Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          y0ZllYFcyMwapnemdd3/FU4XT8e8b8y1BoHMDtHS7Ys=
Subject key identifier:   7E:31:2D:E1:2F:EC:25:EA:4D:1D:B9:BE:70:59:26:67:27:3A:FF:46
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0E26
Signing time:             Sat 18 Oct 2025 18:28:59 +0000
Manifest this update:     Sat 18 Oct 2025 18:28:58 +0000
Manifest next update:     Sat 25 Oct 2025 18:28:58 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: JOrfxGnboFlsxXTePggdmY0I9MfoyLr/hErzfEVFvhk=)
                          2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: SL8FzgT9OVj8sdsnB4xU4ICjAq4jGd5hRYBkcZgW2/Q=)
                          3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: zsBzQXlrop3QXwRjd71J0Riqde1kTtjObGNIMhQrjtk=)
                          4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: zNtcNtlfhOp5rrdq7IsqZIll5wTiy9EfvtnOMRdZ+PY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3642 (0xe3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Oct 18 18:28:58 2025 GMT
            Not After : Oct 25 18:28:58 2025 GMT
        Subject: CN=68f3dc6b-df83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:34:f4:aa:e7:f4:4c:b8:b4:59:3a:24:5b:
                    6f:02:c3:a4:e1:59:e6:da:5a:d3:b9:e2:f5:36:8d:
                    08:50:32:90:bf:d7:f9:ca:1b:6f:f4:d2:89:90:12:
                    7f:5b:c9:7d:8c:ab:27:da:c9:5d:4b:32:86:ff:b3:
                    f6:08:af:33:bc:2b:00:72:c8:a1:b4:aa:d7:3b:e5:
                    61:27:80:c1:86:fe:01:4a:3a:5b:19:c7:f6:10:ca:
                    79:1d:3a:8d:38:22:e3:dc:7a:8c:03:22:95:16:47:
                    9b:75:41:98:42:b1:2a:45:86:c7:4f:8d:36:cb:dd:
                    cd:16:42:0a:6c:88:74:26:96:0b:05:31:4e:3b:c7:
                    90:30:d5:13:65:82:8d:9d:21:f5:14:f9:bf:e0:2a:
                    4d:b8:3d:b3:6a:e2:9e:16:48:7c:27:b6:e2:d7:fa:
                    e0:80:cc:a6:0b:9a:19:42:3c:59:bf:2a:42:e2:4d:
                    a5:56:ae:b2:66:8a:16:27:45:58:e1:c8:5c:64:35:
                    56:98:b5:38:c9:10:7b:12:5c:dc:c2:c0:d3:f4:e1:
                    3c:e5:85:1c:2d:33:0d:e1:02:fb:eb:c0:b6:9f:f7:
                    78:7b:78:e2:ec:31:1e:50:ab:07:ff:c3:49:d2:b7:
                    67:55:bb:ef:8a:d0:0d:3b:94:87:73:ee:9b:8e:d9:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:31:2D:E1:2F:EC:25:EA:4D:1D:B9:BE:70:59:26:67:27:3A:FF:46
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:20:4e:16:2a:0b:02:76:ef:8f:d8:e0:04:98:f3:82:0b:
         8a:b3:07:eb:e9:9a:02:47:48:a1:2d:56:25:df:34:8e:3c:8f:
         fc:70:d7:56:88:9e:d2:1d:2a:72:3a:c9:79:45:b0:65:45:96:
         38:95:21:85:e5:8b:7d:f0:04:b0:92:a5:d9:d2:d7:57:30:14:
         54:78:30:b0:36:d4:a6:5c:dc:d9:d0:14:23:2d:e3:a6:d2:cf:
         ff:f4:76:16:5c:63:cd:9b:53:8c:9b:0e:3a:81:ce:19:9e:7e:
         37:dc:99:73:f6:0f:11:a9:f2:0b:30:48:6c:61:5a:ee:27:19:
         b6:ae:d8:aa:a6:87:3c:1b:c2:f4:ed:ab:6c:b2:a6:d4:e1:97:
         de:d7:0e:f8:f7:92:5a:2b:5e:ad:9d:eb:2b:bb:5b:6d:a8:f6:
         42:05:15:e7:ea:07:10:a1:25:1d:28:e2:e3:0e:c2:95:61:0c:
         96:28:13:46:b7:da:6a:3d:e1:f0:ee:be:87:8e:38:be:b7:46:
         e4:37:0d:f4:fa:de:2b:2d:bc:e3:37:50:c8:26:bc:1b:77:61:
         b3:fb:64:81:54:36:81:bc:46:97:cb:69:e9:8e:8a:6b:a9:e0:
         0a:ad:91:f1:00:96:c3:40:1e:dc:5d:22:87:f4:4a:1d:1d:d9:
         0d:f5:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:15:33 2025 by rpki-client