Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          ZiSPSJmFMfsEACW/nqcaJRa6JriqbT+iArjdkVFuZAk=
Subject key identifier:   12:53:1A:62:CD:E1:9C:DF:9D:EB:6D:56:E9:E8:96:69:B3:63:93:58
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          010F
Signing time:             Sun 19 Oct 2025 07:52:05 +0000
Manifest this update:     Sun 19 Oct 2025 07:52:04 +0000
Manifest next update:     Sun 26 Oct 2025 07:52:04 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: uQG0RYCYl05unBg0mSEj6rV1BQsLh8nBYRWqLtbssgU=)
                          2: 8C35F65C57F111F0B413224EC4F9AE02.roa (hash: voQWhVz+FM5Oce4JeqUGqkpzwLHV4T3Do9szQnC3FmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Oct 19 07:52:04 2025 GMT
            Not After : Oct 26 07:52:04 2025 GMT
        Subject: CN=68f498a4-84e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:be:7c:b7:d5:84:01:c5:13:c2:15:62:cd:
                    e3:a5:2f:f2:9a:44:de:a2:72:79:44:2a:95:23:c6:
                    51:ae:17:c9:a1:d3:6f:c7:5b:87:f2:17:d1:67:cd:
                    67:1e:34:a7:ae:e6:0d:d1:8a:56:90:42:24:dd:b5:
                    28:b8:f5:22:29:e6:8c:b3:48:d3:25:ec:dd:9b:81:
                    e0:91:96:3a:c7:f1:75:b1:74:af:28:48:0f:ea:d7:
                    f6:ae:2a:5c:f1:14:8d:d9:22:94:b8:1f:c1:db:77:
                    76:03:49:44:87:ce:32:59:fb:d9:2a:03:7e:50:3e:
                    bf:bb:fa:d6:f0:de:85:d9:ee:d8:56:93:cc:cd:20:
                    e3:02:19:ec:d8:f5:bb:e5:dd:85:4a:e2:06:91:49:
                    43:ff:46:20:4c:4b:a5:5e:42:ae:e8:be:dd:7c:42:
                    d7:41:83:0c:17:bc:1b:36:e1:9e:49:44:ad:10:92:
                    d8:14:d4:14:05:1c:15:d3:a1:b3:a8:2f:88:df:8e:
                    16:43:45:8d:29:13:4d:73:67:6f:03:aa:1f:87:7b:
                    81:7c:f8:bb:57:c7:e4:5a:64:56:0e:4f:d3:0b:b5:
                    11:8b:4d:10:79:85:a2:fa:9b:3b:20:51:ea:45:b0:
                    d0:d3:26:54:4e:f6:ce:2a:bd:ee:93:2d:85:98:7a:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:1A:62:CD:E1:9C:DF:9D:EB:6D:56:E9:E8:96:69:B3:63:93:58
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:4b:58:01:92:28:1e:14:b9:20:d7:e6:67:0d:ca:aa:b4:
         1e:ff:22:8f:86:88:e3:f6:90:b0:a9:23:aa:55:ce:15:0e:bb:
         9c:0f:b7:1b:ba:b5:7e:89:5d:1a:64:a4:8d:bf:cd:fb:70:d2:
         04:4e:c9:d0:8a:2b:70:4d:b3:f8:c8:62:88:08:1e:96:4c:1d:
         ec:de:f9:bd:31:03:7f:d7:42:bb:dd:18:99:01:cd:73:91:ab:
         5f:7f:24:1d:1b:d7:be:e0:8c:88:ca:dd:6a:ee:34:54:af:78:
         68:11:16:b1:d7:33:71:29:f5:ca:96:1f:d9:75:37:a7:d5:a8:
         3f:e0:6a:bc:8e:30:f7:70:66:63:83:b2:36:f7:c0:e1:b6:9b:
         5c:a5:75:85:35:65:78:99:57:92:a0:c1:58:bc:16:c5:98:77:
         c0:62:ae:18:e5:49:c6:93:c2:79:b3:de:e7:d5:67:11:68:39:
         ea:fd:8c:da:10:70:9a:ea:04:cb:42:f8:36:76:1b:ec:12:d4:
         5f:fc:9d:66:96:d9:1a:c0:d8:f8:57:bd:e7:60:97:36:48:2d:
         09:98:6b:60:03:b3:8c:cb:78:d7:e3:d8:b0:0f:01:3e:d0:c9:
         46:f2:6d:f0:c9:99:87:93:d0:3e:47:e7:ae:93:2f:2c:a8:e8:
         f0:a6:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:48 2025 by rpki-client