Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File:                     55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier:          I3gdV19gk7KEodqsFelCmpZyveUIjCfbb4HFbIw9tM0=
Subject key identifier:   A2:9E:54:64:4B:51:0C:C7:D1:9D:15:4A:77:DA:6F:5E:3B:FA:BB:D9
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number:          016A
Signing time:             Sun 19 Oct 2025 06:37:22 +0000
Manifest this update:     Sun 19 Oct 2025 06:37:22 +0000
Manifest next update:     Sun 26 Oct 2025 06:37:22 +0000
Files and hashes:         1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: 1L5VqZY9+cHLPtNiaaHHAnsPA8IEv3NxJQ5EHVR0iGg=)
                          2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: keI95qCS2k4Lve5N7wDY/bHgpp8mJTarNaBOO1lqZJQ=)
                          3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: B6FxffQfLCkDnb0AjYYHgyj86lwe6hNFxc5bjeq/NIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Oct 19 06:37:22 2025 GMT
            Not After : Oct 26 06:37:22 2025 GMT
        Subject: CN=68f48722-dd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:fd:06:49:e5:9d:02:0e:14:58:48:cc:ee:
                    9f:64:ad:99:08:c5:82:12:e8:65:47:4d:e5:06:5f:
                    a4:61:4c:11:60:3e:a6:cd:81:94:f1:9a:b2:ad:01:
                    ff:e3:f4:c6:49:63:64:d0:27:25:56:cc:c6:bd:d1:
                    77:fe:42:9c:bf:7b:dc:cd:e7:a8:70:e3:2a:ba:aa:
                    ae:f6:b9:ec:24:9e:b7:a9:e5:a4:87:d1:28:33:1e:
                    3a:72:21:39:c2:15:06:90:55:ac:f1:9b:97:19:19:
                    01:a6:5a:19:29:d3:ed:08:9f:e0:de:da:d9:23:b2:
                    be:de:11:d1:80:a1:ef:1f:58:89:e1:89:2c:b8:ea:
                    6d:e5:d1:3a:8e:aa:9e:95:4c:fc:32:64:69:3d:df:
                    c2:b0:cc:35:33:10:a5:92:08:bf:b0:01:60:4c:75:
                    3c:31:8b:eb:b7:6a:a5:75:7c:9e:aa:1b:76:b3:5f:
                    26:49:39:73:6f:c8:84:7b:6a:0c:cc:a0:d4:d4:8a:
                    c7:14:62:00:e9:de:1f:20:36:aa:71:d3:37:e2:3c:
                    3a:2d:21:ee:13:c8:9b:7a:45:9b:7e:7d:80:11:7d:
                    95:c4:7e:82:6a:13:79:36:23:07:28:3d:07:0a:d3:
                    01:58:c5:ea:55:d8:12:57:0d:37:5e:e6:cc:58:a9:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:54:64:4B:51:0C:C7:D1:9D:15:4A:77:DA:6F:5E:3B:FA:BB:D9
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:e8:f1:4c:1e:5a:8d:24:0d:7d:72:d1:b7:bd:8c:f2:74:
         bb:a7:25:dd:4f:10:51:6c:a9:b7:3f:f0:52:05:05:77:8c:20:
         ed:93:7a:10:f1:6c:d1:4e:08:13:00:60:cc:e5:bd:28:ac:40:
         8f:37:f2:20:97:31:4c:bf:e7:60:0a:ad:09:aa:ec:bc:83:e2:
         24:ae:55:91:91:1f:3a:c8:79:f4:94:98:95:ec:8e:ed:b9:ec:
         d8:0a:aa:1d:c4:ae:f4:e8:d5:54:ff:b1:69:d0:2e:d6:37:4b:
         22:77:52:2d:09:b3:8a:3b:1a:9e:e5:43:00:8d:fe:fc:1f:ee:
         6a:f0:71:71:10:7b:3c:d5:f7:91:cf:14:ba:f2:8c:3a:07:da:
         fa:b0:26:be:d1:09:7b:2a:2d:f4:a7:b0:95:b6:b5:0e:a2:f7:
         eb:bd:5f:e9:65:55:cc:42:12:fa:bb:62:9f:e4:a9:21:ff:71:
         08:9c:3a:fa:b0:7a:31:48:0a:1c:27:d0:62:b8:5d:e6:9b:3a:
         3c:14:fc:bd:3c:cf:02:51:29:c7:de:e9:6b:d6:35:a5:09:0b:
         fe:25:03:87:f4:95:ee:3b:44:94:ed:26:b5:ec:47:d5:57:40:
         7a:8b:36:10:c4:e7:1f:9a:7c:3d:c7:e7:8e:cd:b8:a5:1f:c4:
         6c:52:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:25 2025 by rpki-client