Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
File:                     DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json)
Hash identifier:          UphDCL8UeXMgBuH7nf/SACKfH0iRxHpd43ZHsX1FLNc=
Subject key identifier:   AF:AB:8D:1B:23:0E:01:EA:79:B2:48:99:32:F7:B8:89:AE:B5:75:33
Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
Certificate issuer:       /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
Manifest number:          07D4
Signing time:             Sat 18 Oct 2025 22:29:42 +0000
Manifest this update:     Sat 18 Oct 2025 22:29:41 +0000
Manifest next update:     Sat 25 Oct 2025 22:29:41 +0000
Files and hashes:         1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: T3+JQHiAVgmQLB/muDHppQEikYX0/9t3ERQqal0N4SM=)
                          2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: H9hFCoLq76Z6Qqjigg7+UHgPrO1jNkvzVDxTFmuYUMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl
                          rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
        Validity
            Not Before: Oct 18 22:29:41 2025 GMT
            Not After : Oct 25 22:29:41 2025 GMT
        Subject: CN=68f414d5-750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:35:94:c4:05:90:1c:80:9c:95:29:cf:5f:
                    41:b4:0b:8f:98:a7:3d:b6:a3:fe:06:b6:d6:8b:21:
                    73:95:9e:6f:3f:0a:e8:20:d7:57:a6:6e:24:40:53:
                    ca:82:db:d3:f6:eb:86:91:f5:c0:5b:bc:cb:a7:17:
                    93:82:7f:1f:d1:d0:84:81:7f:6e:de:86:cb:37:be:
                    ad:b8:ea:ba:90:a4:31:ac:4e:0b:98:77:10:a0:fa:
                    e8:a4:f6:32:de:04:6c:9a:e9:60:ae:a0:ca:fe:9e:
                    e2:ea:b9:f6:ad:0f:b7:52:f8:81:ae:37:ac:b2:2f:
                    12:d7:a3:d5:8d:30:12:1e:be:9a:9f:2a:dd:c6:e9:
                    34:2b:a1:80:36:74:c6:ac:c8:54:2f:4c:fa:d0:79:
                    95:bb:c3:ee:55:8a:fe:74:27:10:73:7f:de:2b:97:
                    6e:b6:21:b3:b5:d2:83:bc:df:33:72:0c:2e:38:de:
                    05:b5:35:b0:b6:81:44:f4:e6:32:23:d5:a1:f1:fd:
                    bb:bc:9f:09:98:92:6b:f3:3b:29:75:ef:8b:5e:c4:
                    0a:f6:57:67:59:44:08:d4:98:71:0a:43:ac:40:3e:
                    94:09:04:b3:e1:24:e2:ba:bb:6b:47:9f:ef:23:48:
                    51:2f:a1:4e:cf:15:ea:fb:df:fb:51:b0:ee:50:52:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:8D:1B:23:0E:01:EA:79:B2:48:99:32:F7:B8:89:AE:B5:75:33
            X509v3 Authority Key Identifier:
                keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:c8:f7:35:a4:2e:ae:4d:45:44:79:e7:11:b9:26:8b:2f:
         94:f0:28:7a:c9:48:11:be:02:d8:1f:44:44:db:4a:79:cd:cd:
         b1:13:99:df:ef:d8:f5:b3:1c:69:74:72:52:bc:54:51:bd:01:
         80:2f:06:4b:8d:44:3a:97:5a:d0:09:be:e9:45:c1:c2:19:34:
         f2:57:b2:0e:ca:a8:55:62:76:b0:0f:1a:f8:95:44:f8:79:72:
         18:6e:7b:7d:82:f3:15:63:bd:32:7a:4f:49:4c:43:5c:d1:b9:
         41:27:40:93:53:39:86:ed:2c:2f:a9:a3:c8:3f:2e:06:f6:89:
         12:28:0f:39:9b:94:36:c3:55:06:88:48:8d:40:c7:6e:a7:2e:
         b9:a1:2a:b2:08:fc:2a:42:b4:18:d7:c5:3b:01:66:19:00:9a:
         41:61:e5:d6:5b:81:af:76:19:37:c5:a4:67:04:21:29:fb:eb:
         1c:4c:02:21:58:9f:38:e8:dc:25:81:67:33:91:08:7f:c7:3a:
         1b:bf:71:c6:c3:92:13:8d:9c:04:e9:10:3e:1f:8b:73:33:fd:
         f5:3c:e8:cc:e8:8c:3b:44:a5:b5:70:55:27:c8:7b:8d:4f:c2:
         51:cb:31:72:69:df:f7:80:94:44:07:33:9a:53:9a:a6:9d:2a:
         c6:c6:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:59 2025 by rpki-client