Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File:                     aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier:          QDO904y49TtSiKkTV/QZbrXDoKpsUrDIyM9rwarblWU=
Subject key identifier:   45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer:       /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number:          072B
Signing time:             Sat 18 Oct 2025 23:10:13 +0000
Manifest this update:     Sat 18 Oct 2025 23:10:12 +0000
Manifest next update:     Sat 25 Oct 2025 23:10:12 +0000
Files and hashes:         1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Zzih9Ff0sVSx/p89AvWARBQdF8UbXQnyGbDwkr8wu44=)
                          2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
                          rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
        Validity
            Not Before: Oct 18 23:10:12 2025 GMT
            Not After : Oct 25 23:10:12 2025 GMT
        Subject: CN=68f41e54-ddc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:bc:b3:6a:b2:aa:fe:d2:54:a4:0a:3d:e1:
                    e0:e6:48:35:d3:06:f9:74:75:d5:65:30:6c:bc:58:
                    2c:16:3c:7e:7b:7d:4e:08:1d:ff:4a:67:10:6f:9c:
                    cf:64:93:3c:9a:4d:05:18:d5:87:b6:e3:a4:2e:67:
                    47:71:01:2a:0c:de:c7:26:53:5c:73:54:e9:b8:3a:
                    33:a6:b9:40:fa:93:02:87:3e:47:63:45:88:43:4c:
                    c5:40:6e:18:b0:ab:89:06:64:20:56:7c:52:b3:97:
                    d2:a6:7d:c8:6d:9a:cf:3c:e9:2d:36:d1:37:92:a8:
                    1c:b8:a3:60:71:26:7a:b1:db:4d:26:94:83:7f:36:
                    54:bf:ff:1e:0d:7f:71:52:3e:16:e9:d7:78:09:c3:
                    11:46:65:89:cd:aa:32:bb:28:09:48:71:13:a8:c2:
                    84:c6:ae:29:0e:6d:ef:fd:95:ef:07:d7:56:11:05:
                    98:5d:ff:70:48:a9:43:00:52:ca:b7:b6:60:4b:1b:
                    f5:13:cc:bc:3d:f6:cb:52:3d:a0:ef:68:87:d3:e9:
                    65:76:f2:56:df:db:12:68:ec:29:7c:50:58:46:8e:
                    10:df:d3:8c:38:d2:e3:d8:cb:72:44:8f:3f:b1:58:
                    54:86:8f:a0:e4:12:e2:15:e8:07:15:44:0e:5a:08:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B
            X509v3 Authority Key Identifier:
                keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:42:0f:7d:59:8f:3d:f8:46:c8:dc:9d:24:ca:1e:56:72:
         71:54:33:65:f8:be:30:be:34:df:a5:ec:ff:8e:66:a7:cd:eb:
         37:ba:da:02:b7:05:4b:88:92:3f:c5:12:0e:5b:8e:87:8a:b4:
         0f:04:46:34:43:1a:14:22:9f:c3:c2:5d:e8:8d:6c:1c:da:2d:
         f1:e6:53:52:96:f4:0b:a3:ee:66:02:72:22:14:e3:d9:21:0d:
         f0:ec:1a:81:47:7f:7f:8a:55:6f:2f:7e:ae:34:aa:0b:89:53:
         8f:a3:2c:71:c6:33:30:d9:dc:42:20:c9:ba:9f:b0:27:f2:5f:
         a3:a2:f4:4d:f5:2e:6d:22:e0:70:3e:7d:10:b7:be:31:35:49:
         dc:9e:98:b6:7e:ac:73:f7:93:9f:f6:b6:62:17:e4:de:ed:98:
         74:0d:01:b6:7e:23:9a:59:0c:82:e5:52:b6:b9:71:17:f1:6f:
         53:f7:74:55:08:26:8b:1c:2c:7b:42:62:29:f2:a4:4c:5a:e0:
         26:a2:e4:3f:cc:c7:fd:dd:02:a5:51:0a:6d:64:4d:2a:0b:bd:
         de:bf:ab:58:43:e3:b7:1b:d0:ba:5f:d7:5c:6a:87:22:e2:64:
         97:41:88:a2:98:b4:42:00:0d:af:bb:9f:55:68:fc:d2:f4:06:
         a2:57:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:57 2025 by rpki-client