Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File:                     dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier:          7Az86j5/VN9jZ39QmXpeEtJ8etr6wXlQ5GjQex5fTWY=
Subject key identifier:   A6:0E:33:93:96:F1:0C:46:CB:9F:5B:00:AC:C7:28:67:0E:86:41:CF
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number:          072F
Signing time:             Sat 18 Oct 2025 23:20:01 +0000
Manifest this update:     Sat 18 Oct 2025 23:20:00 +0000
Manifest next update:     Sat 25 Oct 2025 23:20:00 +0000
Files and hashes:         1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: /KJAu0E8hVQQj4F0O+hFeTTSQ42FTdQXWkRYkTWa3ug=)
                          2: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM=)
                          3: 6B0EF3045B4911ED8862970DC4F9AE02.roa (hash: HufxlMWBsko144G4tR19UzbVfHKirhQM0DbZOGV07n8=)
                          4: 4641C3785C2311EDA3D17465C4F9AE02.roa (hash: 1cYw/FnNhsdWx9pKxBCUUJjrGeyH6sgJ5u2vBWIY2hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Oct 18 23:20:00 2025 GMT
            Not After : Oct 25 23:20:00 2025 GMT
        Subject: CN=68f420a0-c450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:9c:62:7d:f0:f8:04:40:bf:be:8c:52:88:
                    5b:07:c4:38:dc:44:6c:ba:42:8e:a2:66:6f:2d:96:
                    6f:a3:54:a5:60:08:6a:eb:08:78:72:ee:41:0e:72:
                    9f:1a:08:62:30:b0:a3:ec:98:eb:66:75:52:58:9b:
                    99:37:0c:0a:d4:96:65:e2:c3:0a:5b:96:49:05:f6:
                    93:77:52:71:14:aa:4b:c4:c4:ab:76:c5:31:8f:10:
                    07:b1:78:5a:50:e1:2d:e9:2d:7c:68:66:3c:1d:b0:
                    9e:b2:a6:19:e6:0d:32:ea:5f:5e:d0:b1:1b:64:42:
                    78:56:6e:d1:86:45:a6:45:40:c7:28:5c:a2:72:df:
                    aa:28:ab:da:97:af:07:b8:a5:9d:9f:c3:d4:d2:60:
                    10:fb:78:ed:fd:7e:f2:fe:1f:5f:d1:89:85:4f:b9:
                    1e:af:73:27:37:b2:b1:16:b3:5b:e6:45:cf:cc:2e:
                    02:59:a0:13:d5:42:dd:9e:d0:2e:b9:3f:00:79:af:
                    cc:7f:3a:ca:c2:d4:bf:3a:e2:0a:05:1a:2a:f9:ae:
                    2a:bd:19:02:f3:2f:03:c8:1c:e3:98:3f:b0:8d:e3:
                    4a:89:29:3c:26:76:32:e3:7d:5b:89:aa:95:a9:23:
                    24:79:78:3d:08:cc:25:fc:49:f2:e0:53:dd:d7:35:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:33:93:96:F1:0C:46:CB:9F:5B:00:AC:C7:28:67:0E:86:41:CF
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:c3:b5:37:5a:72:e4:31:e5:cc:c4:02:2f:21:52:6b:22:
         97:47:5a:e5:16:b4:f9:21:2a:0a:d4:f2:81:01:77:31:a1:7c:
         45:11:17:8b:68:0d:96:5e:75:00:ec:20:a8:7c:16:ea:1c:9c:
         56:59:ad:9e:13:fd:78:c9:07:2c:8c:d1:58:93:ca:bd:05:31:
         0f:3d:eb:25:35:82:2c:b9:a2:d5:1b:64:de:e8:8e:d6:f6:80:
         62:9b:40:a1:dd:c6:eb:66:d1:01:e7:2d:f6:71:d4:79:a7:1b:
         9c:1e:1a:d6:cf:6a:83:be:47:b4:64:0d:60:72:d9:81:f6:d0:
         28:d4:9a:43:fb:32:ed:80:6f:8b:6d:df:54:f4:23:3b:5d:9c:
         22:87:f2:e0:e1:47:fe:2c:02:dc:2f:50:7d:d5:45:c6:96:6c:
         38:53:dd:fa:a1:89:a3:87:f2:2a:c5:f1:a5:b0:bc:92:37:2e:
         b3:9c:87:94:95:92:3e:11:5f:87:76:e8:14:b9:2f:9a:77:fb:
         7b:24:87:7b:9b:cc:8b:c8:10:3e:cb:38:a3:93:e9:7b:c2:6f:
         04:58:6b:84:72:13:99:42:cd:6f:06:8b:0b:c7:b6:77:1a:d9:
         67:fb:3c:ed:1d:b1:7e:c4:79:86:b3:e2:d7:62:4c:ef:11:ea:
         8a:c5:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:24 2025 by rpki-client