Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          hSBM+4EUJUwkieYwqRkBnYMH8/TaRd4COHVt0Ga44jI=
Subject key identifier:   3E:3D:C5:5A:FB:36:7A:C5:23:3E:7E:72:BF:C5:75:94:B5:0F:53:15
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          0623
Signing time:             Sun 19 Oct 2025 00:22:50 +0000
Manifest this update:     Sun 19 Oct 2025 00:22:50 +0000
Manifest next update:     Sun 26 Oct 2025 00:22:50 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: pwZsKVnJHcf3DSaEygxJIlDItT1yTtZ2i5rmZ9y5eN4=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: Zin5Bd4weOB/NhOZcniDknZ2HAO8m6tl6cWhzqt6SiQ=)
                          3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Oct 19 00:22:50 2025 GMT
            Not After : Oct 26 00:22:50 2025 GMT
        Subject: CN=68f42f5a-add6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:27:0a:f3:86:36:5c:f2:f0:20:d8:45:7c:
                    08:f5:97:f8:bf:24:96:b6:f3:89:f4:74:08:a8:e7:
                    28:95:12:67:d4:14:99:c5:40:7f:ef:1e:98:97:09:
                    ed:47:0a:da:99:ea:8c:e7:d2:8c:82:4a:bd:01:02:
                    32:9b:54:5f:09:85:9b:4e:40:32:5d:37:f5:4d:35:
                    d2:c6:2f:53:85:ae:2d:b4:c9:66:73:3c:cd:07:3f:
                    b4:1f:02:70:87:df:d9:35:b2:74:73:f2:a8:97:68:
                    38:b4:ac:31:ee:2c:d8:e5:70:6e:79:e9:55:06:d3:
                    7a:74:db:51:bd:88:55:9b:ae:e2:53:e6:f4:ea:92:
                    d6:40:76:1d:0c:e7:f1:c3:a6:f5:e5:ec:1e:1c:75:
                    f3:b9:95:61:eb:33:29:ae:45:6d:a3:9c:c9:33:8b:
                    20:ad:33:6a:11:ac:40:e3:3c:8b:09:f0:24:57:01:
                    4c:87:45:3b:b5:e8:1a:9f:a4:d4:71:35:24:a5:3c:
                    6c:9b:40:df:57:39:43:88:2c:46:a9:b4:16:50:7a:
                    d4:d5:16:61:a2:44:44:0c:7e:a5:63:6c:42:1a:b8:
                    3a:76:4f:11:97:16:20:39:f5:58:d2:82:e4:3b:f8:
                    d4:a5:ea:f6:2c:38:df:74:9f:7c:b2:f6:a8:52:46:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:C5:5A:FB:36:7A:C5:23:3E:7E:72:BF:C5:75:94:B5:0F:53:15
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b1:af:64:29:9c:fe:a1:ad:8d:f7:82:59:1f:fa:9c:c6:d9:
         b0:21:36:6b:5c:65:9a:74:54:1c:99:6b:6a:13:a6:0b:d0:26:
         d1:3e:dc:ea:80:a5:18:b3:aa:75:c4:8f:5b:d1:c0:29:d8:64:
         fc:56:9e:d3:c4:47:7c:7a:63:d8:27:6c:24:21:5b:ea:76:a3:
         06:ce:37:59:0f:77:f2:ef:eb:06:56:c3:4f:7c:f4:8a:1f:66:
         a7:1d:5e:7a:d6:4d:30:f3:80:e5:09:ac:00:ca:93:17:9e:cb:
         c0:97:2f:18:85:b9:79:3f:dc:c6:51:ca:b6:e9:05:a8:49:51:
         9e:c6:44:65:00:ce:06:f5:bf:58:27:01:13:5b:6f:b4:94:64:
         55:5a:6a:73:06:a1:1e:46:6a:9f:59:6c:69:e6:d5:92:53:0e:
         66:5b:00:bb:72:98:f5:ef:3f:a2:3c:b8:68:eb:5d:7e:ef:c9:
         9a:29:58:c3:31:92:4f:fe:00:47:eb:ee:9d:a2:9e:fb:d8:b2:
         d1:da:77:e9:db:83:c9:3e:86:f0:da:10:d2:ab:3c:52:d3:2f:
         95:71:da:37:ac:60:7f:30:fb:52:ef:68:e3:d2:49:99:b2:af:
         85:0a:2f:09:c3:64:a9:36:e4:e5:57:70:d7:ee:84:84:e3:cc:
         cc:ae:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:36 2025 by rpki-client