Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
File:                     aSE1YIaDdV6U2OylfYsLNY7OFxg.mft (raw, json)
Hash identifier:          0FCOkfTkvY4QgPQNfER8EilS6mpAgMGNCtr7GX1Xk5A=
Subject key identifier:   EA:B8:E5:84:E3:74:D8:91:42:7B:AE:4C:59:7A:0B:E5:A7:2C:2E:35
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       039F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
Manifest number:          037C
Signing time:             Sun 19 Oct 2025 02:59:55 +0000
Manifest this update:     Sun 19 Oct 2025 02:59:55 +0000
Manifest next update:     Sun 26 Oct 2025 02:59:55 +0000
Files and hashes:         1: aSE1YIaDdV6U2OylfYsLNY7OFxg.crl (hash: 1/arel/ZuJdgxYRjhgwTmPwRfem7fjS06iSZa+7BvV4=)
                          2: EFEEF8165BB211EE88BB1945C4F9AE02.roa (hash: pBp+3YEZO1rLrx0bvICmu2Gq4WoxGLfmXIpKccpgGw8=)
                          3: D0D44F9A7A7311EF9B70B061C4F9AE02.roa (hash: rOMU6+JJyASa3UMEbMc1nVoiFLnAmgt++mEA6n5GZvo=)
                          4: 593105685BB711EE8E69584CC4F9AE02.roa (hash: uvitL8GneMzjmVuJsx1eXtiAdiTmVIZbzsGZDaPZNkE=)
                          5: 3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (hash: U81ppJdJPa/NwEizA2XDkKKg4D0+UWmO8vP3Sd1xBj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
                          rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Oct 19 02:59:55 2025 GMT
            Not After : Oct 26 02:59:55 2025 GMT
        Subject: CN=68f4542b-29da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:10:e3:39:86:df:e0:16:23:df:6a:0d:3d:
                    d4:6d:3d:a5:ac:11:ec:ca:b4:9e:da:3e:a5:f2:df:
                    7e:4d:e7:b2:06:82:85:ee:85:49:8e:6c:2a:47:07:
                    cc:18:34:10:d5:6e:68:66:f4:42:86:f9:36:41:96:
                    bb:42:aa:d3:f9:90:5a:4e:84:0b:38:47:c6:7c:20:
                    b4:95:08:8f:ad:b0:3b:46:c3:85:12:51:af:9a:21:
                    0c:49:41:15:d8:05:a9:73:12:d3:f4:90:f0:01:30:
                    a3:4b:9d:71:a1:dc:71:87:dd:34:89:06:42:49:48:
                    23:e9:ad:cd:81:d9:b7:0a:db:ae:3f:81:e7:92:8a:
                    28:32:d0:fd:d1:e5:ba:10:7b:ec:a2:cc:fc:c2:46:
                    da:9f:39:1e:37:9f:bc:48:91:c6:db:71:91:ca:22:
                    44:ac:8f:82:de:d1:3a:44:e8:73:0e:dc:49:41:69:
                    79:f3:96:51:ff:64:84:ce:fa:c3:1d:8f:e5:5a:29:
                    33:1e:3e:73:fa:94:0a:b1:fa:5c:4e:c2:0f:e1:de:
                    44:9f:18:22:89:0a:a0:c6:8c:78:c6:f9:f2:e6:c6:
                    8a:6c:c5:da:f6:81:34:1b:05:b9:ef:a3:47:89:3c:
                    aa:3d:a2:ca:40:c8:d4:de:f7:52:ae:24:b4:f6:bf:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:E5:84:E3:74:D8:91:42:7B:AE:4C:59:7A:0B:E5:A7:2C:2E:35
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:a6:08:20:8f:dd:5d:8e:21:36:2b:f9:6c:4b:7a:9c:09:
         01:a5:58:91:14:86:44:bf:96:d7:ab:5d:54:98:e0:4a:98:13:
         e3:13:68:1f:34:9c:d9:f7:04:55:ba:76:82:7d:3c:9a:a9:ef:
         a3:78:9e:26:6a:f4:aa:07:b7:1e:50:53:56:7a:a2:a9:e6:b5:
         88:13:67:67:6d:1d:17:c5:c0:7f:dd:80:bc:90:9f:47:af:51:
         f1:2e:2e:f5:f3:a8:d6:2b:a7:bb:25:0b:f0:30:7b:9c:20:25:
         7e:52:47:d6:56:9f:9b:41:29:d2:7a:b5:7a:17:6e:28:87:e9:
         32:71:89:95:7e:ed:b0:ec:29:96:bd:50:f6:66:3a:75:85:41:
         40:95:5a:b7:2c:4a:87:00:9e:62:c0:b2:85:5f:21:df:14:67:
         76:91:60:77:cc:89:ab:31:47:71:d5:47:a1:85:4d:47:d9:36:
         1f:79:03:18:90:7b:f3:52:32:2b:b6:46:30:97:08:ae:7f:8d:
         eb:d7:88:5e:d0:ad:a9:79:9c:7d:8b:21:7b:6e:e5:95:65:52:
         3d:70:ee:2c:83:23:b2:f3:fb:b7:5c:e9:4a:aa:8f:67:8e:fb:
         29:56:7d:e7:eb:b1:00:71:c1:32:2d:dd:45:98:2f:5a:72:04:
         ab:05:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:43:03 2025 by rpki-client