Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File:                     AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier:          H6/MXxW40jWxSHfeQJraT5eZEMlRcFHLnIm8l6JSj1w=
Subject key identifier:   49:01:75:34:C2:01:5C:26:B8:60:3F:26:29:54:32:86:0F:41:5F:4A
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer:       /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number:          058D
Signing time:             Sun 19 Oct 2025 00:55:13 +0000
Manifest this update:     Sun 19 Oct 2025 00:55:12 +0000
Manifest next update:     Sun 26 Oct 2025 00:55:12 +0000
Files and hashes:         1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: v71ZQZXvMqVQejJrESHqUQdkqtrMbeFeo4ao+YGJups=)
                          2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
                          rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
        Validity
            Not Before: Oct 19 00:55:12 2025 GMT
            Not After : Oct 26 00:55:12 2025 GMT
        Subject: CN=68f436f1-6b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:a2:68:73:df:a9:51:c1:61:2d:32:45:7f:
                    c8:0d:07:18:4a:d0:47:ac:35:87:4f:59:54:82:50:
                    f2:9f:c0:7d:65:9a:f5:13:6f:7e:13:f7:95:f2:2a:
                    c6:59:1b:4c:c8:fc:3d:12:f8:86:8f:03:c1:c0:50:
                    33:42:e2:fa:8e:d7:e8:aa:6f:5f:37:ce:c8:27:59:
                    ef:f3:7d:cc:fc:c7:5d:54:39:cb:58:f0:83:33:80:
                    d3:6b:12:ed:1c:bd:79:fb:07:2b:ae:b5:88:e5:3c:
                    92:95:ef:2b:ba:12:b1:49:dc:39:f6:40:fe:e7:b7:
                    89:09:29:45:94:70:36:21:a0:3c:bc:3f:0b:fb:29:
                    93:f8:73:96:06:32:1b:c4:38:21:1c:fa:bc:f5:da:
                    80:78:21:f0:d4:04:9a:c7:31:5e:00:09:21:b7:55:
                    57:7c:45:b7:91:35:8d:d6:ee:aa:3b:b9:84:84:97:
                    3c:c6:db:6b:29:6f:5d:bd:2f:b3:35:11:9f:40:bd:
                    59:5e:55:db:21:cb:d7:da:02:5a:15:0f:87:4d:ee:
                    9c:26:db:42:17:ed:d8:67:89:78:9c:0c:a4:50:a9:
                    d7:c9:59:3b:c4:2f:ee:47:94:10:c0:9d:41:40:ec:
                    aa:07:f2:e4:9e:3d:09:ab:a2:d7:61:c3:cb:55:95:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:75:34:C2:01:5C:26:B8:60:3F:26:29:54:32:86:0F:41:5F:4A
            X509v3 Authority Key Identifier:
                keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:f2:eb:df:f6:db:33:41:d3:52:4f:38:03:26:d0:84:f6:
         28:cd:80:69:22:5d:03:79:f1:4d:0a:71:82:a0:df:a1:55:66:
         24:e5:8b:b0:a7:4d:e3:e3:25:03:1c:83:23:d7:43:59:4c:1b:
         c6:d1:1b:e0:ee:ae:a0:1f:5e:c2:73:b3:a8:60:17:cd:6b:9d:
         e3:1c:a9:9d:9f:ac:32:f6:44:95:ab:f7:48:f3:24:44:2a:c5:
         c4:26:0c:43:3b:01:2a:e9:0b:dc:38:ba:40:8d:2d:b4:82:aa:
         0b:fb:8e:c8:a0:fd:a8:b9:04:5f:75:c3:68:a8:d1:4e:82:78:
         f7:81:38:36:1c:ad:d3:62:30:31:66:0c:63:33:98:7c:60:71:
         19:b3:70:42:9e:fd:ec:c8:69:db:d4:bc:a9:ad:00:93:44:ed:
         6a:ce:ce:bd:96:e0:64:5a:0d:e3:32:95:17:0a:08:2e:b3:74:
         e0:22:cc:94:2c:e9:40:13:0d:9e:e7:dc:b0:41:4a:f8:fb:35:
         90:83:af:99:98:56:95:29:34:74:cb:71:46:25:e8:0e:77:3d:
         46:f1:96:a6:fd:65:f6:ca:9a:5b:06:16:de:b6:b8:34:b1:37:
         92:85:41:a6:86:e8:e9:bc:fe:fb:7a:2d:a6:aa:9f:fc:88:9c:
         5c:25:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:09 2025 by rpki-client