Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          dFz47eNN4y4/pNCRN+NfrLEXBogFVTkTYo6EBwOYGDI=
Subject key identifier:   E6:E4:07:22:03:70:A2:E1:DD:1C:86:74:2D:5D:B9:2B:76:36:3E:10
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          088F
Signing time:             Sat 18 Oct 2025 22:05:22 +0000
Manifest this update:     Sat 18 Oct 2025 22:05:21 +0000
Manifest next update:     Sat 25 Oct 2025 22:05:21 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: cfu9ePe3AbB1CrL3pgln9e8WNw7Eum4t4bpBgo0dHBo=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
                          4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Oct 18 22:05:21 2025 GMT
            Not After : Oct 25 22:05:21 2025 GMT
        Subject: CN=68f40f22-38a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:a0:da:49:14:6f:45:a6:f4:b0:80:5b:3e:
                    79:18:ed:d6:19:8e:3e:7a:a4:ed:84:96:08:14:0a:
                    93:2c:fb:71:d8:12:4a:65:b2:ef:75:a4:3b:9b:48:
                    29:4e:f0:9b:f0:a7:01:d9:a4:ec:b9:1a:11:9d:ed:
                    b0:bc:e7:e0:5f:fe:49:a7:25:63:b7:bc:23:d6:5f:
                    25:f0:0c:96:e7:fa:b9:f1:58:b2:4d:e7:08:1d:3e:
                    84:91:61:0c:b9:6d:17:96:a7:9c:07:95:64:d3:07:
                    e3:4d:4c:a1:4c:92:61:89:53:38:83:4e:db:c3:13:
                    68:67:1c:05:0b:d7:bd:ad:ec:38:9c:ea:df:da:71:
                    af:70:e3:5c:e1:60:b6:d4:6d:de:53:47:f0:ab:74:
                    96:64:51:5d:49:47:fc:a9:94:09:3b:98:95:64:a1:
                    8d:07:c5:cc:b2:f1:ef:64:96:0e:9b:dc:15:44:44:
                    07:5f:75:74:5c:f2:29:30:f3:da:c8:b4:28:2b:73:
                    8a:d6:df:cd:0a:47:39:19:4a:8d:91:8a:24:c9:8f:
                    6a:e1:ff:70:43:fa:91:bb:f4:4e:bd:76:e6:e5:2d:
                    ae:f6:49:b8:fc:bc:4c:49:bf:ce:cc:9d:17:03:b3:
                    79:61:33:7b:76:fe:01:9b:eb:c0:70:b4:a5:13:9d:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:07:22:03:70:A2:E1:DD:1C:86:74:2D:5D:B9:2B:76:36:3E:10
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:b2:d4:f3:4b:03:6a:8a:21:b2:c9:21:41:a8:3f:79:c8:
         2f:fb:16:e3:2c:af:5b:69:eb:2b:00:9d:04:eb:7e:64:85:81:
         38:90:2e:71:9d:bf:e7:b3:55:ce:d9:ec:f8:55:b3:33:7c:f0:
         a4:d0:01:3b:36:17:5e:8f:4b:1c:15:00:38:2a:6f:ce:13:4a:
         10:63:cb:38:88:2c:3a:5a:d4:a3:05:a6:79:be:02:29:71:d7:
         21:eb:d5:73:97:63:ce:a9:9c:c7:ea:ae:bd:80:18:48:5f:ae:
         1b:e9:c1:b5:c9:b5:54:d6:7d:7c:0a:84:b1:d9:fb:1f:d0:4b:
         15:54:7b:36:31:41:a4:d8:22:33:df:c8:29:3b:91:4c:db:c8:
         14:73:5c:af:72:85:63:f6:90:2a:5c:f9:e0:2e:44:a0:81:47:
         04:71:c5:2d:f4:62:74:fc:14:b8:2f:d9:dd:68:1d:0a:dd:b0:
         2c:90:35:f3:86:bb:ec:2b:0a:12:71:b0:c9:c8:7c:d3:dc:1a:
         37:97:4e:06:1e:6c:16:bb:d1:a6:d8:2c:1e:72:d9:aa:83:a8:
         19:2f:95:f3:f6:c7:94:88:59:ee:de:06:d2:df:72:6b:49:b3:
         10:4f:a4:be:51:dd:16:0d:f9:1e:ff:62:23:dc:21:7f:df:a8:
         eb:32:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:35:12 2025 by rpki-client