Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File:                     ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier:          xmD3mtYYuMMXhXokPFAHB+VIw5FSFWE/n5Vw6XYQF1w=
Subject key identifier:   03:7E:F7:5D:4D:F2:07:F8:18:2C:2B:4E:35:60:84:C8:1B:94:DB:08
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number:          F5
Signing time:             Sun 19 Oct 2025 08:11:15 +0000
Manifest this update:     Sun 19 Oct 2025 08:11:14 +0000
Manifest next update:     Sun 26 Oct 2025 08:11:14 +0000
Files and hashes:         1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: RpoQE4gRM18qCzU4QrrWRssUMkoXJy0ux1uTzyQeAVE=)
                          2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Oct 19 08:11:14 2025 GMT
            Not After : Oct 26 08:11:14 2025 GMT
        Subject: CN=68f49d23-3298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:62:bb:a4:8a:f9:7f:c5:39:0b:ca:26:bb:
                    b3:80:a8:5f:40:98:22:4f:f6:2c:cd:e0:68:61:c6:
                    02:e4:da:dd:72:cf:33:ec:d4:13:b7:95:0c:ec:5a:
                    64:63:64:84:b1:7f:e5:36:89:63:09:58:a7:a7:47:
                    cc:e0:05:8d:e4:2a:ee:0f:6d:c7:a4:97:e7:dd:d6:
                    d7:3e:d4:a1:ba:df:7f:54:89:02:64:df:0a:8d:50:
                    fd:c3:b4:d9:a0:00:bb:49:c8:8c:f4:cb:0f:ff:c2:
                    9a:53:e9:ff:58:c1:b0:1e:d1:f9:f0:7d:14:27:80:
                    fd:bb:91:b6:67:44:cd:39:a7:92:1a:e5:25:2b:9e:
                    ab:99:3c:91:42:32:59:f8:58:64:fc:c7:8b:91:77:
                    2e:69:6f:4c:5f:29:6e:b8:a3:51:d3:9a:8c:12:4b:
                    5d:ab:63:23:04:62:6a:db:df:0c:1a:96:3c:cf:10:
                    0e:b0:ef:f2:cc:3d:c3:51:cf:8f:23:0d:3d:78:32:
                    0b:ad:35:0c:92:5e:e2:8a:57:e1:99:fb:d1:35:22:
                    f0:64:32:95:f0:b7:45:51:91:61:b8:a6:3e:e2:97:
                    6e:f6:76:97:2f:22:63:6b:fe:87:5a:18:3f:62:c5:
                    61:bd:25:c2:e4:a6:00:5f:b8:69:3b:53:9c:2b:2f:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:F7:5D:4D:F2:07:F8:18:2C:2B:4E:35:60:84:C8:1B:94:DB:08
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:55:b2:56:85:da:e5:2e:8e:ca:a5:c1:72:62:ad:51:33:9d:
         3e:e1:c4:6d:16:bf:0c:37:51:18:20:bd:cf:65:2e:92:bd:54:
         51:2f:2b:a7:ea:ab:74:00:ec:d0:16:e4:7c:2b:b8:64:a8:20:
         bd:8d:cc:64:59:b0:dc:66:c8:73:29:eb:9b:17:b3:9d:3b:9b:
         db:0e:81:a2:a1:e1:f0:11:97:ca:64:29:0c:25:2b:2b:e5:c7:
         bf:9c:fa:fa:d3:1b:88:11:cb:72:1b:41:1b:cf:48:f7:df:92:
         dc:85:9c:15:13:76:13:f9:c6:e1:0a:09:e0:94:86:08:40:d2:
         82:04:8e:72:56:79:ec:46:08:23:34:51:c1:49:cc:2e:9a:97:
         31:2b:f4:79:49:7e:91:27:44:dc:fe:b0:df:c5:bc:f8:93:32:
         19:bd:77:c3:98:16:16:3c:36:45:a3:29:88:9e:f5:72:18:65:
         65:6f:83:c9:dc:0e:57:64:86:fc:76:3d:cc:e1:98:b7:e8:0c:
         83:30:c2:f2:78:56:e5:1f:3e:7d:eb:b4:86:14:66:77:c9:33:
         97:ba:b0:b5:d6:94:39:c9:0c:7f:61:fc:44:4b:eb:76:95:2e:
         fb:75:3c:05:f1:30:86:87:c8:68:76:e7:ba:cf:f1:20:cd:cc:
         79:3b:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:47 2025 by rpki-client