:
                    e4:39:48:39:b0:6b:b3:c0:35:7b:50:ca:18:85:0a:
                    e4:16:aa:88:ca:ae:9b:8c:4d:ec:60:b3:65:35:1e:
                    b6:8a:3d:88:64:c7:9a:d0:88:b7:0f:21:46:1e:39:
                    93:f6:fe:ae:f2:58:4e:b7:60:df:e9:76:d7:31:c7:
                    c9:7d:00:6c:6d:eb:52:e8:5c:f8:b8:fd:c6:6d:97:
                    d4:e6:bb:e3:7f:36:cc:20:42:e9:fb:bf:66:85:65:
                    d6:b9:1c:23:44:3c:30:20:b2:03:58:83:52:86:39:
                    5e:9f:7c:1d:ed:e5:8b:58:57:7b:62:7a:8f:d2:2e:
                    bc:46:c0:0b:37:bc:d9:f1:ab:dd:b3:80:78:29:67:
                    40:4c:f1:b4:2b:78:c1:3b:eb:f7:d7:8f:f5:5d:2a:
                    41:59:ed:a9:c0:91:f9:df:af:e7:a8:58:9c:48:32:
                    fd:72:1a:de:2f:b9:0b:f6:c3:f4:3e:ec:53:cd:48:
                    67:b0:84:dd:f8:d3:8c:c2:a4:2c:47:6f:6f:9c:ca:
                    69:ef:65:a9:be:1d:6f:e6:2f:0e:3c:f9:87:90:7d:
                    45:2b:b8:5c:30:1c:e1:6e:8a:db:2d:36:09:c0:27:
                    b7:ab:a0:ae:5b:12:97:16:a8:7f:51:06:53:4f:0b:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:7A:13:D9:E4:84:E1:4B:3C:CB:CA:4F:9A:F1:D9:E0:2F:82:E7
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:07:0c:4b:0d:da:39:4b:43:d4:6c:b5:9f:e9:0c:a3:a5:
         60:32:d7:28:3d:99:03:f5:34:d5:f6:df:5f:76:8a:e3:63:9e:
         b1:36:ae:9d:61:6f:95:c7:54:52:cd:aa:42:94:92:ac:55:f1:
         e1:20:45:67:a0:c2:90:ef:1d:70:33:2a:4d:e4:6a:ef:21:ee:
         00:66:f1:50:69:6a:e1:57:e2:e5:3d:41:5f:19:dc:d4:f0:6f:
         69:f1:f2:f8:94:c8:e4:26:09:74:68:81:88:42:ec:b9:24:39:
         e4:c4:74:c0:b8:a2:d7:ce:02:c8:2a:c2:b6:d8:42:22:e2:f1:
         32:6c:c6:cb:9c:f3:f0:3e:84:30:95:80:43:76:30:ba:bf:a5:
         9b:1d:4d:84:b3:0c:bb:c1:7a:8e:df:95:99:86:1f:ac:bb:c7:
         bf:91:e9:9d:7d:99:56:a1:a2:be:bc:ee:a0:8e:f5:37:06:9f:
         09:3f:cc:a6:53:0e:a0:a4:e1:6f:b7:e8:64:32:b6:17:20:4d:
         d4:54:45:8b:9c:fb:8a:cf:55:96:f7:02:4c:80:8b:51:98:2c:
         1d:2f:93:1f:7d:37:fa:03:36:73:ea:2e:12:85:53:6b:7b:d1:
         05:19:f7:42:57:b6:c0:ed:31:4b:40:f9:4c:55:05:0e:fc:9b:
         09:c0:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:04 2025 by rpki-client