Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File:                     xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier:          wu3IgQrEuuBk6CG+IOSpgCeYjFVF10AQpIwjwMs1T5s=
Subject key identifier:   DA:44:9B:F8:69:DE:A2:C4:90:AF:AE:40:E9:F6:97:E9:11:62:D6:56
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer:       /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number:          07E2
Signing time:             Sat 18 Oct 2025 22:22:25 +0000
Manifest this update:     Sat 18 Oct 2025 22:22:24 +0000
Manifest next update:     Sat 25 Oct 2025 22:22:24 +0000
Files and hashes:         1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: fy5eUBTDTDHHI9A9KXupPt4wKjNPFxbR6N1k/es3s9Y=)
                          2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=)
                          3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
                          rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
        Validity
            Not Before: Oct 18 22:22:24 2025 GMT
            Not After : Oct 25 22:22:24 2025 GMT
        Subject: CN=68f41320-9940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:e2:4a:51:d0:30:d3:8b:a4:b2:86:af:62:
                    f0:33:81:e9:99:39:0f:6f:66:de:b3:02:fe:00:fd:
                    9d:3b:8c:42:ba:fd:1a:35:93:72:47:40:fe:32:a8:
                    b0:13:3b:77:20:d8:98:ed:7b:b7:f2:f4:61:fe:91:
                    3a:73:97:a8:ff:68:c3:3a:ac:5a:df:19:18:b6:ea:
                    c9:13:9d:dd:8a:c6:0e:cf:1a:b8:95:9f:64:fe:1f:
                    3f:3a:ec:26:91:81:68:f4:f2:8b:87:c6:e2:bc:12:
                    8c:77:76:83:2b:cb:cd:9e:26:ee:86:64:52:09:d2:
                    10:d0:ad:ac:a5:eb:aa:eb:9f:f6:9a:b3:8f:95:6b:
                    32:dd:36:90:8b:55:dc:70:86:f7:61:66:a8:39:8d:
                    76:67:f5:df:01:44:e7:ce:0b:30:64:c5:5b:32:7b:
                    55:33:92:f3:a2:b8:f1:f0:c2:b1:6a:5d:77:ee:dd:
                    d1:f4:04:15:94:9b:07:46:1a:fd:0a:74:ea:c3:bb:
                    35:02:94:eb:a7:1c:ac:08:7f:8c:f3:f3:14:c5:e6:
                    e7:4c:50:bb:45:d4:83:ad:4e:16:ab:58:81:2e:fb:
                    61:35:0a:4b:5c:a2:d2:fd:85:0a:19:bf:6c:45:b6:
                    69:66:98:66:70:2b:6f:81:88:70:21:69:20:4e:fc:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:9B:F8:69:DE:A2:C4:90:AF:AE:40:E9:F6:97:E9:11:62:D6:56
            X509v3 Authority Key Identifier:
                keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8a:61:3d:0c:f0:b2:b7:3a:fe:dc:97:22:11:ec:29:13:73:
         25:54:73:70:0b:7d:4d:53:0c:9e:e4:8f:66:25:f1:6f:e0:af:
         3b:9a:43:96:46:4f:f3:22:32:ee:43:41:53:95:00:53:34:af:
         71:62:67:f3:16:af:a5:da:f4:fe:12:60:ee:79:18:e2:6d:48:
         59:19:87:34:2e:c0:0b:02:26:01:fe:1e:c8:46:5e:15:5b:c2:
         aa:a0:fd:7e:f6:1f:47:9a:da:68:23:6f:77:61:2f:a9:9e:4e:
         cf:39:ca:58:b9:b2:69:52:15:31:1f:09:e8:9e:0c:35:89:ed:
         df:94:fe:e1:50:b1:08:45:4f:ed:c4:67:78:f7:e3:e0:ab:0e:
         1c:29:c8:17:2d:2a:1f:ca:26:ff:d3:04:78:05:64:fb:5e:0e:
         83:df:c5:59:36:3c:4c:81:46:05:e7:d3:c0:54:82:96:f2:f6:
         7f:ce:94:0c:e5:df:7b:2f:32:a6:b4:f1:ca:b8:9e:6b:2e:62:
         eb:95:13:09:69:05:23:81:32:d2:40:dc:5e:71:e9:a3:63:9b:
         1d:8f:37:ae:2b:51:2c:8a:ab:9f:0a:78:97:0b:9e:24:b7:4b:
         bb:99:89:78:8c:d4:88:79:fd:69:56:9e:a8:f8:b6:00:6d:25:
         c5:ac:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:34 2025 by rpki-client