Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File:                     aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier:          i4LHFL2N5gcVuozQyVj+sqFCIDdjiXEdueKid6YsaJo=
Subject key identifier:   36:6C:EE:77:75:A6:C8:B8:D7:35:E7:9D:4A:FD:77:89:25:B0:33:44
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer:       /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number:          0823
Signing time:             Sat 18 Oct 2025 22:05:30 +0000
Manifest this update:     Sat 18 Oct 2025 22:05:30 +0000
Manifest next update:     Sat 25 Oct 2025 22:05:30 +0000
Files and hashes:         1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: TUVX5fhZHWNWx7MdFSohAWp7ylo3D7o41iE58n/yHN4=)
                          2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
                          rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
        Validity
            Not Before: Oct 18 22:05:30 2025 GMT
            Not After : Oct 25 22:05:30 2025 GMT
        Subject: CN=68f40f2a-6224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:1e:26:0a:e7:ef:22:79:e8:4c:d6:bc:af:
                    cb:0e:44:64:4f:27:78:2a:d3:a2:29:ec:23:1a:d6:
                    b3:55:c8:3c:c2:69:58:90:70:d1:2b:a3:dc:77:b9:
                    e1:5b:42:8c:bd:ab:61:f2:c1:e4:0a:7e:50:21:e7:
                    e9:52:88:e2:11:ad:ad:57:c4:70:42:d0:d2:3f:58:
                    81:bc:0a:5f:7e:93:79:2a:9e:50:37:01:d5:4b:8b:
                    ef:b9:dc:d8:f5:48:6c:53:91:19:d7:dd:13:60:66:
                    17:aa:fe:66:2f:45:ec:2f:07:ad:cb:70:bf:f0:c9:
                    67:af:f1:20:73:8f:e8:4b:37:8d:9c:b9:1e:34:82:
                    71:ac:7b:63:7b:e3:be:72:a3:80:f4:fb:4c:8b:a7:
                    6f:38:6f:7f:e4:c5:6f:8f:cf:1f:99:01:37:89:9f:
                    20:55:0d:65:a6:22:a7:bb:1b:a3:39:64:0d:81:d0:
                    0b:e4:fc:ac:27:1d:de:b5:8a:11:57:cb:03:b0:12:
                    4c:ea:9b:87:00:03:76:12:b0:5b:ec:15:5a:98:70:
                    c4:d1:b4:91:06:22:da:c1:53:6e:c1:ed:cf:80:ef:
                    1d:8b:4c:e6:91:3e:6d:4a:ad:86:9a:aa:8a:d6:b5:
                    cb:3f:e4:3a:6b:d3:ff:0d:07:d5:46:44:1a:df:62:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6C:EE:77:75:A6:C8:B8:D7:35:E7:9D:4A:FD:77:89:25:B0:33:44
            X509v3 Authority Key Identifier:
                keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:35:ae:d6:98:98:8f:f2:72:af:92:b0:fc:ad:68:b6:39:
         03:cc:5f:24:80:57:04:c5:bf:9c:ad:27:71:8d:ff:31:18:00:
         a1:0a:06:2b:d7:8c:6c:f6:84:fa:d8:b6:59:a0:84:f4:4b:fa:
         56:22:4f:89:81:ab:0d:65:45:06:60:be:c1:d0:7d:9c:06:02:
         16:1c:14:11:f4:e8:ec:3e:9f:c4:bc:c8:46:da:ab:71:5e:88:
         fe:22:6f:3f:72:a8:2f:c0:53:b3:56:7f:50:f0:3c:d5:09:29:
         dd:77:4f:3b:ab:db:4e:67:78:ed:98:1f:80:20:fa:9d:14:ee:
         89:45:4c:56:6f:e7:47:a8:6a:c9:fd:5c:50:25:9a:2b:ce:00:
         40:fd:65:f4:20:39:a5:7d:4c:3b:c0:b0:55:b0:83:ed:bc:3f:
         05:74:5b:b8:46:a3:68:5c:ee:21:6f:13:04:44:0e:67:78:a2:
         7d:a2:48:ee:1e:ea:69:66:4e:58:64:3b:a8:91:2a:0b:58:b1:
         b4:ff:9a:c4:3b:ef:7d:3f:cb:81:f4:dc:00:8c:69:aa:27:8c:
         26:7a:a7:96:f3:44:9d:28:5b:fd:37:63:58:a6:c1:68:e7:3b:
         ed:67:ed:b1:8d:df:83:ff:aa:54:c9:03:e6:4b:36:fd:17:c0:
         1b:11:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:28 2025 by rpki-client