Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          IywyZdq8gS3XE4kjfS/KPb2bbCF0LhAd56cdQKjt6hA=
Subject key identifier:   E0:01:52:16:67:EC:78:7D:AB:AD:DC:73:AA:31:27:64:1F:F3:27:15
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          0140
Signing time:             Sun 19 Oct 2025 07:09:39 +0000
Manifest this update:     Sun 19 Oct 2025 07:09:38 +0000
Manifest next update:     Sun 26 Oct 2025 07:09:38 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: F9yZ+d209mLmvojP0Rsd3THAPc6EgSTge2hMNLGzBVc=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: V4rJ9+KQ3AK8oq6Dx/jnK6Kq8OonvPFz54Mtrt4dysM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
                          rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
        Validity
            Not Before: Oct 19 07:09:38 2025 GMT
            Not After : Oct 26 07:09:38 2025 GMT
        Subject: CN=68f48eb2-cb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:ff:de:9a:76:7f:76:a9:f3:a8:2d:c1:1a:
                    98:de:91:fa:96:5a:dc:8c:09:2c:18:fb:e5:16:a8:
                    31:8d:69:d5:89:86:bd:5e:c1:ea:1c:5b:59:d6:78:
                    6f:aa:76:e7:58:e5:8c:8d:22:ab:06:70:eb:ce:9a:
                    54:e3:5a:4e:d3:6c:b6:6b:cb:d5:14:db:01:e4:93:
                    07:bd:de:69:8d:15:d3:5c:a5:80:2d:72:bb:cb:13:
                    cd:b0:12:47:b5:20:96:45:29:dc:52:10:5a:b7:fe:
                    76:78:0b:ac:16:45:3b:d1:53:d3:60:7c:f4:7d:f1:
                    7d:22:6f:c7:38:a1:b6:02:8a:00:34:eb:2b:5b:c0:
                    8c:60:83:43:ef:9c:8e:2a:9e:2b:f7:4e:66:6a:3c:
                    06:5f:61:43:27:89:6d:a8:0c:8a:16:31:92:da:5a:
                    38:36:99:ad:0e:7f:c4:9d:cf:1a:a8:5b:b8:69:38:
                    c7:27:35:81:01:b6:14:ce:28:2b:ce:6f:12:2c:d2:
                    16:90:fc:9c:41:62:99:3d:cf:93:83:12:ed:d5:60:
                    f6:21:c6:22:f9:7b:82:eb:08:99:4f:58:ce:8c:85:
                    01:8d:a3:4c:ed:24:59:a9:7d:86:cd:6a:8e:65:95:
                    c8:82:13:88:8e:49:67:50:28:d5:57:ae:bf:a6:7f:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:52:16:67:EC:78:7D:AB:AD:DC:73:AA:31:27:64:1F:F3:27:15
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:3f:41:f0:ad:bf:92:cb:ad:5d:cc:22:de:39:e0:6d:fe:
         41:9d:6c:13:3b:bb:32:f6:41:e4:22:f2:90:5d:09:24:84:c8:
         0d:0e:42:af:e0:c7:7f:67:68:94:00:25:08:56:c1:98:ec:e1:
         96:56:11:8e:7d:11:a9:60:7f:6a:6c:ae:e0:9c:fa:b3:73:09:
         ae:3a:23:00:8f:eb:0d:ee:65:74:5a:34:3d:8b:d6:c9:9a:06:
         d6:cc:40:d7:8c:be:9f:83:62:9c:2e:05:95:d2:1a:ee:6e:cc:
         8e:ab:4e:9f:87:ff:9e:d5:e7:4e:db:ac:9b:12:52:2a:5c:28:
         2e:72:e8:d7:9b:08:5e:7e:24:57:1f:38:e2:9b:05:36:08:2c:
         6f:a8:84:12:c8:2b:0b:a6:6c:b6:52:fc:1a:8e:86:65:90:25:
         a2:b7:96:1d:ce:cd:5c:8d:b7:69:ec:61:4e:ce:91:de:3b:97:
         86:c4:af:0a:0b:40:ef:b9:61:b6:5b:63:d2:83:7c:9e:65:66:
         a8:7d:f9:b8:ab:b9:16:1a:b2:28:b7:65:57:ff:00:fe:0a:ea:
         2a:a4:73:a7:cf:41:58:bd:9b:5f:8d:98:04:f1:b7:8c:e6:33:
         ab:04:1d:df:7f:9a:04:13:df:e5:f5:29:ef:f7:68:41:6a:a3:
         b0:6d:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:01:14 2025 by rpki-client