Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier:          bovs+ARZL70bTN+S1+ga+smiSl12Q0SJuhu1RwkKw2s=
Subject key identifier:   47:D2:9E:65:25:51:5B:15:AA:1A:A5:05:B0:18:B0:D8:CA:70:31:65
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer:       /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number:          0E
Signing time:             Sun 19 Oct 2025 11:34:48 +0000
Manifest this update:     Sun 19 Oct 2025 11:34:48 +0000
Manifest next update:     Sun 26 Oct 2025 11:34:48 +0000
Files and hashes:         1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: 1Ih/y+jrsWJNFeOKPBcUAeGlGzz6cfsKJfguxcax7lI=)
                          2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: uH6Z9g6mupXrJXF3TsZUP4n4WGUuKWh4WvUq+eRHejo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Validity
            Not Before: Oct 19 11:34:48 2025 GMT
            Not After : Oct 26 11:34:48 2025 GMT
        Subject: CN=68f4ccd8-8cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:9d:e8:00:09:1e:7b:9a:6d:c3:f5:87:48:
                    80:52:91:e6:04:92:72:74:08:f5:aa:7c:4e:8d:e8:
                    c6:eb:37:42:0b:75:ac:0e:e6:82:36:cf:e1:5c:0f:
                    0c:8e:a4:06:06:1a:51:69:74:da:7b:9e:c6:14:90:
                    c8:78:95:f1:84:cf:e7:62:4a:0f:a2:16:71:4a:68:
                    87:56:39:39:d8:4c:43:f9:1d:9f:0d:f3:2d:1c:5c:
                    5f:b9:98:40:25:24:1e:24:83:20:83:1e:1e:7b:13:
                    ce:f5:0f:5d:fa:57:d2:48:51:7a:41:f6:6a:45:db:
                    0c:b3:89:a8:02:ef:88:1c:48:b8:04:7e:d6:44:e3:
                    07:ec:28:ba:49:e1:5f:e8:77:39:ad:6b:66:44:c1:
                    79:26:8a:1c:ab:2d:59:5c:24:67:93:b7:c6:11:a4:
                    ec:a1:85:e6:a9:03:5d:e9:94:35:9a:2f:6a:0c:0c:
                    56:7f:84:c4:4e:7f:c7:fa:4e:fc:a5:6b:4e:90:5e:
                    5e:00:72:62:d0:d0:15:b8:19:e9:f6:89:dc:76:cc:
                    35:94:24:fc:89:f6:c9:d0:03:63:b0:db:83:09:70:
                    e3:9e:51:b2:4d:bf:15:8c:a2:43:9b:e6:3c:87:a0:
                    d9:0b:b3:90:e4:bf:4f:e6:cc:f9:10:85:67:57:89:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:9E:65:25:51:5B:15:AA:1A:A5:05:B0:18:B0:D8:CA:70:31:65
            X509v3 Authority Key Identifier:
                keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:23:82:13:03:37:5a:4d:20:c1:18:12:02:a9:b3:a2:be:50:
         40:aa:1c:63:c7:79:79:8b:9b:05:2f:25:11:43:13:42:57:ac:
         82:52:fa:97:40:89:45:e1:59:cf:22:69:d9:7c:32:b7:46:5d:
         d1:1c:88:ab:64:29:25:dc:3e:24:e7:ef:66:fc:9e:9e:40:24:
         f4:e2:e8:0c:41:4a:ff:ee:8f:56:5c:ad:b7:bc:13:b5:90:2f:
         6b:d5:4b:8f:fa:81:93:6f:b2:bc:39:d8:ba:11:c7:27:ee:16:
         f7:04:60:4a:bf:6a:fa:a7:87:e4:09:2a:10:1b:7d:64:16:a5:
         dc:a3:e8:f8:e2:82:a9:99:e9:af:3d:d2:4c:0b:8c:87:62:43:
         1c:4a:cd:1d:57:6e:94:92:a5:e1:8d:67:15:40:75:ac:cb:4f:
         d3:f1:44:3d:1d:db:86:8e:34:25:38:73:b5:15:14:ab:8c:b5:
         af:aa:bf:9a:9c:b8:83:f7:1b:29:00:e4:95:24:c5:9f:46:f9:
         32:b8:59:9e:ce:0d:11:f9:50:3a:ce:5d:51:94:dd:68:ac:75:
         37:99:48:92:10:1f:fb:7c:2e:21:d6:a0:7c:58:9d:01:2a:e1:
         31:c5:20:12:e7:c0:3f:91:d1:df:90:ed:53:8a:e2:65:18:db:
         e3:2e:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:55 2025 by rpki-client