Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
File:                     xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json)
Hash identifier:          14VPgoUCL5TTnUWGbz9aQhvHR2bnQboi3I7SqcUdKGc=
Subject key identifier:   0F:B7:81:C6:38:A8:04:A3:23:C1:D7:83:FF:5A:81:D0:F0:A9:A0:45
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Certificate issuer:       /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial:       04FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
Manifest number:          04F4
Signing time:             Sun 19 Oct 2025 01:31:11 +0000
Manifest this update:     Sun 19 Oct 2025 01:31:10 +0000
Manifest next update:     Sun 26 Oct 2025 01:31:10 +0000
Files and hashes:         1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: EtDGLGOzk1n7a+sksHGj/aGTN2hHc5/XfX33v/Tq9iI=)
                          2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
        Validity
            Not Before: Oct 19 01:31:10 2025 GMT
            Not After : Oct 26 01:31:10 2025 GMT
        Subject: CN=68f43f5f-a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:19:02:eb:34:01:e4:0d:59:85:26:cd:c6:
                    2c:a4:9f:33:7a:22:23:b8:a3:4a:c7:a3:0d:94:8c:
                    17:1c:52:ae:88:6b:42:16:85:df:11:ac:99:eb:7c:
                    21:ef:99:0d:d6:0f:ce:cc:96:08:68:4e:11:ff:fe:
                    af:ec:08:87:4a:87:2d:ac:60:4f:fb:db:40:0d:22:
                    f2:e1:d8:5c:1c:b8:e2:a1:9f:16:7f:94:44:c9:49:
                    29:23:6c:ff:d5:71:65:6d:50:0e:93:cf:1b:1f:8d:
                    3f:87:15:ed:5a:73:59:e9:ba:db:b4:ae:84:cc:6a:
                    2d:80:eb:09:fd:32:a5:ae:10:65:87:eb:0a:d2:90:
                    4c:69:02:df:a3:a1:f8:9a:de:87:4d:28:e9:c6:08:
                    77:9b:49:e8:a6:fd:58:0c:c9:b6:06:14:1c:70:20:
                    6d:1b:c5:73:cd:f6:b6:66:45:5d:76:fd:12:27:4e:
                    33:31:27:e9:83:35:0c:2a:55:f2:b7:65:f2:7c:93:
                    ce:5e:9a:a3:c3:fa:7c:77:48:25:ea:ab:11:09:4f:
                    50:9e:80:eb:1a:c5:83:0f:7a:4e:4e:31:79:8f:a4:
                    0e:1b:92:af:f5:9d:cd:a1:46:a2:1c:e1:ce:c7:f3:
                    2e:3f:95:12:46:d5:8a:97:e4:8f:d8:a4:3f:54:d6:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B7:81:C6:38:A8:04:A3:23:C1:D7:83:FF:5A:81:D0:F0:A9:A0:45
            X509v3 Authority Key Identifier:
                keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:f9:33:60:fb:43:dd:f4:03:eb:f2:78:c0:4b:bb:1a:6d:
         7e:25:b1:63:95:15:70:ad:43:d2:cc:e6:61:5e:33:b2:01:86:
         fb:43:90:70:d9:95:3a:e4:00:d5:ae:00:b9:cb:87:c6:ce:4f:
         ee:54:2f:92:bb:36:e5:93:fb:59:4b:74:b2:18:4d:e1:26:11:
         26:93:cb:e4:b7:ca:db:ea:61:9d:2d:df:5b:37:28:eb:d3:44:
         0f:d2:36:61:12:6e:e9:f3:38:a9:b0:04:2b:ce:4c:06:86:b7:
         04:3f:ec:84:6d:3e:d2:3b:dd:ac:9b:4c:14:60:95:f8:5a:41:
         b7:62:74:e2:4f:55:ed:62:9f:02:86:33:98:10:c9:a8:eb:b2:
         3f:63:29:4f:47:3b:32:69:a4:97:86:c0:ef:42:63:00:35:e5:
         56:93:7a:95:25:7e:ee:be:ad:8d:d9:6d:8e:52:27:38:06:62:
         9e:9e:7a:79:f0:ab:d0:2c:65:0c:af:b6:e4:51:21:ab:7e:e8:
         50:98:5a:dd:00:7d:1b:bf:8a:a1:6c:30:73:8c:b1:87:20:e4:
         0f:80:73:d0:f5:90:ec:b1:00:64:e2:79:91:96:ca:38:0d:89:
         a4:9b:50:ee:34:06:67:8b:69:f9:68:03:32:e9:d9:5b:9d:30:
         b7:7b:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:32 2025 by rpki-client