Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File:                     MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier:          EMKQf4iDpGbA98Ot/29k9wZOuKJQllNOL7tgKWEga84=
Subject key identifier:   C9:C7:67:A2:81:41:D6:EB:FD:01:12:AB:AD:C1:E0:AF:77:E9:81:DD
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer:       /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial:       0308
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number:          0304
Signing time:             Sun 19 Oct 2025 03:16:49 +0000
Manifest this update:     Sun 19 Oct 2025 03:16:49 +0000
Manifest next update:     Sun 26 Oct 2025 03:16:49 +0000
Files and hashes:         1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: tWyy1RjaEmOmH7tjak/iLVAFahjMzoE7oqUd0sBb3g0=)
                          2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
                          rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
        Validity
            Not Before: Oct 19 03:16:49 2025 GMT
            Not After : Oct 26 03:16:49 2025 GMT
        Subject: CN=68f45821-c487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:ad:79:6b:65:34:0a:63:26:32:09:2e:b9:
                    1d:d2:7a:b1:fd:f2:8b:89:5d:6f:94:a5:d6:b5:01:
                    ad:39:d7:18:09:c9:2a:9a:d8:b4:76:03:46:d2:df:
                    42:a5:04:5b:bc:78:23:fa:82:8a:ba:fc:8a:6a:06:
                    23:57:5d:f2:17:b1:71:20:eb:ba:14:d3:68:d0:61:
                    66:f8:87:03:eb:d0:f2:c5:f7:d1:67:34:e3:ab:64:
                    ff:ba:45:84:71:8d:ed:44:8f:9b:79:eb:76:2d:e4:
                    90:c6:c6:ad:5b:6e:cb:25:d8:b0:d8:f5:17:bd:df:
                    49:33:b6:3d:5c:74:b5:27:9d:7a:2e:21:c9:2f:7f:
                    5b:e4:ae:4d:41:04:ee:02:f3:94:47:e4:f7:08:23:
                    bd:d7:69:f0:78:7d:f2:ad:2f:9d:c9:6a:12:80:90:
                    83:02:10:96:8d:cb:8e:eb:cf:33:53:c3:07:c0:4d:
                    2e:c8:3f:a2:98:8b:b1:83:5e:8c:4e:07:1b:0b:ca:
                    ac:fb:76:9a:a3:75:d7:f6:13:e6:66:8d:6d:72:8b:
                    07:77:c8:48:ce:7c:9a:1c:df:a0:55:93:fc:30:3c:
                    36:7f:6e:df:a3:4d:85:62:98:5d:1d:01:c0:6e:b0:
                    29:68:4e:c2:d4:d2:f5:bc:00:ef:d6:8a:24:d1:bd:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:67:A2:81:41:D6:EB:FD:01:12:AB:AD:C1:E0:AF:77:E9:81:DD
            X509v3 Authority Key Identifier:
                keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:59:5d:86:12:45:9f:ae:77:5d:fb:44:32:60:64:8b:02:
         84:f9:7e:1c:db:a1:9e:1e:df:04:df:2e:14:7a:a0:ca:5c:f5:
         68:91:02:82:2c:92:20:90:77:b1:75:85:b4:08:81:e1:b4:6c:
         58:53:2a:c7:8e:dc:33:82:f1:62:88:36:b5:43:44:c2:87:7f:
         4f:97:c4:e2:46:c3:8f:33:d9:d4:1d:a0:04:ed:c0:4b:a8:14:
         25:b7:79:df:f1:27:17:7f:c6:e4:ea:cb:de:c2:2e:72:54:7e:
         69:d9:d7:6f:17:9e:26:d8:ea:c5:e5:b8:78:a3:d8:dd:1e:42:
         90:f4:e8:4d:cf:69:9e:9d:07:9e:cd:5e:cb:dd:a9:51:16:5d:
         d5:e2:be:f1:c8:a4:74:28:fe:c4:ad:79:b4:ee:f3:95:ec:7b:
         4f:91:ee:d1:a6:f3:37:df:eb:7c:51:20:d8:b3:46:04:c5:79:
         14:6d:e7:79:91:1e:11:83:28:8a:cb:8b:29:ac:6a:d5:2c:ac:
         ad:e1:3c:ef:5d:3b:d2:9d:2d:ff:0d:64:19:8d:33:33:a8:3a:
         39:8e:49:82:33:dd:05:91:0a:9c:16:9a:54:3b:86:2a:26:1f:
         75:69:75:c0:de:52:20:08:a3:7d:87:9e:58:6c:56:63:59:db:
         44:e9:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:03 2025 by rpki-client