Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          Wv3pa/VBFrYPBAikJCUBH6329QkSFiwMVRwy1yqNlw0=
Subject key identifier:   AE:6A:CD:C6:9B:52:7C:0C:83:73:94:7C:00:E9:D9:1A:9C:BA:0E:2B
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          AF
Signing time:             Sun 19 Oct 2025 09:17:11 +0000
Manifest this update:     Sun 19 Oct 2025 09:17:11 +0000
Manifest next update:     Sun 26 Oct 2025 09:17:11 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: 9TF2ERXP4hgWkE9bA6XcStuuKKRQm85nuly1GQ3BjSY=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: Oct 19 09:17:11 2025 GMT
            Not After : Oct 26 09:17:11 2025 GMT
        Subject: CN=68f4ac97-070e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:40:c8:bb:91:82:54:af:73:94:ef:89:d3:
                    24:01:8f:bf:bf:a9:98:3c:a2:ca:17:3b:ef:85:c7:
                    1c:ac:a0:5a:a4:d9:dd:70:cc:2d:68:e9:84:59:89:
                    02:48:03:4f:34:7b:9c:dc:8b:ea:f6:36:9f:13:66:
                    43:74:71:86:04:70:3f:4d:b3:d1:47:e1:a0:9b:37:
                    d8:70:91:a9:fe:c5:04:dc:26:ce:b4:41:bd:a1:92:
                    57:8f:bc:98:17:99:7e:6d:64:d0:75:33:1c:04:bc:
                    0e:26:12:ce:a1:c3:43:b8:0b:d2:fa:10:5f:90:c2:
                    8c:d0:04:87:29:ac:e0:51:7f:66:0e:4c:b1:5c:c4:
                    38:c1:8a:ba:82:ef:4b:ce:68:8b:86:e5:a4:22:c2:
                    b0:b8:c2:ef:9b:1d:d6:af:bc:88:b9:0a:bb:ff:cf:
                    a4:bc:88:96:44:b7:fb:d1:8a:29:a0:f2:c1:4b:af:
                    cc:34:67:1a:87:78:da:70:e5:3f:3b:07:af:b6:ac:
                    ba:cc:a0:68:7c:10:03:01:10:89:f4:12:6b:d3:a3:
                    91:4b:53:7a:52:7c:14:1d:e6:96:91:90:38:3f:00:
                    ac:ea:36:14:a3:27:ad:69:f9:13:98:83:50:c6:c5:
                    a8:d0:4e:b4:9a:35:d2:b1:aa:14:5c:47:0b:97:f5:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:CD:C6:9B:52:7C:0C:83:73:94:7C:00:E9:D9:1A:9C:BA:0E:2B
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:30:11:29:50:ab:f1:56:2e:84:e1:00:e9:c0:96:a9:f4:0e:
         b3:e3:e7:11:be:0b:fe:51:dc:4e:eb:4d:b5:79:2c:ee:b5:f0:
         ec:eb:b7:bf:7c:d7:6f:c2:11:1b:69:62:7d:da:12:67:44:21:
         f1:45:aa:f9:b3:20:4c:61:bd:76:3a:35:4a:2b:da:e6:2d:7f:
         52:90:ca:76:42:ba:5b:a4:be:ea:79:54:d6:f6:42:ab:b0:4b:
         49:c1:b1:74:27:18:6f:26:28:85:f5:d8:d5:8e:84:88:a6:05:
         68:27:f5:a6:a3:6c:b6:43:be:11:f9:47:10:0d:74:ae:77:63:
         5e:38:ef:74:1c:70:63:05:f3:81:56:c9:ac:08:eb:e7:7d:e0:
         6d:1d:02:cf:4d:8a:8b:3f:96:ac:23:27:ac:db:19:30:c6:67:
         5a:a3:68:c6:85:a0:f8:8f:d8:ea:34:cd:bb:e4:47:f1:37:96:
         54:c4:cc:9f:78:b3:8d:d5:42:26:4b:0d:54:0b:3a:a1:47:91:
         4f:22:45:ba:a4:9f:ae:b9:4f:13:40:9e:18:cb:48:06:6a:25:
         f1:c4:1c:5c:8c:20:1a:8b:37:68:13:32:c4:62:09:20:5e:ba:
         67:8f:fe:f5:b7:e1:f4:f6:99:d0:da:6f:36:2f:62:14:04:a2:
         bd:9a:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:08 2025 by rpki-client