Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json)
Hash identifier:          YhLICURR2mCcCaHb/zNtWSEJdnhz3qPalFRmQV5CmQ4=
Subject key identifier:   0F:DF:92:5B:D4:D7:D5:99:FC:2C:F6:A2:DB:36:5F:EE:90:F1:DC:E3
Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Certificate issuer:       /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
Manifest number:          0188
Signing time:             Sun 19 Oct 2025 06:06:09 +0000
Manifest this update:     Sun 19 Oct 2025 06:06:08 +0000
Manifest next update:     Sun 26 Oct 2025 06:06:08 +0000
Files and hashes:         1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: BJ1rRUZ7dQDo19rKQix9devIb4ELAN4iIFbmtuYySuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
                          rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Validity
            Not Before: Oct 19 06:06:08 2025 GMT
            Not After : Oct 26 06:06:08 2025 GMT
        Subject: CN=68f47fd1-706d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:ab:2a:d7:a2:83:1b:c4:e3:00:70:2a:92:
                    cd:74:ea:e2:34:e2:65:9d:8f:9e:f2:b9:2d:33:d9:
                    89:f3:23:dd:e7:e5:05:f1:26:d4:b6:89:33:56:93:
                    0c:d3:0e:3b:4c:78:a8:1b:86:74:72:b7:bb:c7:ef:
                    75:5c:3a:e0:f5:4c:82:0e:60:b7:90:1f:ad:d2:4a:
                    b0:1b:aa:40:5f:d5:a4:ca:a4:0d:1b:71:f2:52:f3:
                    63:5a:59:0d:ff:4c:df:e2:0d:fa:40:1f:d4:a8:01:
                    53:3d:f5:1f:b5:55:0a:b4:25:ec:24:a2:04:8a:eb:
                    14:38:7c:5f:47:7b:e5:f4:aa:33:de:f1:d0:da:90:
                    07:51:bf:c7:54:8d:c0:96:90:1b:10:53:a2:3e:2b:
                    3f:5a:a6:c4:e2:28:9d:61:65:2b:07:99:75:5a:94:
                    78:85:3d:81:55:0e:90:3d:e3:c4:d2:ed:05:7d:c3:
                    8a:f1:b7:d0:c9:90:a9:46:3d:4c:84:05:fe:9b:3d:
                    f0:7d:af:6d:c9:3b:5e:5c:cc:cd:70:8c:c2:0a:33:
                    7a:7e:45:f6:cf:0f:d2:23:28:a3:a8:7f:3b:75:dc:
                    71:27:b2:32:3f:40:52:d7:50:91:ee:e1:dc:2d:06:
                    8f:f2:24:d2:4f:aa:1a:b3:45:a6:01:c2:e1:4e:f9:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DF:92:5B:D4:D7:D5:99:FC:2C:F6:A2:DB:36:5F:EE:90:F1:DC:E3
            X509v3 Authority Key Identifier:
                keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:01:c5:10:71:6d:c4:0c:e6:b8:22:d7:1b:67:b2:c9:f2:
         c5:c1:73:bc:39:4f:1a:40:e8:c9:c7:fe:b4:4e:9e:fe:c2:3a:
         02:24:f7:f5:91:e7:f2:2a:a6:45:e0:b9:89:1e:6e:4e:85:0d:
         88:ff:29:d5:83:b2:70:fd:d8:f8:70:45:73:2a:19:da:ce:f0:
         28:b3:cf:e7:6c:bb:dd:9d:24:83:16:48:c1:a2:9d:db:6d:78:
         49:a5:e0:2a:6f:01:de:56:05:76:fa:37:3b:41:1a:33:41:37:
         b2:11:2e:0c:27:be:c4:30:e8:37:ef:d8:41:c4:c8:9b:f1:0d:
         2b:73:1c:0c:15:ac:36:74:3a:44:d7:d5:9d:2f:bc:7d:2f:c1:
         4a:35:ca:be:83:81:05:ff:ec:12:9b:81:f2:de:0c:0c:f1:43:
         c3:36:74:3b:e0:ac:96:fc:75:f3:7f:81:e1:b4:d6:b6:4d:6a:
         1c:d2:ab:05:2f:7e:01:cb:31:b7:c1:c8:9d:b8:88:cc:1a:92:
         12:9d:c8:d9:e0:71:95:30:ce:83:84:08:96:86:9f:60:3e:3b:
         41:fc:cb:f8:07:c0:88:a6:69:c3:7f:e9:9c:84:eb:c0:bc:39:
         41:83:97:4f:fd:9a:61:6e:2d:0c:fd:41:66:27:b1:97:0b:19:
         2f:a6:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:30 2025 by rpki-client