Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          bOjisrCo1shq4QXBg542pChPDJ/xzFYSjAz2S7fSGi0=
Subject key identifier:   47:8C:45:40:71:94:0F:55:0B:91:D7:06:0C:8C:85:D4:99:7D:03:7A
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       0641
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          0634
Signing time:             Sun 19 Oct 2025 00:20:26 +0000
Manifest this update:     Sun 19 Oct 2025 00:20:25 +0000
Manifest next update:     Sun 26 Oct 2025 00:20:25 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: mQ1elFxDgWtmcTpy2w2feAG7wxHKfg9gE8DvYpMp+CY=)
                          2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=)
                          3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Oct 19 00:20:25 2025 GMT
            Not After : Oct 26 00:20:25 2025 GMT
        Subject: CN=68f42ec9-5f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:52:88:f9:9a:fa:94:d2:88:1b:c4:7c:0e:
                    db:33:f7:8a:65:c3:8f:87:dc:ab:05:e1:4d:17:23:
                    58:9a:7f:c9:53:b0:db:c6:df:e1:3b:18:bf:06:04:
                    bb:a5:e7:21:78:34:0c:fb:a4:bf:4f:98:6e:e8:d1:
                    ec:82:d1:5a:14:53:aa:99:c5:1f:06:1d:f4:b9:6d:
                    44:9a:70:9e:ec:2b:16:5f:cd:c1:0a:36:e7:f2:d3:
                    32:d2:21:fb:99:78:40:f5:e6:15:27:75:a0:1f:7c:
                    8f:89:44:63:31:15:1c:bb:ea:9b:e7:bf:c7:39:24:
                    92:bc:04:f2:cd:09:c9:2f:75:25:29:52:3e:8b:74:
                    d8:95:78:92:8e:54:a3:f3:91:a7:7e:2f:e3:db:a1:
                    75:95:15:21:a7:6c:db:ea:c9:a8:c4:e9:59:9a:01:
                    3e:33:3a:be:78:bd:c5:5b:12:c8:bd:e9:cd:8e:ec:
                    08:0e:d0:b0:c2:cc:fe:8d:29:54:0f:7d:0e:32:21:
                    72:3c:df:20:54:b8:5b:52:ca:68:17:d4:b5:22:86:
                    39:58:d9:e9:5e:98:9c:64:79:25:39:7c:78:f4:ea:
                    12:69:01:8c:76:21:1e:9d:8b:bd:83:a8:8e:ab:cc:
                    1f:5e:fa:70:99:44:f6:ba:ce:39:db:e8:ba:ed:39:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8C:45:40:71:94:0F:55:0B:91:D7:06:0C:8C:85:D4:99:7D:03:7A
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:d5:ff:54:02:5a:ab:e4:ec:70:4a:64:ed:eb:3a:d7:e7:
         c4:82:11:f6:0e:61:31:15:1f:05:2c:3f:02:76:b1:08:74:10:
         81:4c:7b:bc:48:63:4d:42:a3:c2:61:d5:ff:7f:d5:1b:db:6e:
         bc:14:49:85:8e:f3:29:af:11:4d:36:5e:fa:5e:c6:71:ce:3c:
         05:ce:cc:45:88:c0:7a:49:fc:31:c6:91:56:22:2f:d3:ca:fc:
         24:e3:e7:64:d7:b4:a5:4b:1e:8b:07:28:b6:d4:da:d0:d1:d1:
         a4:bf:c6:d3:33:f9:74:48:61:57:50:ac:a6:bb:1a:b8:67:f9:
         0b:1f:de:10:64:27:65:6d:b3:83:89:c2:07:b1:bb:cc:c4:37:
         84:19:28:4b:be:0b:a1:20:df:9e:5a:02:1c:d2:3d:e8:46:0f:
         cd:d7:13:a7:7c:ec:e5:15:9c:75:2a:11:ef:6c:d9:6d:e1:3a:
         49:c3:60:3d:3a:35:15:a5:0c:f2:f9:13:9e:90:61:0f:0c:2e:
         20:07:f3:ed:94:39:84:17:d2:29:3f:6c:d2:76:35:5e:a1:8d:
         ce:19:19:ae:a4:09:f8:8d:93:6c:ca:ae:06:a1:88:2b:c6:10:
         c5:69:db:5e:48:73:32:7a:0a:63:ea:0e:92:c5:ea:02:2a:5b:
         69:ba:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:06 2025 by rpki-client