Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          rrAYgrpLjqXKf15hgRdT6QALYc2e64qkYAjhDYBKCmU=
Subject key identifier:   AB:96:9A:C8:E9:86:DA:27:8B:C8:E1:CA:A4:33:49:C4:B1:70:82:2E
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          E2
Signing time:             Sun 19 Oct 2025 09:03:55 +0000
Manifest this update:     Sun 19 Oct 2025 09:03:54 +0000
Manifest next update:     Sun 26 Oct 2025 09:03:54 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: YQh2j9wMJ2r+1/1ZalgqjnhwHm6zoFnF+AnOaU6wM4A=)
                          2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: C51FnirOwHNLSENUvzzb2TxTVOy5VJ2d+aAfYjutEMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Oct 19 09:03:54 2025 GMT
            Not After : Oct 26 09:03:54 2025 GMT
        Subject: CN=68f4a97b-25d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:7f:42:45:e8:6b:44:f1:f0:20:ba:76:a3:
                    37:0e:19:3b:34:34:69:97:66:7d:95:2a:3d:3a:3a:
                    86:5a:42:e5:9a:9a:51:b0:bd:ec:9f:8b:ba:0f:44:
                    84:3b:19:bd:15:40:67:04:f7:e3:87:58:d7:c3:bb:
                    6e:e6:96:87:6d:3d:7d:4f:74:0b:a2:b4:c0:a2:85:
                    f5:3c:b0:ed:7d:1a:8f:b3:99:34:b8:d5:4f:05:e2:
                    c3:83:28:86:cb:f4:82:51:c0:ff:93:83:bc:67:d1:
                    32:ae:62:dd:5a:32:7a:bc:28:d6:72:d2:38:4b:ba:
                    12:d0:5c:5f:d4:39:d5:8f:e5:c6:5a:06:39:bc:68:
                    e8:b3:83:6d:5e:45:3a:04:c3:53:60:c8:ab:9d:e0:
                    85:01:ec:88:2d:e7:a0:2d:84:5f:66:5b:42:5c:d6:
                    13:12:fa:d8:32:1e:6d:5f:05:ec:54:2c:dc:b7:3a:
                    71:d2:64:99:3f:1c:8a:9e:69:41:e8:30:bc:a2:23:
                    63:b3:d1:bc:ac:dc:d2:1e:83:a9:5a:25:fc:38:e1:
                    f6:90:a2:1b:d0:58:76:00:cf:26:8b:06:fb:6c:f2:
                    a1:d1:9e:28:86:c4:63:ac:bf:e7:87:8b:06:5b:90:
                    6d:f0:41:00:0f:f3:6e:49:83:eb:20:c6:51:63:d5:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:9A:C8:E9:86:DA:27:8B:C8:E1:CA:A4:33:49:C4:B1:70:82:2E
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:d2:26:0c:90:f3:87:c0:bc:43:74:65:34:9a:43:54:e4:
         6a:3a:e7:66:18:7d:7d:2c:11:62:d5:d9:87:f8:a8:24:85:2a:
         84:01:2c:e6:bd:f7:b4:8c:3d:1a:ec:77:6c:f5:85:89:d1:37:
         10:9b:ce:ad:81:a4:19:c2:38:fb:23:cc:33:e6:14:17:37:d6:
         8a:4a:52:50:e4:69:68:c1:fe:8a:48:91:71:91:0f:aa:ed:eb:
         e1:d1:1b:93:45:f1:8f:9a:98:87:7d:86:cf:c0:7e:3e:72:7c:
         9d:77:04:e9:58:0a:21:05:5d:88:de:62:71:2a:42:d7:20:44:
         88:b9:54:57:7c:ae:04:96:05:48:75:7d:ba:8e:b4:44:99:f3:
         fd:c3:28:19:a7:16:dd:95:a2:74:74:a0:e1:c3:25:be:6d:d8:
         d1:00:4f:74:b2:83:ae:7c:62:41:96:9e:8f:68:2a:53:fb:aa:
         8b:fc:5c:af:0f:f0:46:45:61:09:98:e4:7a:6c:8c:19:4f:fe:
         4d:46:e8:d3:19:2c:40:18:8a:dc:a8:23:15:01:e3:81:16:20:
         e5:24:a1:61:bd:81:8b:d5:8c:ad:e7:2b:7e:f2:35:23:4b:eb:
         7a:3b:34:35:0e:a3:2e:af:91:82:76:12:c2:9e:46:c7:17:9e:
         b0:59:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:27 2025 by rpki-client