Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          S8Vce61mAxyoHwLMLUL+vbVdeypKkq1SAimqq/PulgU=
Subject key identifier:   AA:35:19:3C:52:7F:EB:2A:B6:B9:A4:C1:67:FE:6C:FD:26:DD:0A:ED
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          015F
Signing time:             Sun 19 Oct 2025 06:41:31 +0000
Manifest this update:     Sun 19 Oct 2025 06:41:30 +0000
Manifest next update:     Sun 26 Oct 2025 06:41:30 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: 8at516bcAzvbNkO78CITMkT/mYHou0Y4EYsV05PU120=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Oct 19 06:41:30 2025 GMT
            Not After : Oct 26 06:41:30 2025 GMT
        Subject: CN=68f4881b-71ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:b5:c4:5f:15:ee:82:f9:1e:62:fc:c4:ba:
                    a3:44:e6:a2:7b:d5:cf:f1:58:a9:34:89:e6:90:a4:
                    fa:ae:c5:de:5a:d4:71:5a:7b:b2:2f:9c:72:4a:e6:
                    7b:3f:8d:09:8c:47:86:e7:2c:a0:2c:8b:de:ad:4f:
                    97:89:1a:30:95:a3:81:91:82:74:b4:71:10:25:16:
                    b9:2a:81:43:86:3f:28:ef:34:34:f5:dc:08:87:2e:
                    ff:a1:fc:49:b8:84:5c:db:12:00:83:e2:f8:f0:20:
                    40:f4:12:70:cd:68:69:1a:e3:5d:e5:99:c8:ef:8a:
                    b1:78:80:d2:77:d4:24:63:a4:41:1b:cd:f8:91:d3:
                    cc:dc:f0:89:c9:4e:c6:0c:35:31:27:00:26:fe:68:
                    78:a1:49:d6:6a:65:49:10:8f:9c:bf:b0:46:ce:70:
                    c5:14:1e:71:cd:03:88:1e:63:2f:58:b8:98:ad:e6:
                    73:2e:91:2d:63:21:21:2a:ab:07:42:9e:50:7e:bb:
                    81:ff:b7:49:98:5b:34:d3:e7:00:80:48:2c:71:7d:
                    4f:01:60:76:0b:c8:fe:cb:9b:d4:2f:6d:b2:1d:68:
                    90:03:08:3a:5a:50:19:66:d2:ab:e2:5a:5c:b2:a8:
                    63:be:63:0e:30:04:8b:09:4b:bf:39:b5:4b:94:d2:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:19:3C:52:7F:EB:2A:B6:B9:A4:C1:67:FE:6C:FD:26:DD:0A:ED
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:c3:7e:ed:39:fd:ef:4e:04:e3:bc:15:0a:e5:ed:25:1a:
         7b:ac:75:96:3e:55:72:bc:04:12:e1:30:49:1e:d7:b8:11:91:
         d7:8a:3e:f2:e0:7d:82:f3:e7:19:c7:56:c4:d5:8a:77:fa:0c:
         0d:6e:f6:8e:c8:2e:a6:55:83:03:c0:49:1a:23:bd:0f:af:b6:
         4d:49:ec:5a:d1:50:08:57:d6:4b:04:dc:f5:7e:7e:0f:f9:c9:
         99:22:77:bc:99:c0:e5:ed:75:18:98:7f:65:a3:f7:c0:66:fe:
         b7:f6:fd:66:59:b7:47:92:5a:37:77:9b:b2:de:bd:13:f6:43:
         30:77:3a:e8:3c:6b:18:75:06:e1:eb:f9:3f:f7:24:1a:f6:9d:
         2e:5d:ab:cf:4d:ea:98:50:48:e2:ec:f9:ed:63:c5:e1:41:fc:
         ae:13:60:3b:c5:52:62:da:3f:58:13:44:61:6e:30:87:e0:8d:
         27:50:db:e0:65:85:ac:c5:1b:0b:0b:d8:19:a1:7e:3b:ba:e7:
         cc:17:a3:fa:32:10:38:9a:1b:5d:c7:96:1e:e7:97:5f:f5:4c:
         ec:4d:7b:72:ed:bf:de:b7:f8:de:06:b9:6c:91:dd:35:4f:e3:
         d9:42:4f:f6:66:90:d8:98:18:f0:dd:83:6d:00:30:30:85:50:
         d0:c7:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:43:51 2025 by rpki-client